Add access auditing reports

Access Auditing Reports

It would be helpful, when working on the scope of an organization, to be able to run a report for assisting audits that allows for an overview of who has access to which collections.

Overview

Ideally, one should be able to view each report in the form of a matrix, and download it in a portable format such as a CSV file.

Because user access can occur either directly through association to a collection or transitively via group membership, multiple reports would likely be required.

Depending on the organization, the number of elements on each axis may differ significantly. Therefore, being able to transpose the matrix would be nice, albiet not required.

Report 1: Collections vs Groups

Plot collections on one axis, groups on the other, and mark the intersecting cells where groups have been granted access to a collection.

Report 2: Users vs Groups

Plot users on one axis, groups on the other, and mark the intersecting cells where a user has been granted access to a group. Optionally suppress user entries where users have no access to any groups.

Report 3: Users vs Collections (direct access)

Plot collections on one axis, users on another, and mark intersecting cells where a user has been granted DIRECT access to a collection. Optionally suppress user entries where users have no direct collection grants.

Report 4: Users with “Everything” Access

A simple list of users that have been granted the “all items” level of access.

Report 5: Users with No Access

A simple list of users that are not members of any groups, and do not have direct access to any collections.