We received a request to allow users to use list_edit on the sn_vul_vulnerable item table, to bulk assign VIT to themselves. OOB there is an ACL that prevents ANYONE from using list_edit on the VIT table (and sn_vul_vulnerability VUL as well) ... which is a bit odd to me.
I found there is a nice OOB solution for VUL records, where you have a UI action 'Assign to Me' and can use it in list view.
However this does not exist OOB for the VIT table. Which makes me wonder - are we using VIT wrong? You shouldn't need to assign VITs to users, just groups? And the VUL is what is worked and assigned to users.
Any thoughts appreciated!
