Bug in automatic organisation sharing when the user is part of the platform main organization

Lhorus6 commented 8 months ago

Description

If a user is part of the platform main organization, the entities they create will not be shared with the organizations to which they belong. Let me explain with this scenario:

Doesn't work

Configuration :

Org A is the platform main organization
User A part of Org A, B and C
User B part of Org B

Scenario : User A create a report (same with malware for example) named "Test report" -> User B can't see the report + if User A look next to the orange share button on the report, he doesn't see "org B" and "Org C" as organizations with which the report is shared

Works

Configuration :

Neither Org A, B nor C are the platform main organization
User A part of Org A, B and C
User B part of Org B

Scenario : User A create a report (same with malware for example) named "Test report" -> User B can see the report + if User A look next to the orange share button on the report, he see "Org A", "Org B" and "Org C" as organizations with which the report is shared (as expected)

Environment

OpenCTI 5.11.12

Reproducible Steps

See the description

Kedae commented 8 months ago

@Jipegien or @SamuelHassine Need your opinion

richard-julien commented 8 months ago

My feeling. Sharing information to platform organizations is useless. Auto sharing with all the organizations of the users (except the platform one) seems ok for me. So:

If user is part of A,B,C (with A as platforme orga), the element should be shared with B and C.
If user is part of A (with A as platforme orga), the element should not be shared
If user is part of B, the element should be shared with B

Jipegien commented 8 months ago

I am ok with that!

SamuelHassine commented 7 months ago

@Jipegien @nino-filigran is it something scheduled for 5.13?

nino-filigran commented 7 months ago

No, it is not @SamuelHassine. Is that something to consider according to you?

SamuelHassine commented 7 months ago

Yes, this is a tiny adjustment which is not requiring a lot of technical work but which aligns the behavior of the platform with a more meaningful usage.

nino-filigran commented 7 months ago

I'll discuss with @Jipegien on how/if we can fits this in and keep you posted on this ticket.

nino-filigran commented 7 months ago

@SamuelHassine the content of the 5.13 is quite packed at the moment. We would rather add it on the top of the list for the 5.14.

Jipegien commented 7 months ago

@nino-filigran I don't see this issue in the feature backlog. Did you add it?

nino-filigran commented 7 months ago

Great catch, it was on my todo. I'll do it this afternoon

OpenCTI-Platform / opencti