Bug #25348
closedDeleting CVE group is possible even if it is a system group
Description
Since the feature of making groups based on CVEs #25147, I can create a CVE group from a specific CVE, and there is a button to delete the group in the CVE details :
This successfully creates the properties to mark each node as impacted by the CVE ("CVE-XXXX-XXXX":"impacted"
). The "Delete group" button is removing all these properties in impacted nodes.
But when going to the group page, I can delete the group from here, the property still remains in the group :
The CVE groups should not even be deletable, because they are system groups (in the API and in the UI).
And cloning should not also be allowed (or at least clone the group as a non-system one).
Also in the UI we would need to disable the button and show a tooltip to indicate that the group UI is not removable from there, but only from the CVE details page (and if possible add the url).
Files
Updated by Clark ANDRIANASOLO 3 months ago
- Status changed from New to In progress
Updated by Clark ANDRIANASOLO 3 months ago
- Status changed from In progress to Pending technical review
- Assignee changed from Clark ANDRIANASOLO to François ARMAND
- Pull Request set to https://github.com/Normation/rudder/pull/5833
Updated by Clark ANDRIANASOLO 3 months ago
- Pull Request changed from https://github.com/Normation/rudder/pull/5833 to https://github.com/Normation/rudder/pull/5834
Updated by Clark ANDRIANASOLO 3 months ago · Edited
In fact CVE groups are not system groups.
Only the "CVE Groups" category is a system category...
And the UI for each CVE group is weird since it show that the category is the "Root category", and not the "CVE Groups" one
Updated by Clark ANDRIANASOLO 3 months ago
- Status changed from Pending technical review to Pending release
Applied in changeset rudder|11de0e1ef34195f65a6d6cb30b4c9b02497b5840.
Updated by Clark ANDRIANASOLO 3 months ago
This has been merged in 8.1, not 8.2
Updated by Clark ANDRIANASOLO 3 months ago
- Target version changed from 8.2.0~beta1 to 8.1.7
Updated by François ARMAND 2 months ago
- File clipboard-202409121533-26olh.png clipboard-202409121533-26olh.png added
- Fix check changed from To do to Checked
Button is not here anymore, and API reports an error
Updated by Vincent MEMBRÉ about 2 months ago
- Status changed from Pending release to Released
This bug has been fixed in Rudder 8.1.7 which was released today.