Implement permissions and workflow for "delete CSAF documents"
Closed this issue · 0 comments
rainer-exxcellent commented
The permissions for the "delete CSAF document" should be implemented and the information whether a advisory can be deleted should be added to the AdvisoryInformationResponse.
The following Roles may delete CSAF documents:
Author: delete own (by the user) CSAF documents in Draft status
Editor: delete all Advisories in Draft status
Publisher (inherited): delete all Advisories in Draft status
Manager: may delete all advisories (regardless of status).