search

dfir-iris / iris-web

Collaborative Incident Response platform
GNU Lesser General Public License v3.0
994 stars 152 forks source link

[FR]Please create deny capability on case and task deletion #500

Open cyb3rmeerk4t opened 1 month ago

cyb3rmeerk4t commented 1 month ago

Please ensure your feature request is not already on the roadmap or associated with an issue. This can be checked here.

Is your feature request related to a problem? Please describe. Analyst or other regular user is not supposed to have delete capabilities on cases/tickets and tasks Only administrators should have access for deletion This is to make sure all our cases and tasks is properly audited since once a case and task is deleted it will never be recovered (and this is very critical)

Describe the solution you'd like Add "case_delete" and "task_delete" permission under access image

amber-vale commented 1 month ago

If no one else is working on this, I would love to work on implementing this

whikernel commented 4 weeks ago

If no one else is working on this, I would love to work on implementing this

Hi! If you can add it, it would be really nice 👌 please keep in mind this might require an Alembic DB migration for the standard access control of analysts