Version: 3.27.1
Description of the issue:
When attempting a policy review update via the API using the PUT method, the application returns an address-related error for the endpoint (/api/security-policy-reviews/{id}), even though a GET request to the same endpoint succeeds.
Steps:
- Using the Eramba Postman documentation ( Postman ) I created a small script with our data to test this functionality.
- When trying to update a security policy that exists and is not completed, the request returns a Bad Request error:
The requested address‘/api/security-policy-reviews/80’was not found on this server. - I tested the same id with a GET request to retrieve the Policy Review information and it returns the following JSON:
{“success”:true,“data”:{“id”:80,“model”:“SecurityPolicies”,“foreign_key”:16,“planned_date”:“2024-09-25”,“actual_date”:null,“description”:“”,“completed”:0,“version”:null,“use_attachments”:null,“policy_description”:null,“url”:null,“created”:“2023-09-25T09:23:56+02:00”,“edited”:null,“reviewers”:[{“id”:1144,“model”:“SecurityPolicyReviews”,“foreign_key”:80,“field”:“Reviewers”,“object_id”:15,“object_model”:“User”,“object_key”:“User-15”,“group”:null,“user”:{REDACTED}}]}}
I tried all the different options for the “use_attachments” parameter. For values 0 and 2 (Use Content and Use URL) the application returns a Bad Request. For value 1 (Use Attachments) it returns an Internal Server Error.
I’ll add here the cURL request for the case using URL, maybe I am missing something:
curl --location --globoff --request PUT ‘``https://REDACTED/api/security-policy-reviews/80’``
–header ‘Accept: application/json’
–header ‘Content-Type: application/json’
–header ‘Authorization: Basic REDACTED’
–data ‘{
“foreign_key”: 16,
“planned_date”: “2024-09-25”,
“actual_date”: “2025-10-23”,
“description”: “Description edited”,
“completed”: 1,
“reviewers”: [“User-15”],
“version”: “1.1”,
“use_attachments”: 2,
“policy_description”: “”,
“url”: “``https://eramba.org``”,
}’
Is anyone else experiencing this problem or am I doing something wrong?
Regards,
Alejandro