CRITICAL: No case-level access control — any authenticated user can access any case — Phase 2: Severity #72

Closed
opened 2026-05-28 00:20:36 +00:00 by Mark · 15 comments
Owner

Phase 2: Severity

CRITICAL


Decomposed from osint-hub#36

## Phase 2: Severity CRITICAL --- _Decomposed from [osint-hub#36](https://forgejo.tail018ac4.ts.net/Mark/osint-hub/issues/36)_
Author
Owner

🤖 Claimed by gsd-issue-fixer-osint-hub-72 — starting work

🤖 Claimed by `gsd-issue-fixer-osint-hub-72` — starting work
Author
Owner

🤖 Claimed by gsd-issue-fixer-osint-hub-72 — starting work

🤖 Claimed by `gsd-issue-fixer-osint-hub-72` — starting work
Author
Owner

🤖 Claimed by gsd-issue-fixer-osint-hub-72 — starting work

🤖 Claimed by `gsd-issue-fixer-osint-hub-72` — starting work
Author
Owner

🤖 [gsd-issue-fixer-osint-hub-72] still working — claimed — starting pipeline

🤖 [`gsd-issue-fixer-osint-hub-72`] still working — claimed — starting pipeline
Author
Owner

🤖 [gsd-issue-fixer-osint-hub-72] still working — claimed — starting pipeline

🤖 [`gsd-issue-fixer-osint-hub-72`] still working — claimed — starting pipeline
Author
Owner

🤖 [gsd-issue-fixer-osint-hub-72] still working — claimed — starting pipeline

🤖 [`gsd-issue-fixer-osint-hub-72`] still working — claimed — starting pipeline
Author
Owner

🤖 [gsd-issue-fixer-osint-hub-72] still working — research

🤖 [`gsd-issue-fixer-osint-hub-72`] still working — research
Author
Owner

🤖 [gsd-issue-fixer-osint-hub-72] still working — research

🤖 [`gsd-issue-fixer-osint-hub-72`] still working — research
Author
Owner

GSD pipeline blocked at RESEARCH: prerequisite gate (fetch) not passed.
Pipeline state needs reset. Check if another run is in progress.

GSD pipeline blocked at RESEARCH: prerequisite gate (fetch) not passed. Pipeline state needs reset. Check if another run is in progress.
Author
Owner

🤖 [gsd-issue-fixer-osint-hub-72] still working — plan

🤖 [`gsd-issue-fixer-osint-hub-72`] still working — plan
Author
Owner

🤖 [gsd-issue-fixer-osint-hub-72] still working — implement attempt 1

🤖 [`gsd-issue-fixer-osint-hub-72`] still working — implement attempt 1
Author
Owner

🤖 [gsd-issue-fixer-osint-hub-72] still working — plan

🤖 [`gsd-issue-fixer-osint-hub-72`] still working — plan
Author
Owner

🤖 [gsd-issue-fixer-osint-hub-72] still working — implement attempt 1

🤖 [`gsd-issue-fixer-osint-hub-72`] still working — implement attempt 1
Author
Owner

GSD VERIFY phase failed after 3 attempts.
═══ Gate: verify-passed (osint-hub#72) ═══
Mode: Tier 1 (functional only)

GATE OK: All gates up to 'implement' pass
── Tier 1: Functional ────────────────────────────────
Running tests...
❌ Tests failed (exit 1)
/home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:26: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html
@pytest.mark.unit

backend/tests/unit/test_structured_module_contracts.py:94
/home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:94: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html
@pytest.mark.unit

backend/tests/unit/test_structured_module_contracts.py:163
/home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:163: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html
@pytest.mark.unit

backend/tests/unit/test_structured_module_contracts.py:215
/home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:215: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html
@pytest.mark.unit

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
=========================== short test summary info ============================
FAILED backend/tests/integration/test_api_celery.py::TestTaskSubmission::test_gather_task_submission
!!!!!!!!!!!!!!!!!!!!!!!!!! stopping after 1 failures !!!!!!!!!!!!!!!!!!!!!!!!!!!
============ 1 failed, 73 passed, 4 skipped, 39 warnings in 17.36s =============
Running linter...
✅ Lint clean
Running type checker...
✅ Types check clean
Previous test count: unknown

❌ GATE FAIL: verify-passed
- Tests failed with exit code 1
GATE FAIL: verify — blocked at 2026-05-28T05:43:45Z
Class: test-failure
Evidence: Verification failed: 1 failures
Git tag: osint-hub#72-gate-verify-fail-831f1bebb1c5 (use gate-retry after fixing)

GSD VERIFY phase failed after 3 attempts. ═══ Gate: verify-passed (osint-hub#72) ═══ Mode: Tier 1 (functional only) GATE OK: All gates up to 'implement' pass ── Tier 1: Functional ──────────────────────────────── Running tests... ❌ Tests failed (exit 1) /home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:26: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html @pytest.mark.unit backend/tests/unit/test_structured_module_contracts.py:94 /home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:94: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html @pytest.mark.unit backend/tests/unit/test_structured_module_contracts.py:163 /home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:163: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html @pytest.mark.unit backend/tests/unit/test_structured_module_contracts.py:215 /home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:215: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html @pytest.mark.unit -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html =========================== short test summary info ============================ FAILED backend/tests/integration/test_api_celery.py::TestTaskSubmission::test_gather_task_submission !!!!!!!!!!!!!!!!!!!!!!!!!! stopping after 1 failures !!!!!!!!!!!!!!!!!!!!!!!!!!! ============ 1 failed, 73 passed, 4 skipped, 39 warnings in 17.36s ============= Running linter... ✅ Lint clean Running type checker... ✅ Types check clean Previous test count: unknown ❌ GATE FAIL: verify-passed - Tests failed with exit code 1 GATE FAIL: verify — blocked at 2026-05-28T05:43:45Z Class: test-failure Evidence: Verification failed: 1 failures Git tag: osint-hub#72-gate-verify-fail-831f1bebb1c5 (use gate-retry after fixing)
Author
Owner

GSD VERIFY phase failed after 3 attempts.
═══ Gate: verify-passed (osint-hub#72) ═══
Mode: Tier 1 (functional only)

GATE OK: All gates up to 'implement' pass
── Tier 1: Functional ────────────────────────────────
Running tests...
❌ Tests failed (exit 1)
/home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:26: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html
@pytest.mark.unit

backend/tests/unit/test_structured_module_contracts.py:94
/home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:94: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html
@pytest.mark.unit

backend/tests/unit/test_structured_module_contracts.py:163
/home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:163: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html
@pytest.mark.unit

backend/tests/unit/test_structured_module_contracts.py:215
/home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:215: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html
@pytest.mark.unit

-- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html
=========================== short test summary info ============================
FAILED backend/tests/integration/test_api_auth.py::TestAuthIntegration::test_auth_flow_with_case_access
!!!!!!!!!!!!!!!!!!!!!!!!!! stopping after 1 failures !!!!!!!!!!!!!!!!!!!!!!!!!!!
============= 1 failed, 28 passed, 4 skipped, 39 warnings in 7.05s =============
Running linter...
✅ Lint clean
Running type checker...
✅ Types check clean
Previous test count: unknown

❌ GATE FAIL: verify-passed
- Tests failed with exit code 1
GATE FAIL: verify — blocked at 2026-05-28T05:57:56Z
Class: test-failure
Evidence: Verification failed: 1 failures
Git tag: osint-hub#72-gate-verify-fail-831f1bebb1c5 (use gate-retry after fixing)

GSD VERIFY phase failed after 3 attempts. ═══ Gate: verify-passed (osint-hub#72) ═══ Mode: Tier 1 (functional only) GATE OK: All gates up to 'implement' pass ── Tier 1: Functional ──────────────────────────────── Running tests... ❌ Tests failed (exit 1) /home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:26: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html @pytest.mark.unit backend/tests/unit/test_structured_module_contracts.py:94 /home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:94: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html @pytest.mark.unit backend/tests/unit/test_structured_module_contracts.py:163 /home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:163: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html @pytest.mark.unit backend/tests/unit/test_structured_module_contracts.py:215 /home/b/Projects/osint-hub/backend/tests/unit/test_structured_module_contracts.py:215: PytestUnknownMarkWarning: Unknown pytest.mark.unit - is this a typo? You can register custom marks to avoid this warning - for details, see https://docs.pytest.org/en/stable/how-to/mark.html @pytest.mark.unit -- Docs: https://docs.pytest.org/en/stable/how-to/capture-warnings.html =========================== short test summary info ============================ FAILED backend/tests/integration/test_api_auth.py::TestAuthIntegration::test_auth_flow_with_case_access !!!!!!!!!!!!!!!!!!!!!!!!!! stopping after 1 failures !!!!!!!!!!!!!!!!!!!!!!!!!!! ============= 1 failed, 28 passed, 4 skipped, 39 warnings in 7.05s ============= Running linter... ✅ Lint clean Running type checker... ✅ Types check clean Previous test count: unknown ❌ GATE FAIL: verify-passed - Tests failed with exit code 1 GATE FAIL: verify — blocked at 2026-05-28T05:57:56Z Class: test-failure Evidence: Verification failed: 1 failures Git tag: osint-hub#72-gate-verify-fail-831f1bebb1c5 (use gate-retry after fixing)
Mark 2026-05-28 12:22:18 +00:00
  • closed this issue
  • removed the
    quickfix
    label
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
Mark/osint-hub#72
No description provided.