[Fiware-security] TR: Review of Security

[BISSON Pascal]

FYI ... D8.4 delivered ... as per today ( !)

De : BISSON Pascal
Envoyé : mercredi 1 août 2012 17:05
À : Miguel Carrillo
Cc : jhierro at tid.es; BISSON Pascal; GIDOIN Daniel
Objet : RE: Review of Security
Importance : Haute

Dear Miguel,

Find attached to this email the release as PDF file of D8.4.a User & Programmer guide.

As per request of Juanjo I didn't include in it the Secure Storage Service content.

Thanks for your check and confirmation it is now fine.

Hearing from you.

Best Regards,
Pascal


De : Miguel Carrillo [mailto:mcp at tid.es]
Envoyé : mercredi 1 août 2012 12:50
À : BISSON Pascal
Objet : Re: Review of Security

just in case it is not clear:  you can generate the User Manual already.

The rest await changes and a further review.
El 01/08/2012 12:34, Miguel Carrillo escribió:
Dear Pascal

Here go my comments. Sorry for the delay but getting and answering tens of emails per hour does not help.

Unit Testing plan
=======================

 *   One-IDM Unit Testing Plan - REJECTED, easy to fix

    *   Feature of Unit Test 1 not properly linked (previous comment, addressed for other tests but not for this one)
    *   Unit Test 4 & 5 - if it is implemented for R1, they should be fully completed. If they are not for R1, I do not understand what they are doing here. In both cases, this would be a rejection.

 *   Identity Management - GCP Unit Testing Plan - ok
 *   The rests of the GE - ok
 *   In the report part to append to the pdf file

    *   Do not put the header "Unit Testing Report" for each table. Just at the beginning (same as in the example I provided)
    *   Instead of the text "The following table summarises the results of the Unit Tests." for each block, put it once at the beginning, in plural ("The following tables summarise the results of the Unit Tests of Cloud Generic Enablers"). It more elegant and less repetitive. Again, same as the example I provided.
Installation Guides
=================

 *   IDM - this guide is SaaS and therefore not reviewed.  Consistently with this, the info cannot be on the public wiki!!! If it is public, then it is subject to review (and I anticipate that I would reject it). Either delete it from the public wiki (and fill in  the usual template in the doc for the install guide) or state that it will be public.

    *   https://forge.fi-ware.eu/plugins/mediawiki/wiki/fiware/index.php/Identity_Management_-_Installation_and_Administration_Guide

 *   The rest are ok

User Manual
===============

 *   As discussed with Juanjo, SecureStorage  must not be included in this guide. However, it be provided in the others (so I expect to find it in the Unit Testing Plan and in the Install and Admin guide).

Binaries
===========================
Two rejections (one serious, the other looks easy to address)

 *   SecureStorage not delivered - could imply further impact on cost rejection (now for the User Manual only, which is very little) - we seriously do not want to inflict more pain on Thales but please help us not to to do so! We must treat all the partners equally...
 *   Data handling with wrong naming convention (email sent to GE owner - Francesco-  CCing the WPL)

Do let me know when this is fixed and I will take a quick look prior to your generation of the pdf file.

BR

Miguel

--

----------------------------------------------------------------------

     _/          _/_/                     Miguel Carrillo Pacheco

    _/   _/     _/  _/   Telefónica       Distrito Telefónica

   _/ _/_/_/   _/   _/   Investigación y  Edifico Oeste 1, Planta 9

  _/   _/     _/  _/     Desarrollo       Ronda de la Comunicación S/N

 _/          _/_/                         28050 Madrid (Spain)

                                          Tel:  (+34) 91 483 26 77



                                          e-mail: mcp at tid.es<mailto:mcp at tid.es>



Follow FI-WARE on the net



  Website:  http://www.fi-ware.eu

  Facebook: http://www.facebook.com/pages/FI-WARE/251366491587242

  Twitter:  http://twitter.com/Fiware

  LinkedIn: http://www.linkedin.com/groups/FIWARE-4239932

----------------------------------------------------------------------


--

----------------------------------------------------------------------

     _/          _/_/                     Miguel Carrillo Pacheco

    _/   _/     _/  _/   Telefónica       Distrito Telefónica

   _/ _/_/_/   _/   _/   Investigación y  Edifico Oeste 1, Planta 9

  _/   _/     _/  _/     Desarrollo       Ronda de la Comunicación S/N

 _/          _/_/                         28050 Madrid (Spain)

                                          Tel:  (+34) 91 483 26 77



                                          e-mail: mcp at tid.es<mailto:mcp at tid.es>



Follow FI-WARE on the net



        Website:  http://www.fi-ware.eu

        Facebook: http://www.facebook.com/pages/FI-WARE/251366491587242

        Twitter:  http://twitter.com/Fiware

        LinkedIn: http://www.linkedin.com/groups/FIWARE-4239932

----------------------------------------------------------------------

________________________________

Este mensaje se dirige exclusivamente a su destinatario. Puede consultar nuestra política de envío y recepción de correo electrónico en el enlace situado más abajo.
This message is intended exclusively for its addressee. We only send and receive email on the basis of the terms set out at.
http://www.tid.es/ES/PAGINAS/disclaimer.aspx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20120801/64523002/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: D8.4.a final v1.0.pdf
Type: application/pdf
Size: 4149171 bytes
Desc: D8.4.a final v1.0.pdf
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20120801/64523002/attachment.pdf>