search

center-for-threat-informed-defense / attack-workbench-frontend

An application allowing users to explore, create, annotate, and share extensions of the MITRE ATT&CK® knowledge base. This repository contains an Angular-based web application providing the user interface for the ATT&CK Workbench application.
https://mitre-engenuity.org/cybersecurity/center-for-threat-informed-defense/our-work/attck-workbench/
Apache License 2.0
325 stars 61 forks source link

Require Team Lead Approval for Objects in Collections #563

Open erinehall opened 3 days ago

erinehall commented 3 days ago

Currently, objects can be added to a collection (bundle) without prior approval, which may result in unreviewed or inaccurate content being included.

Solution: Implement a feature that prevents objects from being added to a collection unless they have been reviewed and approved by a Team Lead

Potential Implementations:

  1. Add a validation step that blocks unapproved objects from being included in a collection.
  2. Add notification on which objects require approval when users are attempting to add unapproved objects.
  3. Include a "Pending Approval" section in the collection builder to track objects awaiting Team Lead review.