django-DefectDojo icon indicating copy to clipboard operation
django-DefectDojo copied to clipboard

feature request: Role-restricted Questionare / Checklist on Engagement

Open Fatte1254 opened this issue 1 month ago • 0 comments

:warning: Note on feature completeness :warning:

We are narrowing the scope of acceptable enhancements to DefectDojo. Learn more here: https://github.com/DefectDojo/django-DefectDojo/blob/master/readme-docs/CONTRIBUTING.md

Is your feature request related to a problem? Please describe A clear and concise description of what the problem is. Problem: Currently, the questionnaire is accessible to all users who have access to a product or engagement, regardless of their role. There are no role-based access restrictions in place. However, certain questionnaires should be accessible only to specific roles — for example, some should be available only to the Product Owner and Developers, but not to the CISO department or Testers. Conversely, other questionnaires should be accessible only to the CISO department, excluding Developers and other roles.

Describe the solution you'd like Solution: Implement role-based access control for questionnaires and checklists within each engagement. Enable the creation of questionnaires (or checklists) that are accessible only to Developers and Product Owners, excluding CISO and Tester roles. Enable the creation of questionnaires (or checklists) that are accessible only to Testers. This ensures that each questionnaire is visible and editable only to the roles for which it is intended, improving data relevance and confidentiality.

Fatte1254 avatar Nov 02 '25 04:11 Fatte1254