changing realm of a token that has a user assigned is breaking it

[sepp67]

privacyidea 3.9.1
ubuntu 20

On the web interface, changing the realm of a token that still has a user asigned, breaks this token.

The token is still shown as active on the tokens view, but it is in fact disabled. No action on the token is then possible.

The only thing that is then possible is to delete it with the token janitor.

You need first to unassign a token. Then you can change the realm.
On the web interface, it shouldn't be possible to change the realm of a token that still has a user assigned.

Kind regards

seabastien

[cornelinux]

@sepp67 What do you suggest as expected behaviour?

[sepp67]

I suggest that the button ¨Edit¨ to change the realm is inactive when the token has a user assigned.

[cornelinux]

I suggest that the button ¨Edit¨ to change the realm is inactive when the token has a user assigned.

This does not make sense. A token can be in many different realms. A token can be assigned to a user and in addition this token can be in additional realms. So disabling this button would result in a missing functionality.
Please try again.

[plettich]

We could try to disable/hide the checkbox for the realm of the assigned user to avoid manipulating it.
However we should also take a look what the API does in this case to avoid misconfiguration.