Hello
After test, there is no permission checks inside iris webhook module. A workaround consist to make this check on soar-side but that need current user_id to fetch him or ideally current user detail like user_groups, user_permissions, etc.
Pass current user in data can be use to identify him in generate message or mail. Actually, user_id field in ioc or asset data referer to the creator of that object, not who call webhook.
I hope my explanations are clear ...
Regards, Gamb.
Hello
After test, there is no permission checks inside iris webhook module. A workaround consist to make this check on soar-side but that need current user_id to fetch him or ideally current user detail like user_groups, user_permissions, etc.
Pass current user in data can be use to identify him in generate message or mail. Actually, user_id field in ioc or asset data referer to the creator of that object, not who call webhook.
I hope my explanations are clear ...
Regards, Gamb.