Inconsistency in sharing inferred relations Post-Bug Fix

[yassine-ouaamou]

Description

This issue is related to #6990 The inferred relations included in reports shared prior to this bug fix remain unshared. However, the newly established relations are now shared.

Todo

• Create migration to align current shared containers
• Improve inference engine to directly add the correct sharing at creation

Environment

Testing (6.1.11)

[SamuelHassine]

Also, following the bugfix #6990:

The inference engine needs also to be patched for the use case:

1. Share a report with an organization
2. Add something in the report that triggers an inference rule
3. Inference came => not shared!

[SamuelHassine]

@nino-filigran Customer(s) impacted here.

[nino-filigran]

Thanks for pointing me out this one, I've missed it. I'll take it internally with devs.

[lndrtrbn]

I've asked for help from someone with more backend skills to write the migration

[Lhorus6]

Note: This issue seems to cover this one also : https://github.com/OpenCTI-Platform/opencti/issues/8197

Thanks for the work @lndrtrbn, two customers have been waiting a long time for it 🙏

[lndrtrbn]

I don't know what to do with this one

[alice-debra]

Hello @lndrtrbn, Can you tell me what you need to deal with this bug?

[lndrtrbn]

To be honest, I don't know. Back then it was already unclear to me what was the issue and how we were supposed to fix it.

[nino-filigran]

The origin of the bug was that inference rules were not shared before bug fix mentioned in the ticket. We only started sharing relations after the bug fix, but we have a "stock" of inferred relation that have not been shared. This is the goal of this ticket: to also be able, if possible, to share them too.