Artemis Settings allow setting names

[dfuchss]

Describe the bug

I've come across the menu at /account/settings where users can set names. In our context this is not wanted as we synchronize the names via Shibboleth / SAML2. Also it provides an attack surface because many search fields let us instructors search by name instead of identifier (which many typically do). I'd suggest to include an option to disable that functionality or even disable it by default if SAML2 is active.

To Reproduce

1. Go to 'Account Settings
2. Edit your name

Expected behavior

Users shall not be able to set their name if they are centrally synced.

Screenshots

No response

Which version of Artemis are you seeing the problem on?

8.8.5

What browsers are you seeing the problem on?

Chrome

Additional context

No response

Relevant log output

[angatha]

Is it also possible to edit the email?

[dfuchss]

I guess so; I just have seen the UI but didn't change anything. Might be the case that the issue is that SAML2 user accounts are "internal" user accounts as far as I know

[b-fein]

Likely a similar case: editing name & email should probably also be disabled when using an LDAP connection.

(Did not test it. We are also using SAML2.)

[dfuchss]

As far as I understood @krusche it is disabled for users that are marked as "external" however, SAML2 users are not external but marked as internal:

[dfuchss]

I'd suggest to mark users as external if they login via SAML2 We need local login still available even if using SAML2 .. thus, internal users are needed.

[dfuchss]

Likely a similar case: editing name & email should probably also be disabled when using an LDAP connection.

(Did not test it. We are also using SAML2.)

After looking into the problem, I'd suggest to disable it for non-admins in SAML2 instances. Internal users are pretty useful to deal with login workflows even with SAML2 (non-internal users cannot login with username and password)