metrics not updated when enabling portfolio access control

[redaabdellah21]

The defect may already be reported! Please search for the defect before creating one.

Current Behavior:

When enabling the portfolio access controle, metrics are not updated based on the team's projects only.
Meaning: if a team can access only 2 out of 10 projects, they will see metrics for all the 10 projects rather than only the 2 they are allowed to. i am talking about dashboard metrics

Steps to Reproduce:

-create multiple projects
-Add a team with managed users, and limit it to one or two projects

• enable portfolio access control
• login as one of the team's users

you should only see the teams projects, but you will see metrics for all the projects

Expected Behavior:

if a team can access one project, it should only see metrics of that project.

Environment:

• Dependency-Track Version: 4.4.2
• Distribution: Docker
• BOM Format & Version:
• Database Server: H2
• Browser: egde

Additional Details:

I know this is on beta version, but it is a really good feature to control the access
(e.g. detailed explanation, stacktraces, related issues, suggestions how to fix, links for us to have context, eg. stackoverflow, gitter, etc)

[dioxygene]

hi,
this issue is closed because it's corrected with the issue of #1852 ?

i have the same issue, when i have several project, with several role, the global dashboard show all the projects metrics.

thanks
Regards

[nscuro]

This is being worked on for the upcoming v5: DependencyTrack/hyades#1680

[nscuro]

Implementation just got merged in v5: DependencyTrack/hyades-apiserver#1316