StamusNetworks / scirius

Scirius is a web application for Suricata ruleset management and threat hunting.
GNU General Public License v3.0
626 stars 150 forks source link

Basic permissions issues #107

Open brandonmreeves opened 7 years ago

brandonmreeves commented 7 years ago

For the base user profile, when clicking on threshold, suppress etc within the rule page, if you are not staff or superuser, you receive an error. I recommend adding code to the page to only show the threshold and suppress links if you are not a basic user account for example in rule.html

content = ' ' {% if request.user.is_staff %} content = ' '; content = content + ' '; {% endif %}

This way only staff users will see the links to threshold rules and receive no error. Regular users will receive just a column with no options.

It is function: populate_topip_actions in rule.html

pevma commented 7 years ago

@brandonmreeves - could you please submit a patch/pr ?

brandonmreeves commented 7 years ago

pr created