fix: normalize scope within range to ensure allowlist check (#3735)

Author: LaurenceJJones

cmd/crowdsec-cli/clidecision/import.go

@@ -199,7 +199,7 @@ func (cli *cliDecisions) import_(ctx context.Context, input string, duration str
 		decisionsStr := make([]string, 0, len(chunk))
 
 		for _, d := range chunk {
-			if *d.Scope != types.Ip && *d.Scope != types.Range {
+			if normalizedScope := types.NormalizeScope(*d.Scope); normalizedScope != types.Ip && normalizedScope != types.Range {
 				continue
 			}
 

test/bats/cscli-allowlists.bats

@@ -167,6 +167,18 @@ teardown() {
     assert_stderr --partial 'Decision successfully added'
 }
 
+@test "cscli allowlist: check lowercase range decisions import" {
+    rune -0 cscli allowlist create foo -d 'a foo'
+    rune -0 cscli allowlist add foo 192.168.0.0/16
+    rune -0 cscli decisions import -i - <<<'192.168.0.0/24' --format values --scope range 
+    assert_output - <<-EOT
+	Parsing values
+	Value 192.168.0.0/24 is allowlisted by [192.168.0.0/16 from foo]
+	Imported 0 decisions
+	EOT
+    refute_stderr
+}
+
 @test "cscli allowlists check" {
     rune -0 cscli allowlist create foo -d 'a foo'
     rune -0 cscli allowlist add foo 192.168.0.0/16