-
Type: Bug
-
Status: New
-
Priority: Major
-
Resolution: Unresolved
-
Affects Version/s: STIX Version 2.0 CSPRD01
-
Fix Version/s: None
-
Component/s: None
-
Labels:None
-
Environment:
Technical
-
Proposal:
3.1 Common Properties created_by_ref reads in part:
*****
If this attribute is omitted, the source of this information is undefined. This may be used by object creators who wish to remain anonymous.
*****
How does that interact with versioning as defined in 3.4 Versioning? While the text there speaks of the object creator, if the creator is anonymous, who can create additional versions of the object?
The same problem comes up with revocation. Can anyone revoke an object without a created_by_ref?
Or for that matter, what if several creators modify the same object? How does versioning work then?