Skip to content

Story #15427: Units Originating agencies reassignment#3563

Merged
mkhediri merged 1 commit intodevelopfrom
Story_15427_originating_agency_reassignment
Feb 17, 2026
Merged

Story #15427: Units Originating agencies reassignment#3563
mkhediri merged 1 commit intodevelopfrom
Story_15427_originating_agency_reassignment

Conversation

@mkhediri
Copy link
Copy Markdown
Contributor

@mkhediri mkhediri commented Feb 16, 2026

Description

Interface de réattribution de service producteur

@mkhediri mkhediri added this to the IT 165 milestone Feb 16, 2026
@mkhediri mkhediri self-assigned this Feb 16, 2026
@vitam-prg
Copy link
Copy Markdown
Collaborator

vitam-prg commented Feb 16, 2026 •
edited
Loading

Logo
Checkmarx One – Scan Summary & Details – 1a7e13cf-1276-4184-b788-5ebbb93b6364

New Issues (131)

Checkmarx found the following issues in this Pull Request

# Severity Issue Source File / Package Checkmarx Insight
1 HIGH Passwords And Secrets - Generic Password /vitamui_vars.yml: 220
detailsQuery to find passwords and secrets in infrastructure code.
2 HIGH Reflected_XSS /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
detailsThe method reassignOriginatingAgency embeds untrusted data in generated output with reassignOriginatingAgency, at line 311 of /api/api-archive-se...
Attack Vector
3 HIGH Reflected_XSS /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
detailsThe method reassignOriginatingAgency embeds untrusted data in generated output with reassignOriginatingAgency, at line 311 of /api/api-archive-se...
Attack Vector
4 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
detailsMethod getTenantIdentifier at line 85 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends...
Attack Vector
5 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 175
detailsMethod getApplicationId at line 175 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends u...
Attack Vector
6 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 117
detailsMethod getHttpContext at line 117 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends use...
Attack Vector
7 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 117
detailsMethod getHttpContext at line 117 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends use...
Attack Vector
8 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 117
detailsMethod getHttpContext at line 117 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends use...
Attack Vector
9 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 117
detailsMethod getHttpContext at line 117 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends use...
Attack Vector
10 MEDIUM Privacy_Violation /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java: 85
detailsMethod getTenantIdentifier at line 85 of /api/api-iam/iam-security/src/main/java/fr/gouv/vitamui/iam/security/service/SecurityService.java sends...
Attack Vector
11 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
detailsMethod reassignOriginatingAgency at line 308 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest...
Attack Vector
12 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
detailsMethod reassignOriginatingAgency at line 308 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest...
Attack Vector
13 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
detailsMethod reassignOriginatingAgency at line 308 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest...
Attack Vector
14 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
detailsMethod reassignOriginatingAgency at line 308 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest...
Attack Vector
15 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
detailsMethod reassignOriginatingAgency at line 308 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest...
Attack Vector
16 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
detailsMethod reassignOriginatingAgency at line 308 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest...
Attack Vector
17 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 308
detailsMethod reassignOriginatingAgency at line 308 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest...
Attack Vector
18 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 187
detailsMethod transferRequest at line 187 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesS...
Attack Vector
19 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 269
detailsMethod transferAcknowledgment at line 269 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Ar...
Attack Vector
20 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 177
detailsMethod exportDIPByCriteria at line 177 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Archi...
Attack Vector
21 LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/UnitController.java: 74
detailsMethod searchById at line 74 of /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/UnitController.java gets u...
Attack Vector
22 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 115
detailsMethod searchArchiveUnitsByCriteria at line 115 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/r...
Attack Vector
23 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 177
detailsMethod exportDIPByCriteria at line 177 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/Archi...
Attack Vector
24 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 248
detailsMethod selectUnitWithInheritedRules at line 248 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/r...
Attack Vector
25 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 228
detailsMethod updateArchiveUnitsRules at line 228 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/A...
Attack Vector
26 LOW Log_Forging /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server/rest/ArchivesSearchController.java: 217
detailsMethod startEliminationUnitTreeAction at line 217 of /api/api-archive-search/archive-search/src/main/java/fr/gouv/vitamui/archives/search/server...
Attack Vector

More results are available on the CxOne platform

Fixed Issues (112) Great job! The following issues were fixed in this Pull Request
Severity Issue Source File / Package
HIGH Passwords And Secrets - Generic Password /vitamui_vars.yml: 219
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 168
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 166
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 166
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 166
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/LogbookManagementOperationController.java: 80
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 216
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 215
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 216
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 216
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 194
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 193
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 192
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 195
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 193
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 195
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 193
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 195
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 201
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 287
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 253
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 236
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 287
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 270
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 253
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 236
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 288
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 287
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 253
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 254
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 237
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 236
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 288
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 254
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 237
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 270
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 271
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 270
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/ProjectController.java: 271
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 185
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
LOW Log_Forging /api/api-collect/collect/src/main/java/fr/gouv/vitamui/collect/server/rest/TransactionController.java: 186
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/LogbookManagementOperationController.java: 65
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/LogbookManagementOperationController.java: 105
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/LogbookManagementOperationController.java: 106
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/LogbookManagementOperationController.java: 80
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/LogbookManagementOperationController.java: 105
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/LogbookManagementOperationController.java: 106
LOW Log_Forging /api/api-referential/referential/src/main/java/fr/gouv/vitamui/referential/server/rest/LogbookManagementOperationController.java: 65

More results are available on the CxOne platform

Use @Checkmarx to interact with Checkmarx PR Assistant.
Examples:
@Checkmarx how are you able to help me?
@Checkmarx rescan this PR

@mkhediri mkhediri force-pushed the Story_15427_originating_agency_reassignment branch 2 times, most recently from 9f95a68 to 57b9f54 Compare February 17, 2026 12:42
Regzox
Regzox approved these changes Feb 17, 2026
View reviewed changes
Comment thread ...itional-actions-search/originating-agency-reassignment-dialog/reassignment-dialog.service.ts
Comment thread ...-frontend/projects/archive-search/src/app/archive/archive-search/archive-search.component.ts
@mkhediri mkhediri force-pushed the Story_15427_originating_agency_reassignment branch from 57b9f54 to a1a2cba Compare February 17, 2026 13:40
@hazco75
Copy link
Copy Markdown
Contributor

hazco75 commented Feb 17, 2026 •
edited
Loading

Le count n'est visiblement pas bindé correctement

Screenshot from 2026-02-17 14-58-30

bbenaissa
bbenaissa requested changes Feb 17, 2026
View reviewed changes
Comment thread ...rch-commons/src/main/java/fr/gouv/vitamui/archives/search/common/dto/ReassignRequestDto.java Outdated
Comment thread deployment/environments/group_vars/all/vitamui_vars.yml Outdated
Comment thread deployment/roles/nginx_webapp/templates/frontend/config.json.j2 Outdated
Comment thread deployment/scripts/mongod/v9.1/0-03_update_archive_administrator_profiles_description.js.j2 Outdated
Comment thread deployment/scripts/mongod/v9.1/0-03_update_archive_administrator_profiles_description.js.j2 Outdated
Comment thread docs/fr/architecture/sections/architecture.md
Comment thread ...-frontend/projects/archive-search/src/app/archive/archive-search/archive-search.component.ts Outdated
Comment thread ...-frontend/projects/archive-search/src/app/archive/archive-search/archive-search.component.ts
Comment thread ...-frontend/projects/archive-search/src/app/archive/archive-search/archive-search.component.ts
@mkhediri mkhediri force-pushed the Story_15427_originating_agency_reassignment branch from a1a2cba to 7c8f47b Compare February 17, 2026 15:36
@mkhediri mkhediri requested a review from bbenaissa February 17, 2026 15:45
@mkhediri mkhediri force-pushed the Story_15427_originating_agency_reassignment branch from 7c8f47b to 60ea982 Compare February 17, 2026 16:18
@mkhediri mkhediri merged commit 47c0c44 into develop Feb 17, 2026
14 checks passed
@mkhediri mkhediri deleted the Story_15427_originating_agency_reassignment branch February 17, 2026 22:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@Regzox Regzox Regzox approved these changes

@bbenaissa bbenaissa bbenaissa approved these changes

Assignees

@mkhediri mkhediri

Labels

None yet

Projects

None yet

Milestone

IT 165

Development

Successfully merging this pull request may close these issues.

5 participants

@mkhediri @vitam-prg @hazco75 @bbenaissa @Regzox