[Bug] Unable to add new datatypes

[jsomwaru]

Request Type

Bug

Work Environment

Question	Answer
OS version (server)	AL2
TheHive version / git hash	4.0
Package Type	RPM

Problem Description

I think I found a bug in the Hive4. When I sign in as an admin and navigate to:

Admin > Observable types

Then try to add an observable. The observable appears in in the UI on the observable types page. However, when i sign out and sign into my personal account on the hive. When trying to add observables to the case the new data types are not there.

Also in the Admin > Observable types page I am not able to delete added datatypes.

Steps to Reproduce

1. Authenticate admin account
2. Admin > Observable types
3. add type
4. Create a case and new type is not there

Complementary information

[jsomwaru]

This issue probably won't be looked at because you guy are completely redoing observables. But this is a bug and currently not possible in the latest release of the hive4.

[jsomwaru]

The bug can be seen in the logs.

On the admin add Observable types page:
The logs show the service making a request to

On the Case page:
The logs show the service going to

These api requests return different data. The list_artifactDataTypes api call only return data types created by the system and this is why adding observable types does not and will not work on the most recent version of the hive4.

[nadouani]

In fact, the observable dialog relies on the old api for observable datatypes. We will use the new API. Thanks for finding this bug.