Documentation missing required permissions

[Aman-HMS]

Description

The export user requires additional SAST permissions which aren't described in the documentation/readme.md

Provide a description of the issue

• Running the tool in verbose mode highlights the following error

ERROR

15:39:25 ERROR missing permission Sast > System Configuration > Manage System Settings

Correction

• Assigning the user this missing permissions fixes the issue and tool is able to export data successfully. Please update the documentation to reflect this problem.

[cx-joao-alves]

Hey there @Aman-HMS 😊 , the SAST permissions are being described in readme. Take a look bellow:

[Aman-HMS]

When I ran the tool with user with a role with those permissions it failed to authenticate. Running it in verbose mode gave the error message it was missing sast -> system configuration -> manage system settings. After I updated the role to include this permission - the user was able authenticate to sast api successfully and get export data. Below is the anonymized error snippet you see by giving --verbose flag when running exporter tool. 15:39:24 INFO connecting to SAST 15:39:24 DEBUG request attempt=1 method=POST url=https://<sast-host>/CxRestAPI/auth/identity/connect/token 15:39:25 DEBUG response method=POST status=200 url=https://<sast-host>/CxRestAPI/auth/identity/connect/token 15:39:25 ERROR missing permission Sast > System Configuration > Manage System Settings 15:39:25 ERROR execution failed: permissions error - please add missing permissions to your SAST user PS C:\Users\<username>\Downloads\cxsast_exporter_1.9.3_windows_amd64\cxsast_exporter_1.9.3_windows_amd64> ### From the internal/app/permissions/permissions.go - The permission is required there, just not listed in the documentation: const ( useOdataPermission = "use-odata" generateScanReportPermission = "generate-scan-report" manageAuthProviderPermission = "manage-authentication-providers" manageRolesPermission = "manage-roles" manageSystemSettings = "manage-system-settings" viewResults = "view-results" ) var permissionDescription = map[interface{}]string{ useOdataPermission: "Sast > API > Use Odata", generateScanReportPermission: "Sast > Reports > Generate Scan Report", viewResults: "Sast > Scan Results > View Results", **manageSystemSettings: "Sast > System Configuration > Manage System Settings",** manageAuthProviderPermission: "Access Control > General > Manage Authentication Providers", manageRolesPermission: "Access Control > General > Manage Roles", }