Check if any incidents are assigned to inactive user (#178)

* Check if any incidents are assigned to inactive user

* Update README.md

Check if any incidents are assigned to inactive user

---------

Co-authored-by: admin <[email protected]>
Co-authored-by: Astrid Sapphire <[email protected]>

README.md

@@ -21,6 +21,9 @@ Check any Catalog Tasks Assigned to Inactive user
 ### Check any assets assigned to inactive user
 Check if any asset is assigned to inactive users.
 
+### Check if any incidents are assigned to inactive users.
+Check if any incidents are assigned to inactive user.
+
 ### Inactive User Check: Catalog Item
 We should ensure that inactive users are removed from being assigned as Catalog item owners.
 

ca8467c41b9abc10ce0f62c3b24bcbaa/checksum.txt

@@ -1 +1 @@
-uEH-MVj5358yRx1qNhQZQDDN5DRl_EHSvw3CQ3-uqkJ_UjcZdANraoCdU5KL_mwp7x_66jQSj054ighy53LegM7d6xp8_kOx-SoZTIBBtdf3RE1OwevZASv1Xl2dR1lp0CM5i8lVq4rGQFmN2RkUv1xgprPYKTBCZ4CamesJX89wF4nSGzRdUqPHkH_e73S8Jgwmmm4BxHZ0ow4yyQ3QJbAu90kHsbyehFpjxnzDPjiml_OPVkwylOkpqn4QviJ4UAcgb-00eYvr7RSYX2blyPTisybSLuK2ty0jsylJC8xzt5ZuO5ronXCrqPIwN2P9yXqU-nP3xnCZJJXnSGV2xUU-5OkcoMrfEht5HOM39kIOxzzJvGAOXs6wGA7OqEDdoZHQeZL3eR9m6lq_nHMCHPYjl8nFUedj10VV3oF6YETA4MX0MGNrybGVxIFfibgbqAzLnwiUnfKRtdvF3kRpcIBn8WGEiiSSzDDXovB4gY1b8Fhkk8SNhAM8a9518wFfJRbCWj4kwIJRbbKOKmOf1PY31VjHy8tQ0FH8xALm4sbGHfDTgGdo-Cjy3Velkrr3nqFJJOpdpqB1-I4_fXl8clJPYUou8CdxBhc9bhuZbkJvggMU-8Ne18HimH3K9cn2OLyRe7gRi8-nfG8c-pzvY_gW6iYdD3Yvdfqtirxs6gw
+vqS62dwsHOftj0lK7PR87gomw2pIhK44opT0jPKRyjaGenHOsrTkyPCKzQ7rEUQHL5wJzSlMh2o7sx36ilRDd4i88RNzKdRmZQrAE43MBZiIP0vH5yIkRc9lrfiqlfrqlDa5QTwro6H3y4_p_S4sJaGSnLteaAJVb5sn7kboEKpPAvpdV8cgu-rlAKAzB9vegqMVyfgzrzzPlsZhChJpJZzGaqAhnN8h8VY1CH05130BFPqoo1M4DPdLevgSBoH_Hdx1UI4gh7XNIc722PYxnWc-suyoupr9vJk1mHKv0TtIG1UVf1UdlYuLplbA83Xjv-BGOzuHYCCBHy6DG97PjEYe_dHt5OE_51l59nDazeJXpYqQUQ21dEF4pnh1ZkKf3opqlxB7cHRtDL4-Fvj0HKemx8WjSoDC2ww_kGolUrR8KNWIewMS8de65BZMOFuvi0DvA2M0RjNSdxtDtGuJbGfd1gXuk8EO8B69uuyTDBD1q7hzowaVGXALNqKfLEk_BqsTv03-3sX1AAC7lU2VNjqCcESKEPimlLbYEh2xZUySwNJ3nsugjviNfHsGofds0xUjVfNJEoQtqEOu3VfMFK0zufXyLkCxLH-HFKwAy1tb2_Z0RvVK8MhrHfcqE5dQSbGTpOKW4J-OR939_Vx2KD1hwu901aNQmO6NMN5ix2c

ca8467c41b9abc10ce0f62c3b24bcbaa/update/scan_table_check_7558925a83211210533ecc50ceaad346.xml

@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8"?><record_update table="scan_table_check">
+    <scan_table_check action="INSERT_OR_UPDATE">
+        <active>true</active>
+        <advanced>false</advanced>
+        <category>manageability</category>
+        <conditions table="incident">assigned_to.active=false^EQ<item endquery="false" field="assigned_to.active" goto="false" newquery="false" operator="=" or="false" value="false"/>
+            <item endquery="true" field="" goto="false" newquery="false" operator="=" or="false" value=""/>
+        </conditions>
+        <description>Check if any incidents are assigned to inactive user.</description>
+        <documentation_url/>
+        <finding_type>scan_finding</finding_type>
+        <name>Check inactive user:incident</name>
+        <priority>2</priority>
+        <resolution_details/>
+        <run_condition/>
+        <score_max>100</score_max>
+        <score_min>0</score_min>
+        <score_scale>1</score_scale>
+        <script><![CDATA[(function (engine) {
+
+    // Add your code here
+
+})(engine);]]></script>
+        <short_description>Incident should not be assigned to inactive users.</short_description>
+        <sys_class_name>scan_table_check</sys_class_name>
+        <sys_created_by>admin</sys_created_by>
+        <sys_created_on>2024-11-01 01:11:37</sys_created_on>
+        <sys_id>7558925a83211210533ecc50ceaad346</sys_id>
+        <sys_mod_count>0</sys_mod_count>
+        <sys_name>Check inactive user:incident</sys_name>
+        <sys_package display_value="Example Instance Checks" source="x_appe_exa_checks">ca8467c41b9abc10ce0f62c3b24bcbaa</sys_package>
+        <sys_policy/>
+        <sys_scope display_value="Example Instance Checks">ca8467c41b9abc10ce0f62c3b24bcbaa</sys_scope>
+        <sys_update_name>scan_table_check_7558925a83211210533ecc50ceaad346</sys_update_name>
+        <sys_updated_by>admin</sys_updated_by>
+        <sys_updated_on>2024-11-01 01:11:37</sys_updated_on>
+        <table>incident</table>
+        <use_manifest>false</use_manifest>
+    </scan_table_check>
+    <sys_translated_text action="delete_multiple" query="documentkey=7558925a83211210533ecc50ceaad346"/>
+</record_update>