jvjohnson1 / TheFortress

A secure coding demonstration that is intended to be attacked.
0 stars 0 forks source link

Application question #3

Closed pawaitemadisoncollege closed 3 years ago

pawaitemadisoncollege commented 3 years ago

Are you expecting that a person who hacks into the site reports that "success" somehow? That sort of hacking or testing seems central to your application's purpose. What do you think about adding a user story or stories for this?

jvjohnson1 commented 3 years ago

Fixed this problem in documentation by adding to additional user stories at the end of the "hacker" section

pawaitemadisoncollege commented 3 years ago

Looks good!

One more question with regard to the user stories. Will a higher rank user be able to perform the tasks a lower rank user can perform? For example, can a Lieutenant or Captain also do the things a private can do such as:

jvjohnson1 commented 3 years ago

No. In real life they would, but they would be assigned duties by a higher ranking officer (like a Major) and report back to the same.
Remember that this is a secure coding demonstration with a military theme, not a command and control simulation. With no ranks above Captain included, it's hard to apply those cases. Sure, the Captain could assign duties and issue equipment to a Lieutenant, and the Lieutenant could report back as applicable, but it wouldn't contribute to the primary purpose. Let's include those as possible add-ons, but not in MVP.

jvjohnson1 commented 3 years ago

Forgot to close this one weeks ago.