[Fiware-security] Review of more deliverables

[BISSON Pascal]

Dear Slim,

So far I know that each of the WPLs have received such review report and are working with their team on addressing/fixing the issues.  If think there would be a time where we could dispute the fact that some of our costs would be rejected by TID (this others will probably do as well). But for the time being we have to make an effort in addressing as much comments as we can to argue after. That’s why I’m requesting an individual effort from each of the GE owners and so you.

By the way this what the others are doing (e.g. when looking at WP3 leaded by SAP I don’t see Torsten complaining …, but what is true for WP3 is also true for the other chapters WP4, WP5, W6, WP7 … ). So let’s try to address most of the review comments for each of our deliverables, produce and deliver PDF versions according the set deadlines and wait for decision of TID (and then we could start to complain and argue). Frankly being said a review was performed we have to have it addressed (there is no escape) if not it would be a fault from our side and would be far more difficult afterwards to argue. Since even more that and I hope you can agree we don’t want to be the team to blame. Of course things could have been different if others team had reacted but so far as I said I don’t see reaction at all. And for it is too late.

So let’s give a chance as partners and as the Security Chapter Team to pass this milestones (delivery of our WP8 deliverables).

Counting on you no to discourage yourself even more we are close to the end.

Best Regards,
Pascal

De : TRABELSI, Slim [mailto:slim.trabelsi at sap.com]
Envoyé : jeudi 26 juillet 2012 10:21
À : BISSON Pascal; GIDOIN Daniel; Antonio Garcia Vazquez; Seidl, Robert (NSN - DE/Munich); Wolfgang.Steigerwald at telekom.de; Meyer, Gerald (NSN - DE/Munich); DI CERBO, Francesco; Rodrigo Diaz Rodriguez; GASPARD Lucie; Fasse, Axel
Cc : LELEU Philippe; fiware-security at lists.fi-ware.eu; MUSARAJ Kreshnik
Objet : RE: Review of more deliverables

Dear Pascal,

I strongly disagree with this review. The Modifications are done according to the previous comments, when it was possible !
I strongly recommend TID to submit the deliverable as it is.  We are all tired and exhausted with the hundreds of requests coming daily and most of them are due to a lack of clear guidance from the beginning.

Thank you
Best
Slim

From: BISSON Pascal [mailto:pascal.bisson at thalesgroup.com]
Sent: jeudi 26 juillet 2012 10:13
To: GIDOIN Daniel; Antonio Garcia Vazquez; Seidl, Robert (NSN - DE/Munich); Wolfgang.Steigerwald at telekom.de<mailto:Wolfgang.Steigerwald at telekom.de>; Meyer, Gerald (NSN - DE/Munich); DI CERBO, Francesco; TRABELSI, Slim; Rodrigo Diaz Rodriguez; GASPARD Lucie
Cc: BISSON Pascal; LELEU Philippe; fiware-security at lists.fi-ware.eu<mailto:fiware-security at lists.fi-ware.eu>; MUSARAJ Kreshnik
Subject: TR: Review of more deliverables
Importance: High


Dear Colleagues,



(IMPORTANT EMAIL – SO PLEASE READ CAREFULLY & PERFORM THE REQUESTED ACTIONS)



Here is the TID review report of Instal & Admin manual and User and Programmer's manual of our Security Chapter (aka D8.3.1 & D8.4.1). As you will see once more it is not good in the sense there are a number of issues that if not corrected by each of you would lead to rejection of our deliverables by TID and also rejection of some our costs as per penalties TID as announced.



According to the attached review report the content you put to Unit Test Plan & Reporting for the GE you own is rejected for both Instal & Admin manual and User and Programmer's manual (with one exception for DB Anonimyzer where content for Install & Admin is rejected but content for User & Programmers guide is accepted)



Security Monitoring GE (Thales -> Daniel & al) rejected for both deliverables !

Identity Management GE (NSN - DT -> Robert & Wolfgang) rejected for both deliverables !

Data Handling GE (SAP -> Slim) rejected for both deliverables  !

DB Anonimyzer GE (SAP -> Francesco) -> rejected Install & Admin  ! (but ok for User & Programmers guide)

Secure Storage Service (Thales -> Lucie) -> Rejected for both deliverables !



So please Daniel, Robert, Wolfgang, Slim, Francesco and Lucie look at the issues and add the necessary corrections for your content to both D8.3a and D8.4a to give a chance to these deliverables to be accepted.



Bear in mind the ultimate deadline to have them fixed is July 27th EOB as per decision taken by CA at last WPL/WPA. But to a on the safe side and did some review of the fixes it could be appropriate to have them fixed by today EOB.



In any case here is what is stated in the minutes of Monday 23 WPL/WPA audio and that you should have in mind as the contract:


Installation and Admin guides
Results of this check will be provided by July 25. As a result of this checking, the
guides can be:

·         Accepted

·         rejected with a deadline on July 27th EOB to fix a number of identified issues
Cost rejection measurements will be applied to GE owners failing to deliver the guides
by July 27th EOB.
Installation and Administration Guides which do not contain the mandatory sections
established in the defined guidelines will be rejected.
Several partners express objections to the request for the delivery of the Installation
and Admin Guide in the case of GEs offered “As a Service”. These need to be provided at least for auditing purposes.


Users’ and Programmers’ Guide
TID will check provided guides and will check whether they fulfill the defined guidelines
at:
https://forge.fi-ware.eu/plugins/mediawiki/wiki/fi-ware-private/index.php/
FiwareDeliverables
Results of this check will be provided by July 25. As a result of this checking, the
guides can be:

·         accepted

·         rejected with a deadline on July 27th EOB to fix a number of identified issues
Cost rejection measurements will be applied to GE owners failing to deliver the guides
by July 27th EOB.

Last but not I’d like also to draw your attention to points stated in Miguel’s emails and some of you would also have to address:

 *   General comment for all WPs:  there are many GEs in some  WP with an "Installation and Administration Guide" that is an installation manual only. Giving the need to deliver at once, we will not try to fix it immediately. After the delivery we will provide a deadline to address it and provide the administration part. Of course, the impact on the cost reporting could be affected by this.

 *   This applies to part of the WPs only. The case of the Install and Admin Guides of GEs offered as a Service of nature PP the partner has to provide proper guides (what is needed by the administrator of the machine where it is running at your company ). This will given to the EC upon request and it will protected somehow (account/password, IP filtering, ...).  In the deliverables at the end of the month we will provide simply a text stating that.  We would give the manuals+binaries afterwards and only if they ask for it.
    *   Please ALL to whom it applies please address.


Counting on you all to have the issues for your GE fixed  the sooner the better and according to the set and final deadline.



Please acknowledge receipt of this email and let me know and Daniel once the issues have been fixed. As usual the sooner the better.



Hearing from you



BR

Pascal


De : Miguel Carrillo [mailto:mcp at tid.es]
Envoyé : mercredi 25 juillet 2012 20:09
À : BISSON Pascal; GIDOIN Daniel
Cc : JUAN JOSE HIERRO SUREDA
Objet : Review of more deliverables

Dear Pascal,

This is my review for the Instal & Admin l manual and also for the User and Programmer's manual. The problematic things are marked in light blue. Please be aware that you have a very short time to react so let your partners know ASAP.

A few comments:

 *   Things to be addressed are highlighted in blue.

 *   Note that my review is "formal" (formats, structure, consistency, reasonable aspect) but the coordination (Juanjo) may add comments of a more technical nature afterwards. So an "ok" from me does not necessarily means a final approval by the project coordination.

 *   General comment for all WPs:  there are many GEs in some  WP with an "Installation and Administration Guide" that is an installation manual only. Giving the need to deliver at once, we will not try to fix it immediately. After the delivery we will provide a deadline to address it and provide the administration part. Of course, the impact on the cost reporting could be affected by this.

 *   This applies to part of the WPs only. The case of the Install and Admin Guides of GEs offered as a Service of nature PP the partner has to provide proper guides (what is needed by the administrator of the machine where it is running at your company ). This will given to the EC upon request and it will protected somehow (account/password, IP filtering, ...).  In the deliverables at the end of the month we will provide simply a text stating that.  We would give the manuals+binaries afterwards and only if they ask for it.

I'd appreciate it if you could confirm what GEs are going to be provided as a Service (not to install on the testbed) in July. Theoretically this is in the testbed wiki but things change too fast and I prefer to ask you.

Best regards,

Miguel


--

----------------------------------------------------------------------

     _/          _/_/                     Miguel Carrillo Pacheco

    _/   _/     _/  _/   Telefónica       Distrito Telefónica

   _/ _/_/_/   _/   _/   Investigación y  Edifico Oeste 1, Planta 9

  _/   _/     _/  _/     Desarrollo       Ronda de la Comunicación S/N

 _/          _/_/                         28050 Madrid (Spain)

                                          Tel:  (+34) 91 483 26 77



                                          e-mail: mcp at tid.es<mailto:mcp at tid.es>



Follow FI-WARE on the net



        Website:  http://www.fi-ware.eu

        Facebook: http://www.facebook.com/pages/FI-WARE/251366491587242

        Twitter:  http://twitter.com/Fiware

        LinkedIn: http://www.linkedin.com/groups/FIWARE-4239932

----------------------------------------------------------------------

________________________________

Este mensaje se dirige exclusivamente a su destinatario. Puede consultar nuestra política de envío y recepción de correo electrónico en el enlace situado más abajo.
This message is intended exclusively for its addressee. We only send and receive email on the basis of the terms set out at.
http://www.tid.es/ES/PAGINAS/disclaimer.aspx
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.fiware.org/private/old-fiware-security/attachments/20120726/112d4acb/attachment.html>