Users without "bypass all capabilities" are unable to remove TLP markings from reports about opencti

[rach24smith]

Hi Helen! Thanks so much for the response. I have tried to reproduce the issue this week and it appears to be resolved! Thank you so much for your time on this and efforts! I will re-open the ticket or make a new one if the issue persists.

[helene-nguyen]

Hello!
I haven't been able to reproduce the bug for when the user has all permissions enabled except "bypass all capabilities".

Here are the tests I've done.
User in a group that has a role that has:

• "bypass all capabilities" AND all TLP markings set as allowed markings (first to check if it works properly) => user can remove markings as expected
• "Access knowledge" capabilities checked AND all TLP markings set as allowed markings => user cannot access the create/update or delete report button
• "Access knowledge" AND "Create/Update knowledge" capabilities checked AND all TLP markings set as allowed markings => user can access the create/update report button and can add and remove markings

Can you be more precise about the Role capabilities set?

You'll find below the capabilities allowing you to update the report