As a User, I want to traverse the STIX graph over TAXII in an efficient manner, so I don't waste resources about cti-taxii2 HOT 2 OPEN

I have an indicator and I want to pull all of the sightings.

from cti-taxii2.

So, I looked at implementing this in our database abstraction layer. The issue I ran into for directed paths is combining connectivity with Collection read permissions

It's possible that a connected STIX Object may be in another Collection where the client does not have read permissions. So, walking digraph paths becomes a non-trivial operation. It becomes more complicated with can_read which determines if the client can read the collection, meaning that can_read can vary per client for a given Collection. So, if I start walking the objects, I have to determine if connected objects:

• are in the the collection the client requested
• are in another collection where the client has read access

It got a little weird. This could just be our implementation issue.

from cti-taxii2.