MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

chg: [internal] allow site admins ability to view event_creator_email for all events in export

pull/8870/head
goodlandsecurity 2023-01-26 10:23:20 -06:00
parent 2b738d4745
commit 2211d5e00b
No known key found for this signature in database
GPG Key ID: 76116114326DBCF8
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
app/Model/Event.php
View File

@ -2097,7 +2097,7 @@ class Event extends AppModel
// Include information about event creator user email. This information is included for:
// - users from event creator org
// - site admins
// In export, this information will be included in `event_creator_email` field just for auditors of event creator org.
// In export, this information will be included in `event_creator_email` field for auditors of event creator org and site admins.
$sameOrg = $event['Event']['orgc_id'] === $user['org_id'];
if ($sameOrg || $user['Role']['perm_site_admin']) {
if (!isset($userEmails[$event['Event']['user_id']])) {
@ -2105,7 +2105,7 @@ class Event extends AppModel
}
$userEmail = $userEmails[$event['Event']['user_id']];
if ($sameOrg && $user['Role']['perm_audit']) {
if ($sameOrg && $user['Role']['perm_audit'] || $user['Role']['perm_site_admin']) {
$event['Event']['event_creator_email'] = $userEmail;
}
$event['User']['email'] = $userEmail;