core-geonetwork icon indicating copy to clipboard operation
core-geonetwork copied to clipboard

User administrators can update their own user to remove the user administrator profile

Open josegar74 opened this issue 2 years ago • 0 comments

Describe the bug User administrator can edit and update their own users to remove the user administrator profile, that should not be allowed.

To Reproduce

Steps to reproduce the behavior:

  1. With an Administrator user created a user with a profile User administrator.
  2. Login with the User administrator user and go to the users management.
  3. Edit the User administrator user, remove the user administrator profile and save the user.
  4. The user is no longer displayed in the list

Expected behavior User administrator user can't remove this profile from their own user configuration.

josegar74 avatar Jan 13 '23 07:01 josegar74