in custom/asf.js [265:300]
asfhookupsertdoc: function(req,dorefresh) {
// in case we have an old record with no email list set CVE 5.0
if (req.body.CNA_private) {
if (!req.body.CNA_private.userslist || req.body.CNA_private.userslist == "") {
//self.getemaillistforpmc(req.body.CNA_private.owner,function(res) {
// req.body.CNA_private.userslist = res;
// dorefresh = true;
// console.log(res);
//});
}
}
// enforce workflow state cve4
if (req.body.CVE_data_meta) { // CVE 4.0
if (req.body.CVE_data_meta.STATE == "RESERVED") {
// if it's in reserved but someone is editing it, move it to draft
if (!req.user.pmcs.includes(conf.admingroupname)) {
console.log("asf4 reserved but the description changed");
req.body.CVE_data_meta.STATE = "DRAFT";
dorefresh=true;
}
}
}
// enforce workflow state cve5
if (req.body.CNA_private && req.body.CNA_private.state) { // CVE 5.0
if (req.body.CNA_private.state == "RESERVED") {
// if it's in reserved but someone is editing it, move it to draft
if (!req.user.pmcs.includes(conf.admingroupname)) {
console.log("asf4 RESERVED but the description changed");
req.body.CNA_private.state = "DRAFT";
dorefresh=true;
} else {
console.log("asf4 RESERVED but saved by security, no change");
}
}
}
},