[Fiware-tech-help] Too easy to disable admin in Keyrock IDM interface

[Taz Lodder]

Hi (again)


In testing, I accidentally managed to disable my admin rights when logged in as the only admin in the system in the Keyrock IDM interface.


All I had to do was:

1 In the application, click on Authorize

2 Click on the role list next to the admin user and deselect Purchase and Provider

3 Save


I had to recover by manually adding the relevant back into the role_assignment table:

MariaDB [idm]> insert into role_assignment (oauth_client_id, role_id, user_id) values ("[from user_authorized_application]", "provider", "admin");

(this was not strictly necessary)
MariaDB [idm]> insert into role_assignment (oauth_client_id, role_id, user_id) values ("[from user_authorized_application]", "purchaser", "admin");

I don't feel it should so easy to do this. Please could this be handled somehow so it isn't possible to disable yourself as an admin when logged in as the only admin in the system and/or have the usual annoying (but useful here) "Are you really really sure you want to do this?" notification.

Thanks!
Taz
Chalmers University of Technology
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/fiware-tech-help/attachments/20211111/d29226ea/attachment.html>