assemblyline-ui 4.7.5.dev134__py3-none-any.whl → 4.7.5.dev136__py3-none-any.whl

assemblyline_ui/VERSION

@@ -1 +1 @@
-4.7.5.dev134
+4.7.5.dev136

assemblyline_ui/api/v4/workflow.py

@@ -50,9 +50,16 @@ def verify_query(query):
     return True
 
 
+def workflow_does_not_exist(workflow_id):
+    """Create an api response for when we want to report a workflow as not existing."""
+    return make_api_response({"success": False},
+                             err=f"Workflow ID {workflow_id} does not exist",
+                             status_code=404)
+
+
 @workflow_api.route("/", methods=["PUT"])
 @api_login(allow_readonly=False, require_role=[ROLES.workflow_manage])
-def add_workflow(**kwargs):
+def add_workflow(user, **_):
     """
     Add a workflow to the system
 
@@ -92,10 +99,15 @@ def add_workflow(**kwargs):
     if not verify_query(query):
         return make_api_response({"success": False}, err="Query contains an error", status_code=400)
 
+    # Check that users are only creating workflows they can themselves see, if not set it will be UNRESTRICTED
+    if 'classification' in data:
+        if not CLASSIFICATION.is_accessible(user['classification'], data['classification']):
+            return make_api_response({"success": False}, err="Verify classification field", status_code=400)
+
     data.update({
         "workflow_id": get_random_id(),
-        "creator": kwargs['user']['uname'],
-        "edited_by": kwargs['user']['uname'],
+        "creator": user['uname'],
+        "edited_by": user['uname'],
         "priority": data['priority'] or None,
         "status": data['status'] or None,
         "origin": data.get('origin') or config.ui.fqdn
@@ -118,7 +130,7 @@ def add_workflow(**kwargs):
 
 @workflow_api.route("/<workflow_id>/", methods=["POST"])
 @api_login(allow_readonly=False, require_role=[ROLES.workflow_manage])
-def edit_workflow(workflow_id, **kwargs):
+def edit_workflow(workflow_id, user, **_):
     """
     Edit a workflow.
 
@@ -153,28 +165,28 @@ def edit_workflow(workflow_id, **kwargs):
     if not verify_query(query):
         return make_api_response({"success": False}, err="Query contains an error", status_code=400)
 
+    if 'classification' in data:
+        if not CLASSIFICATION.is_accessible(user['classification'], data['classification']):
+            return make_api_response({"success": False}, err="Verify classification field", status_code=400)
+
     wf = STORAGE.workflow.get(workflow_id, as_obj=False)
-    if wf:
-        uname = kwargs['user']['uname']
-        wf.update(data)
-        wf.update({
-            "edited_by": uname,
-            "last_edit": now_as_iso(),
-            "workflow_id": workflow_id
-        })
+    if not wf or not CLASSIFICATION.is_accessible(user['classification'], wf['classification']):
+        return workflow_does_not_exist(workflow_id)
+
+    wf.update(data)
+    wf.update({
+        "edited_by": user['uname'],
+        "last_edit": now_as_iso(),
+        "workflow_id": workflow_id
+    })
 
     success = STORAGE.workflow.save(workflow_id, wf)
-    if success:
-        return make_api_response({"success": success})
-    else:
-        return make_api_response({"success": False},
-                                 err="Workflow ID %s does not exist" % workflow_id,
-                                 status_code=404)
+    return make_api_response({"success": success})
 
 
 @workflow_api.route("/enable/<workflow_id>/", methods=["PUT"])
 @api_login(allow_readonly=False, require_role=[ROLES.workflow_manage])
-def set_workflow_status(workflow_id, **_):
+def set_workflow_status(workflow_id, user, **_):
     """
     Set the enabled status of a workflow
 
@@ -197,17 +209,22 @@ def set_workflow_status(workflow_id, **_):
 
     if enabled is None:
         return make_api_response({"success": False}, err="Enabled field is required", status_code=400)
-    else:
-        return make_api_response({'success': STORAGE.workflow.update(
-            workflow_id, [
-                (STORAGE.workflow.UPDATE_SET, 'enabled', enabled),
-                (STORAGE.workflow.UPDATE_SET, 'last_edit', now_as_iso()),
-            ])})
+
+    wf = STORAGE.workflow.get(workflow_id, as_obj=False)
+    if not wf or not CLASSIFICATION.is_accessible(user['classification'], wf['classification']):
+        return workflow_does_not_exist(workflow_id)
+
+    return make_api_response({'success': STORAGE.workflow.update(
+        workflow_id, [
+            (STORAGE.workflow.UPDATE_SET, 'enabled', enabled),
+            (STORAGE.workflow.UPDATE_SET, 'last_edit', now_as_iso()),
+        ]
+    )})
 
 
 @workflow_api.route("/<workflow_id>/", methods=["GET"])
 @api_login(audit=False, allow_readonly=False, require_role=[ROLES.workflow_view])
-def get_workflow(workflow_id, **kwargs):
+def get_workflow(workflow_id, user, **_):
     """
     Load the user account information.
 
@@ -231,18 +248,11 @@ def get_workflow(workflow_id, **kwargs):
     }
     """
     wf = STORAGE.workflow.get(workflow_id, as_obj=False)
-    if wf:
-        wf['origin'] = wf.get('origin', config.ui.fqdn)
-        if CLASSIFICATION.is_accessible(kwargs['user']['classification'], wf['classification']):
-            return make_api_response(wf)
-        else:
-            return make_api_response({},
-                                     err="You're not allowed to view workflow ID: %s" % workflow_id,
-                                     status_code=403)
-    else:
-        return make_api_response({},
-                                 err="Workflow ID %s does not exist" % workflow_id,
-                                 status_code=404)
+    if not wf or not CLASSIFICATION.is_accessible(user['classification'], wf['classification']):
+        return workflow_does_not_exist(workflow_id)
+
+    wf['origin'] = wf.get('origin', config.ui.fqdn)
+    return make_api_response(wf)
 
 
 @workflow_api.route("/labels/", methods=["GET"])
@@ -273,7 +283,7 @@ def list_workflow_labels(**kwargs):
 
 @workflow_api.route("/<workflow_id>/", methods=["DELETE"])
 @api_login(audit=False, allow_readonly=False, require_role=[ROLES.workflow_manage])
-def remove_workflow(workflow_id, **_):
+def remove_workflow(workflow_id, user, **_):
     """
     Remove the specified workflow.
 
@@ -291,18 +301,16 @@ def remove_workflow(workflow_id, **_):
      "success": true  # Was the remove successful?
     }
     """
-    wf = STORAGE.workflow.get(workflow_id)
-    if wf:
-        return make_api_response({"success": STORAGE.workflow.delete(workflow_id)})
-    else:
-        return make_api_response({"success": False},
-                                 err="Workflow ID %s does not exist" % workflow_id,
-                                 status_code=404)
+    wf: Workflow = STORAGE.workflow.get(workflow_id)
+    if not wf or not CLASSIFICATION.is_accessible(user['classification'], wf.classification.value):
+        return workflow_does_not_exist(workflow_id)
+
+    return make_api_response({"success": STORAGE.workflow.delete(workflow_id)})
 
 
 @workflow_api.route("/<workflow_id>/run/", methods=["GET"])
 @api_login(audit=False, allow_readonly=False, require_role=[ROLES.workflow_manage])
-def run_workflow(workflow_id, **_):
+def run_workflow(workflow_id, user, **_):
     """
     Run the specified workflow against all existing alerts that match the query
 
@@ -320,12 +328,10 @@ def run_workflow(workflow_id, **_):
      "success": true  # Was the run successful?
     }
     """
-    wf = STORAGE.workflow.get(workflow_id)
-    if wf:
-        # Process workflow against all alerts in the system matching the query
-        ret_value = STORAGE.alert.update_by_query(query=wf['query'], operations=get_alert_update_ops(wf))
-        return make_api_response({"success": ret_value is not False})
-    else:
-        return make_api_response({"success": False},
-                                 err="Workflow ID %s does not exist" % workflow_id,
-                                 status_code=404)
+    wf: Workflow = STORAGE.workflow.get(workflow_id)
+    if not wf or not CLASSIFICATION.is_accessible(user['classification'], wf.classification.value):
+        return workflow_does_not_exist(workflow_id)
+
+    # Process workflow against all alerts in the system matching the query
+    ret_value = STORAGE.alert.update_by_query(query=wf.query, operations=get_alert_update_ops(wf))
+    return make_api_response({"success": ret_value is not False})

{assemblyline_ui-4.7.5.dev134.dist-info → assemblyline_ui-4.7.5.dev136.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: assemblyline-ui
-Version: 4.7.5.dev134
+Version: 4.7.5.dev136
 Summary: Assemblyline 4 - API and Socket IO server
 Home-page: https://github.com/CybercentreCanada/assemblyline-ui/
 Author: CCCS Assemblyline development team

{assemblyline_ui-4.7.5.dev134.dist-info → assemblyline_ui-4.7.5.dev136.dist-info}/RECORD

@@ -1,4 +1,4 @@
-assemblyline_ui/VERSION,sha256=CA5LH5dLaiodirbLX1tm_4jU9dbTshQblYlWDhe1pbs,13
+assemblyline_ui/VERSION,sha256=guLXhJP2yFv4AlHUYdv8hIkyjUsJQKVSAfEEudW8LQQ,13
 assemblyline_ui/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 assemblyline_ui/app.py,sha256=ok96rpL0-Hb5amqa7ojhuB0boQceZG7E32NX6LZm-f4,7849
 assemblyline_ui/config.py,sha256=20P-Ya22ZgPiSy9ynqB0NgVBzjnKDh9rVmpDB6rawxA,10564
@@ -43,7 +43,7 @@ assemblyline_ui/api/v4/system.py,sha256=4JhLhpmPfKzbXiHsBoJxSZP-ibu-lnmk4FrtaLEx
 assemblyline_ui/api/v4/ui.py,sha256=6Z_7C3F34I8cBwnGfyYACeaXtmKXH3ZD30KLsO5a0G4,10625
 assemblyline_ui/api/v4/user.py,sha256=94yE9rq2XnWgf1N8AEHPbMWiP23yCgzFvZ1nm0Ka7f0,47890
 assemblyline_ui/api/v4/webauthn.py,sha256=ouVWMMd0aMnNV5iaKbWY1AnsUE5_BKAtaUg9j77Rvow,4875
-assemblyline_ui/api/v4/workflow.py,sha256=Uz50960KyvFDm39NKYNSq5OXT0CA0u_FO5xPP61aYiQ,10579
+assemblyline_ui/api/v4/workflow.py,sha256=KHv1GaPgK0Gf4WvTva4J6zFigVc_hsoIsosd1spmy0E,11047
 assemblyline_ui/helper/__init__.py,sha256=47DEQpj8HBSa-_TImW-5JCeuQeRkm5NMpJWZG3hSuFU,0
 assemblyline_ui/helper/datastore.py,sha256=J0zXpIOU8pfTGeMFIPp1dIuhRVA8K1xnxB7r96T_ekU,10973
 assemblyline_ui/helper/discover.py,sha256=oJBML1dQl0H2Ic-lm5jI4YWIpm9RRW-mGT5sP-2tb9c,1686
@@ -75,8 +75,8 @@ assemblyline_ui/sio/live_submission.py,sha256=WGX2Q2Rs5mlMqOQsqttxZD-IYtVdxPmxnc
 assemblyline_ui/sio/retrohunt.py,sha256=F7lYBfkLoWPB04RbupokiIBb7qau6qXS4CM_l4yUiH4,2413
 assemblyline_ui/sio/status.py,sha256=_Bxf1KLPOJEUIk4J9_j9fzvQWUXqSIT9xnJKhT1hhuc,1980
 assemblyline_ui/sio/submission.py,sha256=9ByTUmOgANr6f5GlQkiJdP3lAOVAykplwG-reY4_q2o,2601
-assemblyline_ui-4.7.5.dev134.dist-info/licenses/LICENCE.md,sha256=NSkYo9EH8h5oOkzg4VhjAHF4339MqPP2cQ8msTPgl-c,1396
-assemblyline_ui-4.7.5.dev134.dist-info/METADATA,sha256=W5UBtBgH0n7XxM-ZMxGi9BsJ5yuClYdHpU2KED7_AS4,8183
-assemblyline_ui-4.7.5.dev134.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-assemblyline_ui-4.7.5.dev134.dist-info/top_level.txt,sha256=WLa7-PKLJTbMUbKKU3q3kg5_uAV67hss5kC71PAbIeg,16
-assemblyline_ui-4.7.5.dev134.dist-info/RECORD,,
+assemblyline_ui-4.7.5.dev136.dist-info/licenses/LICENCE.md,sha256=NSkYo9EH8h5oOkzg4VhjAHF4339MqPP2cQ8msTPgl-c,1396
+assemblyline_ui-4.7.5.dev136.dist-info/METADATA,sha256=1XHR1GvL1l53M5gBiWDHIHgrrKciIBSTWG6dJJ5ztCM,8183
+assemblyline_ui-4.7.5.dev136.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+assemblyline_ui-4.7.5.dev136.dist-info/top_level.txt,sha256=WLa7-PKLJTbMUbKKU3q3kg5_uAV67hss5kC71PAbIeg,16
+assemblyline_ui-4.7.5.dev136.dist-info/RECORD,,