Forum GLPI-Project

livelinux

Member

From: Poland

Registered: 2023-06-06

Posts: 6

[SOLVED] Disappearing entity authorization after GLPI upgrade

Hello GLPI Users and Developers,
we use GLPI since 2015 as an IT helpdesk.
For a long time, it was in the 0.8 something (don't remember precisely) version running on php5.6.
I have recently decided to migrate to the latest version (10.0.7) on php8.2 and upgrade machine's OS also to the latest version (ubuntu 22.04.2).
GLPI uses mysql 8.0.33, users log to internal GLPI database and there is only one entity.
Generally upgrade was completed succesfully, but I noticed one weird problem:
randomly users lose their entity authorization and cannot log on to GLPI.
I have to manually add user the authorization (Administration -> Users -> (user) -> Authorizations).
Have you encounter that problem? Do you know how to fix it?

P.S. I have only found this related topic with users losing their authorization:
forum.glpi-project.org/viewtopic.php?id=284668
but I don't have a problem with reassigning them to the entity, but why ever the authorization is being lost?

Last edited by livelinux (2023-07-03 13:03:47)

---

POSIX-compliant

cconard96

Moderator

Registered: 2018-07-31

Posts: 2,813

Website

Re: [SOLVED] Disappearing entity authorization after GLPI upgrade

Hello,

Do you have any Authorization Assignment Rules (Administration > Rules) set up that could be messing with the profile assignments?
As far as I know, profiles that are assigned dynamically (through rules) are re-evaluated at each login. These profiles show up in the user's authorizations tab with a (D) next to the profile name.
If the rule(s) that set these are disabled or missing, they could be deleted.

By default, there is a single rule that assigns everyone the Self Service profile on the Root Entity.

---

GLPI Collaborator and Plugin Developer.
My non-English comments are automated translations. Sorry for any confusion that causes.
Mes commentaires non anglais sont des traductions automatiques. Désolé pour toute confusion qui cause.
Mis comentarios que no están en inglés son traducciones automáticas. Perdón por cualquier confusión que cause.

livelinux

Member

From: Poland

Registered: 2023-06-06

Posts: 6

Re: [SOLVED] Disappearing entity authorization after GLPI upgrade

Hello,
there was an inactive test rule with no criteria nor rules. I removed that but also accidentally removed that mentioned Root Entity rule
I noticed new users are still being assigned correctly to my entity without that default rule (probably because there is only one entity).
There is a "glpi_profiles_users" database table and some users have "is_dynamic" field set to 1.
I guess setting them the value to 0 would disable that rules re-evaluation you mentioned

---

POSIX-compliant

livelinux

Member

From: Poland

Registered: 2023-06-06

Posts: 6

Re: [SOLVED] Disappearing entity authorization after GLPI upgrade

Thank you cconard96 for help. It seems that changes to mysql database table, mentioned in my previous post, fixed the problem. I marked this topic as SOLVED.

---

POSIX-compliant