Role permissions vs extra permissions

[bilogic]

Hi,

Currently, all the permissions are mixed into 1 field users.permissions, I think there are a few problems:

1. If we change the user's role, it might remove some extra permissions assigned previously.
2. It can be difficult to determine which user has extra permissions. (It is good to check users with extra permissions regularly to make sure nobody has unauthorized permissions)

My suggestion is to have a separate field, e.g. users.permissions_extra and merge them together in the user model.
I'm happy to code this if @tabuna is ok.

Thank you.

[bilogic]

Sorry, please ignore what I have written above, My understanding was incorrect. Extra permissions are stored in users.permissions and Role permissions are stored in roles.permissions.