1szheng / pe

0 stars 0 forks source link

Empty borrower's name allowed #5

Open 1szheng opened 2 years ago

1szheng commented 2 years ago

The name field for the borrow command can be left empty. The name field should not be empty as it would defeat the purpose of tracking and managing an inventory.

image.png

soc-se-bot commented 2 years ago

Team's Response

An error should have been thrown in the input validation to prevent blank spaces from being accepted as a name.

Items for the Tester to Verify

:question: Issue type

Team chose [type.FunctionalityBug] Originally [type.FeatureFlaw]

Reason for disagreement: [replace this with your explanation]


:question: Issue severity

Team chose [severity.Low] Originally [severity.Medium]

Reason for disagreement: The developer did not provide explanation and justification for change of severity.

This issue is not unlikely to affect normal operation of the product. Having an item borrowed without knowing who actually borrowed it is more than just a minor inconvenience. It could lead to theft reports.

image.png