core-geonetwork
core-geonetwork copied to clipboard
User administrators can update their own user to remove the user administrator profile
Describe the bug User administrator can edit and update their own users to remove the user administrator profile, that should not be allowed.
To Reproduce
Steps to reproduce the behavior:
- With an Administrator user created a user with a profile User administrator.
- Login with the User administrator user and go to the users management.
- Edit the User administrator user, remove the user administrator profile and save the user.
- The user is no longer displayed in the list
Expected behavior User administrator user can't remove this profile from their own user configuration.