MISP / MISP/PyMISP

Bug: Can't add Galaxy Clusters to Events if Tag Editor permission is not granted

Open
#975 4 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

Dominant language
Python
Stars
491
Forks
290
Avg merge
2d 8h
Merged PRs (30d)
3

Description

It seems that adding a galaxy cluster to an event is not possible if these conditions are met:

  • The Connector Tag associated with the galaxy does not exist
  • The user does not have the Tag Editor permission

The PyMISP method tag(misp_entity, tag, local=False) returns the following message error:

ERROR:pymisp:Something went wrong (403): {'saved': False, 'name': 'Could not attachTagToObject Tag', 'message': 'Could not attachTagToObject Tag', 'url': '/tags/attachTagToObject', 'errors': 'Failed to attach 1 tags. Reasons: {"0":"Tag not found and insufficient privileges to create it."}'}

However, the same user can attach the Galaxy Cluster to the Event via GUI, triggering the connector tag creation.

Contributor guide

No contributing guide indexed for this repository

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start with the PyMISP method tag(misp_entity, tag, local=False) and trace how it handles the 403 response when a Connector Tag is missing. Compare the API-client behavior with the GUI case described in the issue, then verify that attaching a Galaxy Cluster works without Tag Editor permission when connector tag creation is required.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
api
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.