-
Notifications
You must be signed in to change notification settings - Fork 56
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Closes #1547 Display impact level on project page. #1551
Conversation
Implement impact level as a statement about a system of type "fisma_impact_level" with imoact level in body. This continues idea that statements are factual observations about a system. Statement must be associated with system.root_element and be consumed by root_element.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@gregelin Needs tests. Also it is unclear how a statement that defines Fisma level looks in oscal which would be covered by an automated unit test. I suggest adding a fixture with statement data that would include a fisma level in the body as suggested.
@davidpofo Tests added. Currently the tests just check that content appears; content can be set with a statement in the database and updated for different content to appear. |
Enumarate different type of statements
@davidpofo Also added type enumeration to Statements. This is ready for review and inclusion. |
… methods Set system fisma_impact_level root_element statement as part of question action to set baseline. Since baselines could have more names than just "Low", "Moderate", and "High", we only set fisma_impact_level if baseline is one of those three. This might need to improve in the future and make setting fisma_impact_level a separate question action from setting baselines. Created set/get methods for fisma_impact_level in System model to make sure only one statement for the system with statement_type of fisma_impact_level existed. Also fixed POAM stat counting to only count POAMs associated with current system. Existing POAM count was not filtering on current system.
all caps no brakes
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
lgtm PR party 4/22
Implement impact level as a statement about a system of type "fisma_impact_level"
with imoact level in body. This continues idea that statements are
factual observations about a system. Statement must be associated
with system.root_element and be consumed by root_element.