Bug: Can't add Galaxy Clusters to Events if Tag Editor permission is not granted
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 491
- Forks
- 290
- Avg merge
- 2d 8h
- Merged PRs (30d)
- 3
Description
It seems that adding a galaxy cluster to an event is not possible if these conditions are met:
- The Connector Tag associated with the galaxy does not exist
- The user does not have the Tag Editor permission
The PyMISP method tag(misp_entity, tag, local=False) returns the following message error:
ERROR:pymisp:Something went wrong (403): {'saved': False, 'name': 'Could not attachTagToObject Tag', 'message': 'Could not attachTagToObject Tag', 'url': '/tags/attachTagToObject', 'errors': 'Failed to attach 1 tags. Reasons: {"0":"Tag not found and insufficient privileges to create it."}'}
However, the same user can attach the Galaxy Cluster to the Event via GUI, triggering the connector tag creation.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the PyMISP method tag(misp_entity, tag, local=False) and trace how it handles the 403 response when a Connector Tag is missing. Compare the API-client behavior with the GUI case described in the issue, then verify that attaching a Galaxy Cluster works without Tag Editor permission when connector tag creation is required.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100