AWS solutions documentation change
Summary
Updated documentation for case ownership management endpoint with added schemas, removed OPTIONS method, and detailed CaseAction permissions enum
Security assessment
The changes document an elevated permissions endpoint for ownership management and access control. Added CaseAction enum includes security-relevant actions like INVITE and RESTORE_FILES, but there's no evidence of addressing a specific vulnerability. The documentation enhances security feature visibility.
Diff
diff --git a/solutions/latest/dea-api/cases-caseid-owner.md b/solutions/latest/dea-api/cases-caseid-owner.md index 0190f43fc..c27f13282 100644 --- a//solutions/latest/dea-api/cases-caseid-owner.md +++ b//solutions/latest/dea-api/cases-caseid-owner.md @@ -5 +5 @@ -URIHTTP methods +URIHTTP methodsSchemasProperties @@ -7 +7,3 @@ URIHTTP methods -# Cases caseId Owner +# Cases – Case owner + +This elevated permissions endpoint provides a way to update the owner of a case in DEA, facilitating ownership management and access control. @@ -23,6 +24,0 @@ Path parametersName| Type| Required| Description -### OPTIONS - -Path parametersName| Type| Required| Description ----|---|---|--- -`caseId`| String| True| - @@ -31 +27,72 @@ ResponsesStatus code| Response model| Description -`204`| None| 204 response +`200`| `CaseUser`| Case owner set successfully + +## Schemas + +### Request bodies + + + { + "userId": "string", + "caseId": "string" + } + +### Response bodies + + + { + "userUlid": "string", + "caseUlid": "string", + "actions": [ + enum + ], + "caseName": "string", + "userFirstName": "string", + "userLastName": "string", + "created": "string", + "updated": "string" + } + +## Properties + +### CaseAction + + * `VIEW_CASE_DETAILS` + + * `UPDATE_CASE_DETAILS` + + * `UPDATE_CASE_STATUS` + + * `UPLOAD` + + * `DOWNLOAD` + + * `VIEW_FILES` + + * `CASE_AUDIT` + + * `INVITE` + + * `RESTORE_FILES` + + + + +### CaseUser + +Property| Type| Required| Description +---|---|---|--- +`actions`| Array of type CaseAction| False| +`caseName`| string| False| +`caseUlid`| string| False| +`created`| string| False| +`updated`| string| False| +`userFirstName`| string| False| +`userLastName`| string| False| +`userUlid`| string| False| + +### Caseownerdata + +Property| Type| Required| Description +---|---|---|--- +`caseId`| string| True| +`userId`| string| True| @@ -39 +106 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Cases caseId Files fileId Restore +Cases – Case file info @@ -41 +108 @@ Cases caseId Files fileId Restore -Cases caseId ScopedInformation +Cases – Create case