opencti icon indicating copy to clipboard operation
opencti copied to clipboard

When sharing a Report with an Organisation (into the platform, organization seggregation) , inferred relationships are not shared

Open yassine-ouaamou opened this issue 1 year ago • 4 comments

Description

When sharing with organisation, inferred relationships are not shared

Environment

Testing

Reproducible Steps

Steps to create the smallest reproducible scenario:

  1. Make sure organisation segregation is enabled in the platform (main Orga = Filigran)
  2. Create a user with Admin rights (no Bypass all)
  3. Using your account, share a report containing inferred relationships with the organisation of the created user
  4. Log in with the created user
  5. Access the report

Expected Output

The whole graph is shared

Actual Output

Inferred relationships are missing

Additional information

I used this report. Ping me if you need the credentials of the user I created to do the test.

Screenshots (optional)

image

yassine-ouaamou avatar May 16 '24 10:05 yassine-ouaamou

Is it also the case for other Container types ?

Jipegien avatar May 16 '24 11:05 Jipegien

In order to see the inferred relations, the Organization must be able to access all elements constituing conditions of the inferred rules.

Jipegien avatar May 16 '24 11:05 Jipegien

Already fix here : https://github.com/OpenCTI-Platform/opencti/issues/6991 The bug has disappeared locally but is still present on testing.

frapuks avatar May 27 '24 12:05 frapuks

We need to discuss about this @Jipegien , @frapuks . Please schedule a sync point

richard-julien avatar May 28 '24 12:05 richard-julien

What was the conclusion of this issue ? To see an inferred relationship, a user must have access to all entities that meet the conditions triggering the rule, right?

Lhorus6 avatar Aug 04 '24 11:08 Lhorus6