Giters

DependencyTrack / dependency-track

Dependency-Track is an intelligent Component Analysis platform that allows organizations to identify and reduce risk in the software supply chain.

Home Page:https://dependencytrack.org/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

View Only Access to All Projects

rozeru1125 opened this issue · comments

commented

Current Behavior

Newly created/uploaded sbom project of different account cannot view by a Read Only account.

Example Scenario:
All_Read_Only has the following permissions:
VIEW_POLICY_VIOLATION
VIEW_PORTFOLIO
VIEW_VULNERABILITY

Team1 has the following permissions:
BOM_UPLOAD
PROJECT_CREATION_UPLOAD
VIEW_POLICY_VIOLATION
VIEW_PORTFOLIO
VIEW_VULNERABILITY

Team1 has uploaded/created a new sbom but not able to see/view by All_Read_Only

Proposed Behavior

Newly created/uploaded sbom project of different account can view by a Read Only account.

Example Scenario:
All_Read_Only has the following permissions:
VIEW_POLICY_VIOLATION
VIEW_PORTFOLIO
VIEW_VULNERABILITY

Team1 has the following permissions:
BOM_UPLOAD
PROJECT_CREATION_UPLOAD
VIEW_POLICY_VIOLATION
VIEW_PORTFOLIO
VIEW_VULNERABILITY

Team1 has uploaded/created a new sbom and able to see/view by All_Read_Only

Checklist