You are not logged in.

Announcement

 Téléchargez la dernière version stable de GLPI      -     Et vous, que pouvez vous faire pour le projet GLPI ? :  Contribuer
 Download last stable version of GLPI                      -     What can you do for GLPI ? :  Contribute

#1 2018-04-10 15:22:49

nquiniou
Member
From: Ille-et-Vilaine (35)
Registered: 2013-02-12
Posts: 84

[Behaviors] Cloning default profile change default profile

Hello,

In Behaviors plugin (2.0.2), I notice that cloning default profile change default profile.

Steps to reproduce :
1. In Administration -> Profiles, select your default profile (ex : Self-Service)
2. Clone your default profile to "Clone of my default profile"

Actual result : "Clone of my default profile" becomes default profile.

Expected result : Your default profile (ex : Self-Service) stays default profile.

This behavior can lead to security issues if you clone Self-Service profile and add many rights to "Clone of my default profile". Indeed, users with no authorizations rules will get "Clone of my default profile" profile.

Offline

#2 2018-04-17 16:23:39

yllen
GLPI-DEV
From: Sillery (51)
Registered: 2008-01-14
Posts: 15,273

Re: [Behaviors] Cloning default profile change default profile

When you clone a profile, you clone all this profile.
In GLPI you can't have two default profiles. The new default profile deactivate the old one.

So, you must delete default profile before clone the profile


CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)

Offline

Board footer

Powered by FluxBB