[client] add new operation types for users background tasks (opencti #3343)

Author: JeremyCloarec

pycti/utils/opencti_stix2.py

@@ -2511,6 +2511,10 @@ def apply_patch(self, item):
                 self.opencti.notification.update_field(
                     id=item_id, input=field_patch_without_files
                 )
+            elif item["type"] == "user":
+                self.opencti.user.update_field(
+                    id=item_id, input=field_patch_without_files
+                )
             else:
                 self.opencti.stix_domain_object.update_field(
                     id=item_id, input=field_patch_without_files
@@ -2583,6 +2587,65 @@ def organization_unshare(self, item):
                 item["id"], organization_ids, sharing_direct_container
             )
 
+    def element_add_organizations(self, item):
+        organization_ids = self.opencti.get_attribute_in_extension(
+            "organization_ids", item
+        )
+        if organization_ids is None:
+            organization_ids = item["organization_ids"]
+        if item["type"] == "user":
+            for organization_id in organization_ids:
+                self.opencti.user.add_organization(
+                    id=item["id"], organization_id=organization_id
+                )
+        else:
+            raise ValueError(
+                "Add organizations operation not compatible with type",
+                {"type": item["type"]},
+            )
+
+    def element_remove_organizations(self, item):
+        organization_ids = self.opencti.get_attribute_in_extension(
+            "organization_ids", item
+        )
+        if organization_ids is None:
+            organization_ids = item["organization_ids"]
+        if item["type"] == "user":
+            for organization_id in organization_ids:
+                self.opencti.user.delete_organization(
+                    id=item["id"], organization_id=organization_id
+                )
+        else:
+            raise ValueError(
+                "Remove organizations operation not compatible with type",
+                {"type": item["type"]},
+            )
+
+    def element_add_groups(self, item):
+        group_ids = self.opencti.get_attribute_in_extension("group_ids", item)
+        if group_ids is None:
+            group_ids = item["group_ids"]
+        if item["type"] == "user":
+            for group_id in group_ids:
+                self.opencti.user.add_membership(id=item["id"], group_id=group_id)
+        else:
+            raise ValueError(
+                "Add groups operation not compatible with type", {"type": item["type"]}
+            )
+
+    def element_remove_groups(self, item):
+        group_ids = self.opencti.get_attribute_in_extension("group_ids", item)
+        if group_ids is None:
+            group_ids = item["group_ids"]
+        if item["type"] == "user":
+            for group_id in group_ids:
+                self.opencti.user.delete_membership(id=item["id"], group_id=group_id)
+        else:
+            raise ValueError(
+                "Remove groups operation not compatible with type",
+                {"type": item["type"]},
+            )
+
     def element_operation_delete(self, item, operation):
         # If data is stix, just use the generic stix function for deletion
         force_delete = operation == "delete_force"
@@ -2665,6 +2728,14 @@ def apply_opencti_operation(self, item, operation):
             self.opencti.stix_core_object.ask_enrichments(
                 element_id=item["id"], connector_ids=connector_ids
             )
+        elif operation == "add_organizations":
+            self.element_add_organizations(item)
+        elif operation == "remove_organizations":
+            self.element_remove_organizations(item)
+        elif operation == "add_groups":
+            self.element_add_groups(item)
+        elif operation == "remove_groups":
+            self.element_remove_groups(item)
         else:
             raise ValueError(
                 "Not supported opencti_operation",