fix(dropdownfield): restrict itemtypes assignables to ticket

Signed-off-by: Thierry Bugier <[email protected]>

Author: btry

inc/fields/dropdownfield.class.php

@@ -123,7 +123,12 @@ public function displayField($canEdit = true) {
                   break;
 
                default:
-                  if (in_array($itemtype, $CFG_GLPI['ticket_types'])) {
+                  $assignableToTicket = in_array($itemtype, $CFG_GLPI['ticket_types']);
+                  if (Session::getLoginUserID()) {
+                     // Restrict assignable types to current profile's settings
+                     $assignableToTicket = CommonITILObject::isPossibleToAssignType($itemtype);
+                  }
+                  if ($assignableToTicket) {
                      $userFk = User::getForeignKeyField();
                      $groupFk = Group::getForeignKeyField();
                      $canViewAllHardware = Session::haveRight('helpdesk_hardware', pow(2, Ticket::HELPDESK_ALL_HARDWARE));