From 56d3ac668cd44d6cdde31aa9c25f541649bb3d7e Mon Sep 17 00:00:00 2001
From: v-dumas <vincent.dumas@combodo.com>
Date: Tue, 17 Dec 2024 16:31:59 +0100
Subject: [PATCH] =?UTF-8?q?N=C2=B08047=20-=20SuperUser=20profile=20moved?=
 =?UTF-8?q?=20under=20iTop=20Community=203.2.1?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../datamodel.itop-oauth-client.xml           | 17 ++++
 .../datamodel.itop-profiles-itil.xml          | 95 +++++++++++++++++++
 2 files changed, 112 insertions(+)

diff --git a/datamodels/2.x/itop-oauth-client/datamodel.itop-oauth-client.xml b/datamodels/2.x/itop-oauth-client/datamodel.itop-oauth-client.xml
index f2321aa2e..ddf664aba 100644
--- a/datamodels/2.x/itop-oauth-client/datamodel.itop-oauth-client.xml
+++ b/datamodels/2.x/itop-oauth-client/datamodel.itop-oauth-client.xml
@@ -952,5 +952,22 @@ HTML
         </classes>
       </group>
     </groups>
+    <profiles>
+      <profile id="117" _delta="if_exists">
+        <!-- SuperUser -->
+        <groups>
+          <group id="OauthConnection">
+            <actions>
+              <action id="action:read">allow</action>
+              <action id="action:write">allow</action>
+              <action id="action:delete">allow</action>
+              <action id="action:bulk read">allow</action>
+              <action id="action:bulk write">allow</action>
+              <action id="action:bulk delete">allow</action>
+            </actions>
+          </group>
+        </groups>
+      </profile>
+    </profiles>
   </user_rights>
 </itop_design>
diff --git a/datamodels/2.x/itop-profiles-itil/datamodel.itop-profiles-itil.xml b/datamodels/2.x/itop-profiles-itil/datamodel.itop-profiles-itil.xml
index 47e7a47bb..7194df204 100755
--- a/datamodels/2.x/itop-profiles-itil/datamodel.itop-profiles-itil.xml
+++ b/datamodels/2.x/itop-profiles-itil/datamodel.itop-profiles-itil.xml
@@ -183,8 +183,103 @@
           <class id="SynchroLog"/>
         </classes>
       </group>
+      <group id="AdminSysReadOnly" _delta="define">
+        <classes>
+          <class id="ItopFenceLogin"/>
+        </classes>
+      </group>
+      <group id="AdminSys" _delta="define">
+        <classes>
+          <class id="ResourceDesignerConnectorMenu"/>
+          <class id="ResourceSystemMenu"/>
+          <class id="RessourceHybridAuthMenu"/>
+        </classes>
+      </group>
     </groups>
     <profiles>
+      <profile id="117" _delta="define">
+        <name>SuperUser</name>
+        <description>This profil allows all actions which are not Administrator restricted.</description>
+        <groups>
+          <group id="AdminTools">
+            <actions>
+              <action id="action:read">allow</action>
+              <action id="action:write">allow</action>
+              <action id="action:delete">allow</action>
+              <action id="action:bulk read">allow</action>
+              <action id="action:bulk write">allow</action>
+              <action id="action:bulk delete">allow</action>
+            </actions>
+          </group>
+          <group id="AdminSysReadOnly">
+            <actions>
+              <action id="action:read">allow</action>
+              <action id="action:bulk read">allow</action>
+            </actions>
+          </group>
+          <group id="AdminSys">
+            <actions>
+              <action id="action:read">allow</action>
+              <action id="action:write">allow</action>
+            </actions>
+          </group>
+          <group id="History">
+            <actions>
+              <action id="action:bulk read">allow</action>
+            </actions>
+          </group>
+          <group id="*">
+            <actions>
+              <action id="action:read">allow</action>
+              <action id="action:bulk read">allow</action>
+              <action id="action:write">allow</action>
+              <action id="action:bulk write">allow</action>
+              <action id="action:delete">allow</action>
+              <action id="action:bulk delete">allow</action>
+            </actions>
+          </group>
+          <group id="UserRequest">
+            <actions>
+              <action id="stimulus:ev_approve">allow</action>
+              <action id="stimulus:ev_assign">allow</action>
+              <action id="stimulus:ev_close">allow</action>
+              <action id="stimulus:ev_dispatch">allow</action>
+              <action id="stimulus:ev_pending">allow</action>
+              <action id="stimulus:ev_reassign">allow</action>
+              <action id="stimulus:ev_reject">allow</action>
+              <action id="stimulus:ev_reopen">allow</action>
+              <action id="stimulus:ev_resolve">allow</action>
+            </actions>
+          </group>
+          <group id="Incident">
+            <actions>
+              <action id="stimulus:ev_assign">allow</action>
+              <action id="stimulus:ev_reassign">allow</action>
+              <action id="stimulus:ev_resolve">allow</action>
+              <action id="stimulus:ev_close">allow</action>
+              <action id="stimulus:ev_pending">allow</action>
+            </actions>
+          </group>
+          <group id="Change">
+            <actions>
+              <action id="stimulus:ev_approve">allow</action>
+              <action id="stimulus:ev_assign">allow</action>
+              <action id="stimulus:ev_finish">allow</action>
+              <action id="stimulus:ev_plan">allow</action>
+              <action id="stimulus:ev_reject">allow</action>
+              <action id="stimulus:ev_reopen">allow</action>
+            </actions>
+          </group>
+          <group id="Problem">
+            <actions>
+              <action id="stimulus:ev_reassign">allow</action>
+              <action id="stimulus:ev_assign">allow</action>
+              <action id="stimulus:ev_resolve">allow</action>
+              <action id="stimulus:ev_close">allow</action>
+            </actions>
+          </group>
+        </groups>
+      </profile>
       <profile id="3" _delta="define">
         <name>Configuration Manager</name>
         <description>Person in charge of the documentation of the managed CIs</description>