Currently there is no easy way to see which permissions a specific user effectively has. Permissions are assigned through user groups, so answering the question "why can/can't this user do X?" requires manually checking every group the user belongs to and mentally resolving the resulting values. This is tedious and error-prone.
This feature adds a dedicated page that lists all permissions of a single user together with their effective values and the groups those values originate from.
Proposed solution
- Add a new entry to the context menu of a user in the user management (ACP). Selecting it opens the new permission overview page for that user.
- The page lists all permissions of the selected user, grouped into tabs and sub-tabs (mirroring the existing category structure used for group permissions).
- For each permission the following is displayed: Name of the permission, description of the permission, the value currently active for this user, the user group(s) the effective value is derived from.
- It should be possible to edit permissions directly from this page. A dialog similar to
UserGroupOptionForm would be a reasonable approach, so the existing form field types and validation logic can be reused.
- It would also be helpful to have the option to filter the list by a search term.
Currently there is no easy way to see which permissions a specific user effectively has. Permissions are assigned through user groups, so answering the question "why can/can't this user do X?" requires manually checking every group the user belongs to and mentally resolving the resulting values. This is tedious and error-prone.
This feature adds a dedicated page that lists all permissions of a single user together with their effective values and the groups those values originate from.
Proposed solution
UserGroupOptionFormwould be a reasonable approach, so the existing form field types and validation logic can be reused.