Bug 30063: Fix permission for GET /patrons