Bug 31533

Summary: Add opt-in/opt-out flags to patron consents
Product: Koha Reporter: Marcel de Rooy <m.de.rooy>
Component: OPACAssignee: Bugs List <koha-bugs>
Status: NEW --- QA Contact: Testopia <testopia>
Severity: enhancement    
Priority: P5 - low    
Version: Main   
Hardware: All   
OS: All   
Change sponsored?: --- Patch complexity: ---
Documentation contact: Documentation submission:
Text to go in the release notes:
Version(s) released in:
Bug Depends on:    
Bug Blocks: 20380    

Description Marcel de Rooy 2022-09-08 07:12:07 UTC
Part of the 20380 set.
Building on top of 31503.

While we now only enforce the GDPR consent if the pref is set to Enforced, we leave other consents empty. Which actually is opt-in. They need to go to the consents page and enable the specific consent.

If we would add opt-out, we can either add consents for all users or make PatronConsent a bit smarter and only register refusal (opt-out).
It feels more consistent to add all consents to the table, and add them too in the self reg process. But when you add a new consent type and mark it as opt-out, we should then populate the table too.

Do we also need a Mandatory flag? Historically, we treat the GDPR consent as such. Other consents may not be of that same category. But we might want the user to make an explicit choice there without the same exceptional approach that we use for GDPR. How do we get him on that page? If he arrives there, we can obviously allow saving only when those mandatories are filled..