front end fix for 31456: Editing a superuser clears their access flags

editusers.cgi

@@ -746,6 +746,11 @@ if ($action eq 'update') {
         SendSQL("SELECT groupset FROM profiles WHERE login_name=" .
                 SqlQuote($userold));
         $groupsetold = FetchOneColumn();
+        # Updated, 5/7/00, Joe Robins
+        # We don't want to change the groupset of a superuser.
+        if($groupsetold eq $::superusergroupset) {
+          print "Cannot change permissions of superuser.\n";
+        } else {
            SendSQL("UPDATE profiles
                     SET groupset =
                          groupset - (groupset & $opblessgroupset) + $groupset
@@ -768,6 +773,7 @@ if ($action eq 'update') {
            }
 	   print "Updated permissions.\n";
        }
+    }
 
     if ($editall && $blessgroupset ne $blessgroupsetold) {
         SendSQL("UPDATE profiles

globals.pl

@@ -77,6 +77,10 @@ $::defaultqueryname = "(Default query)";
 $::unconfirmedstate = "UNCONFIRMED";
 $::dbwritesallowed = 1;
 
+# Adding a global variable for the value of the superuser groupset.
+# Joe Robins, 7/5/00
+$::superusergroupset = "9223372036854775807";
+
 sub ConnectToDatabase {
     my ($useshadow) = (@_);
     if (!defined $::db) {