[Enhancement]: Permissions By User search by Username

[DanielBolef]

Is there an existing issue for this?

• I have searched the existing issues

Description of problem

In Page & Module permissions settings, Permissions By User search only looks at Display Name. This makes it very difficult to determine what user is being added when multiple exist with the same name.

Description of solution

Use Username for this lookup. Usernames are unique, so it eliminates confusion. It's probably fine to have it look at both Display Name and Username, as Usernames won't have spaces so should eliminate Display Names when searching via Username.

Description of alternatives considered

Edit permissions directly in the database? Not sure how else this could be addressed.

Anything else?

No response

Do you plan to contribute code for this enhancement?

• Yes

Would you be interested in sponsoring this enhancement?

• Yes

Code of Conduct

• I agree to follow this project's Code of Conduct

[sleupold]

There is a security issue with using user names, since the permission settings might be accessible by any user with edit permission for a page, who sometimes should not get access to the user name. Ideally, display names should be unique for all users of a website.

[DanielBolef]

Maybe username search would only be enabled if the current user has access to the Users menu? It just seems like searching by display name is also a security issue, as they are not unique and granting permissions to the wrong user could be a big problem.