openbmc / phosphor-user-manager

Apache License 2.0
8 stars 9 forks source link

Local Admin User can edit and delete itself #3

Open lpanayioto opened 4 years ago

lpanayioto commented 4 years ago

A local user with Admin Privileges can Edit and Delete itself while it is logged in.

Unexpected behavior you saw After creating a local user called User I was able to login to User and Delete myself.

Expected behavior Current User would not be allowed to edit or delete itself.

To Reproduce Steps to reproduce the behavior:

  1. Login as root user

  2. Navigate to Access -> local users

  3. Create a local new user with admin privilege

  4. login to the new local user

  5. Navigate to Access -> local users

  6. Delete yourself

OpenBMC Information:

/etc/os-release
ID="openbmc-phosphor" NAME="Phosphor OpenBMC (Phosphor OpenBMC Project Reference Distro)" VERSION="2.8.0-dev" VERSION_ID="2.8.0-dev-1163-g24fa604c5" PRETTY_NAME="Phosphor OpenBMC (Phosphor OpenBMC Project Reference Distro) 2.8.0-dev" BUILD_ID="2.8.0-dev" OPENBMC_TARGET_MACHINE="s2600wf"

uname -a Linux s2600wf 5.4.16-86f83a8 #1 Mon Feb 3 18:58:25 UTC 2020 armv6l GNU/Linux