Bug #25348
closedDeleting CVE group is possible even if it is a system group
Description
Since the feature of making groups based on CVEs #25147, I can create a CVE group from a specific CVE, and there is a button to delete the group in the CVE details :
This successfully creates the properties to mark each node as impacted by the CVE ("CVE-XXXX-XXXX":"impacted"
). The "Delete group" button is removing all these properties in impacted nodes.
But when going to the group page, I can delete the group from here, the property still remains in the group :
The CVE groups should not even be deletable, because they are system groups (in the API and in the UI).
And cloning should not also be allowed (or at least clone the group as a non-system one).
Also in the UI we would need to disable the button and show a tooltip to indicate that the group UI is not removable from there, but only from the CVE details page (and if possible add the url).
Files