From f4fec7ceb2ee6bca68bd4d8d66e8f0eae6c9d5e2 Mon Sep 17 00:00:00 2001 From: Jino Tesauro Date: Fri, 3 Apr 2026 15:06:26 -0500 Subject: [PATCH] change to reactivating risk accepted findinggs --- dojo/engagement/views.py | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/dojo/engagement/views.py b/dojo/engagement/views.py index 1b94ace21f4..c955439814f 100644 --- a/dojo/engagement/views.py +++ b/dojo/engagement/views.py @@ -1442,9 +1442,10 @@ def view_edit_risk_acceptance(request, eid, raid, *, edit_mode=False): "Since you are not the note's author, it was not deleted.", extra_tags="alert-danger") - if "remove_finding" in request.POST: + if edit_mode and "remove_finding" in request.POST: finding = get_object_or_404( - Finding, pk=request.POST["remove_finding_id"]) + risk_acceptance.accepted_findings, + pk=request.POST["remove_finding_id"]) ra_helper.remove_finding_from_risk_acceptance(request.user, risk_acceptance, finding)