When sharing a Report with an Organisation (into the platform, organization seggregation) , inferred relationships are not shared
Description
When sharing with organisation, inferred relationships are not shared
Environment
Testing
Reproducible Steps
Steps to create the smallest reproducible scenario:
- Make sure organisation segregation is enabled in the platform (main Orga = Filigran)
- Create a user with Admin rights (no Bypass all)
- Using your account, share a report containing inferred relationships with the organisation of the created user
- Log in with the created user
- Access the report
Expected Output
The whole graph is shared
Actual Output
Inferred relationships are missing
Additional information
I used this report. Ping me if you need the credentials of the user I created to do the test.
Screenshots (optional)
Is it also the case for other Container types ?
In order to see the inferred relations, the Organization must be able to access all elements constituing conditions of the inferred rules.
Already fix here : https://github.com/OpenCTI-Platform/opencti/issues/6991 The bug has disappeared locally but is still present on testing.
We need to discuss about this @Jipegien , @frapuks . Please schedule a sync point
What was the conclusion of this issue ? To see an inferred relationship, a user must have access to all entities that meet the conditions triggering the rule, right?