Users with only one capability should be able to login in an empty platform

[aHenryJard]

Description

Given a user with:

When I login on the platform, I cannot even logout

Environment

1. OS (where OpenCTI server runs): { e.g. Mac OS 10, Windows 10, Ubuntu 16.4, etc. }
2. OpenCTI version: 6.8.8
3. OpenCTI client: { e.g. frontend or python }
4. Other environment details:

Reproducible Steps

Steps to create the smallest reproducible scenario:

1. { e.g. Run ... }
2. { e.g. Click ... }
3. { e.g. Error ... }

Expected Output

Actual Output

Additional information

Screenshots (optional)

[aHenryJard]

Please add an e2e coverage if possible (no crash on RootPrivateQuery when having only one capa that is not knowledge)

[marieflorescontact]

I cannot reproduce the bug @aHenryJard => I created a fresh user, with fresh role (w/ capa as you described) and group. platform segregation is activated.

[SouadHadjiat]

@marieflorescontact I just reproduced this bug, I created a role without "access knowledge" capability, I just gave it settings capabilities (tested with markings / dissemination lists / credentials), I don't have platform organization, and when I login in with this user (login works well), I see this error screen :

[SouadHadjiat]

I think the issue is this query : it needs knowledge and settings_setcustomization capabilities. Before this commit it was accessible without capabilities