search

oasis-tcs / cti-taxii2

OASIS CTI TC: An official CTI TC repository for TAXII 2 work
https://github.com/oasis-tcs/cti-taxii2
Other
9 stars 4 forks source link

If collections permission has false for CanRead and CanWrite, does user have permissions to see existence of Collection? #104

Open StephenOTT opened 5 years ago

StephenOTT commented 5 years ago

Confirming some security logic:

If a user has false for the can_read and can_write properties on a collection, does the user have the permission to see the existence of the collection? The can_read says it's for the "objects" of the collection; but want to confirm the intentions.

Thanks