Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

gmp.create_ticket adds ACL to ticket without verifying if permission already exists #1165

Open
frakbe opened this issue Aug 6, 2024 · 0 comments

Comments

@frakbe
Copy link

frakbe commented Aug 6, 2024

Expected behavior

When creating a new ticket with function gmp.create_ticket it should verify if the assigned user has already read permission to the task

Current behavior

When creating a new ticket with function gmp.create_ticket it adds a new ACL on ticket with read permission to user, without verifying if the user had already read permission to the task.

Steps to reproduce

  1. Give read permission to USER1 for task TASK1
  2. Run task TASK1
  3. Pick a result (UUIDRES1) of TASK1 and use the function gmp.create_ticket (gmp.create_ticket(result_id = UUIDRES1, assigned_to_user_id = USER1)
  4. Go to permission tab of TASK1 and observe a new read ACL for user USER1 with label "Automatically created for ticket"

GVM versions

gsa: (gsad --version)

gvm: (gvmd --version)

openvas-scanner: (openvassd --version)

gvm-libs:

gvm-tools: (gvm-cli --version)

gvm-cli 24.1.0 (API version 24.1.0)

Environment

Operating system:

RHEL8.10

Installation method / source: (packages, source installation)

Installed from pip

Logfiles


Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant