Running GET cURL for a valid occurrence ID but from the wrong project

[Parv Mital]

Hello,

I have an issue that I am facing at the moment and I wanted to get more insight about it. I did make a GitHub Issue here but I will paste it here too.

------------------------------------------------------------------------------------------------------------------------------------------

Scenario: Running GET cURL for a valid occurrence ID but from the wrong project

Expected Behaviour

The response returns an error stating that an occurrence with that ID does not exist

Actual Behaviour

The response deletes the occurrence from the original project and moves it to this project being cURL-ed

Steps to Reproduce the Problem

Create local grafeas server docker run -p 8080:8080 --name grafeas us.gcr.io/grafeas/grafeas-server:v0.1.6

Create 2 projects within this server (example: proj1, proj2)

Add 1 occurrence entry in each project (example: projects/proj1/occurrences/occ_A, projects/proj2/occurrences/occ_B)

Run curl -X GET http://localhost:8080/v1beta1/projects/proj2/occurrences/occ_A 

Result: The occ_A is removed from proj1 and is added to proj2 (occ_B stays unchanged/unmoved as expected).

I have only tried this on v1beta1 but tried it on multiple image tags from 0.1.0 to 0.1.6. Results have been consistent

--------------------------------------------------------------------------------------------------------------------------------------------

Any insight or information on this topic would be appreciated.

Thanks!

[Parv Mital]