MISP
/
MISP
mirror of https://github.com/MISP/MISP
2
2
Fork 0
Code Issues Releases Wiki Activity

chg: [workflow:distribution_if] Added `event` scope to be used.

pull/8530/head
Sami Mokaddem 2022-07-20 15:22:11 +02:00
parent 461860e78d
commit 3e8889dc90
No known key found for this signature in database
GPG Key ID: 164C473F627A06FA
1 changed files with 23 additions and 14 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

37
app/Model/WorkflowModules/logic/Module_distribution_if.php
View File

@ -37,7 +37,8 @@ class Module_distribution_if extends WorkflowBaseLogicModule
'label' => 'Scope',
'type' => 'select',
'options' => [
'attribute' => __('Final Distribution of Attribute'),
'attribute' => __('Final distribution of the Attribute'),
'event' => __('Distribution of the Event'),
],
'default' => 'attribute',
],
@ -66,11 +67,14 @@ class Module_distribution_if extends WorkflowBaseLogicModule
$operator = $params['Condition']['value'];
$value = $params['Distribution']['value'];
$data = $roamingData->getData();
$final_distribution = $this->__getPropagatedDistribution(
$data['Event'],
$data['Event']['Attribute'][0]['Object'] ?? [],
$data['Event']['Attribute'][0]
);
$final_distribution = $this->__getPropagatedDistribution($data['Event']);
if ($scope == 'attribute') {
$final_distribution = $this->__getPropagatedDistribution(
$data['Event'],
$data['Event']['Attribute'][0]['Object'] ?? [],
$data['Event']['Attribute'][0]
);
}
if ($final_distribution == -1) {
return false; // distribution not supported
}
@ -98,18 +102,23 @@ class Module_distribution_if extends WorkflowBaseLogicModule
* @param array $attribute
* @return integer
*/
private function __getPropagatedDistribution(array $event, array $object, array $attribute): int
private function __getPropagatedDistribution(array $event, array $object=[], array $attribute=[]): int
{
$finalDistribution = intval($attribute['distribution']);
if (!empty($object)) {
$finalDistribution = 5;
if (!empty($attribute)) {
$finalDistribution = intval($attribute['distribution']);
}
if (!empty($object)) { // downgrade based on the object distribution
$finalDistribution = min($finalDistribution, intval($object['distribution']));
}
$finalDistribution = min($finalDistribution, intval($event['distribution']));
if ($attribute['distribution'] == 5) {
$attribute['distribution'] = intval($event['distribution']);
$finalDistribution = min($finalDistribution, intval($event['distribution'])); // downgrade based on the event distribution
if (!empty($attribute)) {
if ($attribute['distribution'] == 5) { // mirror distribution for the one of the event
$attribute['distribution'] = intval($event['distribution']);
}
}
if ($finalDistribution == 4) {
$finalDistribution = -1; // ignore sharing group for now
if ($finalDistribution == 4) { // ignore sharing group for now
$finalDistribution = -1;
}
return $finalDistribution;
}