Sequential IDs

[athu-tran]

User story: As a user from a CNA or CNA-LR, I want to be able to reserve multiple IDs and for them to be in sequential order so that I can publish related CVEs with sequential IDs for my customers.
AC:
Given that a user specifies an amount greater than 1 and for the batch to be sequential, then the system reserves a sequence of CVE IDs equal to the amount specified and includes them in the response.

Historical Requirements Mapping
R3: Reservations can be requested and assigned in either a random (default) or sequential based on the request. Note: Random is not the default, user must specify if the request is sequential/non-sequential
R4: Reservations can be requested and assigned as a single (default) or block of CVE IDs
R5: Reservations are tracked to the requesting authorized CVE user and CNA organization

[mprpic]

Can this story specify what happens if the requested amount of sequential CVEs exceeds the length of any available sequences of CVEs in the CNA's quota? An extreme example: a CNA has a quota of 10 CVEs; the first request asks for 6 sequential CVEs, it succeeds; the next request asking for another 6 should fail, a request for 4 should succeed.

[athu-tran]

Can this story specify what happens if the requested amount of sequential CVEs exceeds the length of any available sequences of CVEs in the CNA's quota? An extreme example: a CNA has a quota of 10 CVEs; the first request asks for 6 sequential CVEs, it succeeds; the next request asking for another 6 should fail, a request for 4 should succeed.

@mprpic The response from the development team is below:
With that situation in mind, a user would first, encounter an error message from the "request asking for another 6". Then, if, and only if the user makes new request for 4, since 4 is within the CNA quota then the request would succeed.
If a CNA requests more IDs than its ID quota the 404 error message will be "The amount requested would exceed the organization's ID quota. No more IDs can be reserved until the number of IDs in the Reserved state goes below the ID quota or the ID quota is raised. If you feel you are receiving this message in error, please contact support." A header in the response will indicate the amount of IDs the CNA can reserve given its ID quota limit.

[mattrbianchi]

Technically, the code will be a 403 because reserving above your quota is forbidden.