Currently, we need the "edit_borrowers" to view patron data, but this causes users to need an excessive level of permission to just view data. Let's add a "list_borrowers" subpermission so that a user can view the patron information but not add/update patrons.
We'd need to add a new subpermission "list_borrowers", enable this subpermission for any user with edit_borrowers currently. Then we need to make sure the /api/v1/patrons endpoint will allow retrieval of data for this "list_borrowers" subpermission. We'll probably also want the "view patron" page to appear for this subpermission. Am I missing anything?
*** This bug has been marked as a duplicate of bug 30230 ***