Wrong Data in Security and Accounts List of User Accounts Assigned to this Collection

[carlosmbe]

Describe the bug The list of users with access to this collection is inaccurate and lists all the users in the institution

To Reproduce Steps to reproduce the behavior:

1. Log in as petrifiedroadkill in NHMD Test Database.
2. Go to NHDM Amber Collection -> Security and Accounts
3. Click on NHMD Amber
4. See error

Expected behavior Only users with access should be shown

Screen Recording

https://user-images.githubusercontent.com/53784701/230147906-fd22dd47-c0f6-47e3-bd92-207d4e1ef20a.mp4

Desktop:

• OS: Mac OSx Ventura
• Browser: Chrome
• Specify 7 Version: statspage branch

Database Name: NHMD Test

Reported By Carlos @carlosmbe

[maxpatiiuk]

The list in the collection screen shows all users that:

• either have any policy in that collection ("Collection Access" is a policy)
• or have any role in that collection ("Full Access - Legacy" is a role)

On that screen next to each user name you can see the list of roles that user holds Thus, this is correct behavior. @carlosmbe @grantfitzsimmons should it be changed in some way to make it less confusing or is this fine?

[grantfitzsimmons]

It's not very useful to show them even if they have a role as they can't access the collection– do you agree @maxpatiiuk ?

[maxpatiiuk]

The role was manually given to them (with exception of the legacy roles) If the role was given, then I would expect the user to show up on the list. I.e, if I temporary removed collection access for a user, I would expect that to still show up on the list so that I can easily re-enable collection access. There is also a problem of collection access possibly coming from a role, rather than being a direct policy

[grantfitzsimmons]

These are all legacy roles

[emenslin]

Can recreate in edge (7.9.6)