DependencyTrack / DependencyTrack/dependency-track

BOM_UPLOAD permissions doesnot grant users with download BOM option

Open
#3,223 1 comment 0 reactions 0 assignees View on GitHub
defect in triage
Dominant language
Java
Stars
4.2k
Forks
811
Avg merge
8h 39m
Merged PRs (30d)
237

Description

### Current Behavior

Granting a user with BOM_UPLOAD permission currently does not provide access for the members the ability to download SBOM. currently only the PROJECT_CREATION_UPLOAD permission grants access to download SBOM
![image](https://github.com/DependencyTrack/dependency-track/assets/100369838/d0030c01-c412-4736-8671-f01c31131e85)

### Steps to Reproduce

1. Add a user
2. Assign BOM_UPLOAD permissions
3. open the project and go to components tab
4. check for the buttons 'Upload BOM' and 'Download BOM'

### Expected Behavior

Both Upload BOM and Download BOM options should be be enabled.

### Dependency-Track Version

4.9.1

### Dependency-Track Distribution

Container Image

### Database Server

PostgreSQL

### Database Server Version

_No response_

### Browser

Google Chrome

### Checklist

- [X] I have read and understand the [contributing guidelines](https://github.com/DependencyTrack/dependency-track/blob/master/CONTRIBUTING.md#filing-issues)
- [X] I have checked the [existing issues](https://github.com/DependencyTrack/dependency-track/issues) for whether this defect was already reported

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.