{
  "context": "This criteria evaluates how well the engineer uses PyMISP's user management API to build a user onboarding automation tool. Focus is on correct usage of PyMISP methods for CRUD operations on user accounts.",
  "type": "weighted_checklist",
  "checklist": [
    {
      "name": "User Creation",
      "description": "Uses PyMISP's add_user() method to create new user accounts. Properly constructs MISPUser objects or dictionaries with required fields (email, org_id, role_id).",
      "max_score": 25
    },
    {
      "name": "User Retrieval",
      "description": "Uses PyMISP's get_user() method to retrieve specific users by ID, and users() method to list all users in the MISP instance.",
      "max_score": 20
    },
    {
      "name": "Duplicate Detection",
      "description": "Uses PyMISP's users() method to check for existing users before creation, comparing against email addresses to prevent duplicate user creation.",
      "max_score": 15
    },
    {
      "name": "Password Management",
      "description": "Uses PyMISP's change_user_password() method to update user passwords with the correct parameters (user_id, new_password).",
      "max_score": 15
    },
    {
      "name": "Role Updates",
      "description": "Uses PyMISP's toggle_user_role() method or update_user() method to change user role assignments with proper user_id and role_id parameters.",
      "max_score": 15
    },
    {
      "name": "User Deletion",
      "description": "Uses PyMISP's delete_user() method to remove user accounts from MISP, passing the correct user_id parameter.",
      "max_score": 10
    }
  ]
}