Skip to content

GET /org/:identifier includes misleading InUse field #1678

@ElectricNroff

Description

@ElectricNroff

const result = data.toObject()
delete result.__t
delete result.__v
delete result._id
return deepRemoveEmpty(result)

and therefore getOrg in src/controller/org.controller/org.controller.js places "inUse": false in the GET /org/:identifier API response (but "inUse": false is not in the GET /registry/org/:identifier API response).

There is no documented meaning of inUse and it's realistic to have a mistaken guess that could complicate the process of handling CVE Services misuse by an organization. For example, somebody could guess that false means that the organization has already been marked "not in use" and its users have no access to the server.

There is also a support cost if organizations start worrying about "inUse": false and ask the Secretariat what it means.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    Status

    Normal Priority

    Status

    Todo

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions