Do not allow user to delete a indicator (or report object it is created from) if it is linked to a correlation rule

[himynamesdave]

To stop rules linked to a correlation rule being deleted and irretrievable, do not allow user to delete rule/report found in a correlation.

Should read, sorry, you cannot delete this rule because it is linked to a correlation

[fqrious]

first off, we need to decide what relationship type to use in linking rule with correlation-rule

[himynamesdave]

@fqrious to create the Indicator -> Indicator relationship use the following...

{
    "type": "relationship",
    "spec_version": "2.1",
    "id": "relationship--<UUIDv5>",
    "created_by_ref": "<SAME AS CORRELATION INDICATOR>",
    "created": "<SAME AS CORRELATION INDICATOR>",
    "modified": "<SAME AS CORRELATION INDICATOR>",
    "relationship_type": "contains-rule",
    "description": "<CORRELATION INDICATOR NAME> contains the rule <BASE INDICATOR NAME>",
    "source_ref": "<CORRELATION INDICATOR ID>",
    "target_ref": "<BASE RULE ID>",
    "object_marking_refs": [
        "marking-definition--<SAME AS CORRELATION INDICATOR>"
        "marking-definition--97ba4e8b-04f6-57e8-8f6e-3a0f0a7dc0fb"
    ]
}

UUIDv5 is generated using namespace 97ba4e8b-04f6-57e8-8f6e-3a0f0a7dc0fb and source_ref+target_ref