fix(agent): machine account creation

Must hack to workaround a security check in GLPI
This check should probably move elsewhere, a PR shjould be submitted for GLPI
Until then, this hack must be in place!

Signed-off-by: Thierry Bugier <tbugier@teclib.com>

inc/agent.class.php

@@ -1312,34 +1312,37 @@ protected function enrollByInvitationToken($input) {
          'users_id'         => $userId,
       ]);
 
+      // Awful hack because the current user profile does not
+      // have more rights than the profile of the agent.
+      // @see User::post_addItem()
+      // @see Profle::currentUserHaveMoreRightThan()
+      // @see Profile::getUnderActiveProfileRestrictRequest()
+      $backupProfileRight = $_SESSION['glpiactiveprofile']['profile'];
+      $_SESSION['glpiactiveprofile']['profile'] = $_SESSION['glpiactiveprofile']['profile'] | CREATE;
+
       //create agent user account
       $agentAccount = new User();
       $agentAccount->add([
          'usercategories_id' => $config['agentusercategories_id'],
          'name'              => 'flyvemdm-' . PluginFlyvemdmCommon::generateUUID(),
          'realname'          => $serial,
+         'profiles_id'       => $config['agent_profiles_id'],
          '_profiles_id'      => $config['agent_profiles_id'],
-         'profiles_id'       => $config['agent_profiles_id'], // Default profile when user logs in
          '_entities_id'      => $entityId,
          '_is_recursive'     => 0,
          'authtype'          => Auth::DB_GLPI,
       ]);
 
+      // End of awful hack !
+      $_SESSION['glpiactiveprofile']['profile'] = $backupProfileRight;
+
       if ($agentAccount->isNewItem()) {
          $event = __('Cannot create a user account for the agent', 'flyvemdm');
          $this->filterMessages($event);
          $this->logInvitationEvent($invitation, $event);
          return false;
       }
 
-      // Awful hack because the current user profile does not
-      // have more rights than the profile of the agent.
-      // @see User::post_addItem
-      $profileId = $config['agent_profiles_id'];
-      $agentUserId = $agentAccount->getID();
-      $DB->query("UPDATE `glpi_profiles_users` SET `profiles_id` = '$profileId'
-                  WHERE `users_id` = '$agentUserId'");
-
       $agentToken = User::getToken($agentAccount->getID(), 'api_token');
       if ($agentToken === false) {
          $event = __('Cannot create the API token for the agent', 'flyvemdm');