NUWCDIVNPT / stig-manager

An API and client for managing STIG assessments
Other
112 stars 29 forks source link

STIG Benchmarks UI not sending GET /stigs request with elevate=true #1264

Closed cd-rite closed 5 months ago

cd-rite commented 5 months ago

The App Management->STIGs Benchmarks UI is not requesting STIGs (GET /stigs) with the elevate param set to true. This causes the list returned to only include usage statistics that incorporate the requesting user's grants, not overall system usage as intended.

Besides providing inaccurate STIG usage info, this prevents App Managers from being able to force STIG deletions since the UI never presents them with the "This STIG is in use. Remove anyway?" dialog option.