I made changes to permissions, and I can see that it is not being logged. This is a security issue and should be fixed immediately. We cannot have people changing permissions undetected.
It sounds more like an enhancement request.
I agree with both Christopher and Jonathan. We never logged permissions and this has never come up before, so I would also classify this as an enhancement. But at the same time I think it would be a very good and valuable addition. Currently there is some work done on permissions, we might want to wait for bug 20813 before implementing this.
I'm fine with waiting. Added dependency.
It looks like bug 20813 is not happening, we might want to come back to this.
We definitely want to come back to this, there is a whole slew of legislation out right now that is going to require certifications that changes such as this can be audited (at least in the US, and I presume elsewhere).
Also, due to the legalities, this is an actual missing feature that qualifies as a bug.
Should it be in the action_logs? Maybe another table?
It would be good to also log permission changes via Koha::Logger with a namespace so these changes can be logged to external facilities.
I think action_logs would be the logical place for it as it also has the other changes to the patron account for the librarians as it can be looked up easily then, but something extermal might be nice additionally.