feature request: Role-restricted Questionare / Checklist on Engagement
:warning: Note on feature completeness :warning:
We are narrowing the scope of acceptable enhancements to DefectDojo. Learn more here: https://github.com/DefectDojo/django-DefectDojo/blob/master/readme-docs/CONTRIBUTING.md
Is your feature request related to a problem? Please describe A clear and concise description of what the problem is. Problem: Currently, the questionnaire is accessible to all users who have access to a product or engagement, regardless of their role. There are no role-based access restrictions in place. However, certain questionnaires should be accessible only to specific roles — for example, some should be available only to the Product Owner and Developers, but not to the CISO department or Testers. Conversely, other questionnaires should be accessible only to the CISO department, excluding Developers and other roles.
Describe the solution you'd like Solution: Implement role-based access control for questionnaires and checklists within each engagement. Enable the creation of questionnaires (or checklists) that are accessible only to Developers and Product Owners, excluding CISO and Tester roles. Enable the creation of questionnaires (or checklists) that are accessible only to Testers. This ensures that each questionnaire is visible and editable only to the roles for which it is intended, improving data relevance and confidentiality.