I'm assuming you already have an inbound email processing script. If so, then you can put logic into the script to check that the email sender is a member by checking against the incident member list in the script.
Here is an example that shows the members list contains the email addresses of the members so hopefully you can use that for the logic:
log.info(incident.members)
I didn't post a screenshot due to PII. But try it on your system.
Ben
------------------------------
Ben Lurie
------------------------------
Original Message:
Sent: Fri June 19, 2020 05:41 AM
From: Sophy Chhong
Subject: Inbound email: validate sender
The incident members struggle with adding table rows in resilient since they sometimes add up to 50 rows at once. We created the inbound mailbox so that they can update the table easily with an email. Since it is an inbox, we may receive other kinds of emails and therefore want to prevent them from getting processed. This would also include members of an incident B who want to update an incident A, which they have no access to. To get this validation we would like to check the sender of an email whether he/she is an actual member of an incident before allowing updates to it.
I hope this clarifies our use case.
------------------------------
Sophy Chhong
Original Message:
Sent: Thu June 18, 2020 07:42 AM
From: Ben Lurie
Subject: Inbound email: validate sender
I don't fully understand the use case. Currently in Resilient an incident member or incident owner can update the incident. I'm not sure what you would like to accomplish with the email sender. Can you elaborate on the use case?
Ben
------------------------------
Ben Lurie
Original Message:
Sent: Wed June 17, 2020 11:29 AM
From: Sophy Chhong
Subject: Inbound email: validate sender
Hi everyone
I created an inbound connection in resilient and I managed to process the incoming emails with a playbook script. Now, I actually want to validate the sender so that only members of an incident can update that incident.
Are there ways to do this securely? I was thinking of checking the member list with matches with the sender.
Thanks.
------------------------------
Sophy Chhong
------------------------------