Forum GLPI-Project

nquiniou

Member

From: Ille-et-Vilaine (35)

Registered: 2013-02-12

Posts: 84

[Behaviors] Cloning default profile change default profile

Hello,

In Behaviors plugin (2.0.2), I notice that cloning default profile change default profile.

Steps to reproduce :
1. In Administration -> Profiles, select your default profile (ex : Self-Service)
2. Clone your default profile to "Clone of my default profile"

Actual result : "Clone of my default profile" becomes default profile.

Expected result : Your default profile (ex : Self-Service) stays default profile.

This behavior can lead to security issues if you clone Self-Service profile and add many rights to "Clone of my default profile". Indeed, users with no authorizations rules will get "Clone of my default profile" profile.

yllen

GLPI-DEV

From: Sillery (51)

Registered: 2008-01-14

Posts: 15,278

Re: [Behaviors] Cloning default profile change default profile

When you clone a profile, you clone all this profile.
In GLPI you can't have two default profiles. The new default profile deactivate the old one.

So, you must delete default profile before clone the profile

---

CentOS 6.5 - CentOS 7.x
PHP 5.6 - PHP 7.x - MySQL 5.6  - MariaDB 10.2 + APC + oOPcache
GLPI from 0.72 to dev version
Certifiée ITIL (ITV2F, ITILF, ITILOSA)