Sprint Review + Planning
Nov 18 - Dec 2, 2013
Executive Summary
Overall Status
Sprint status is excellent. The Product team had pointed and prioritized the following themes and tasks for Sprint 119 comprising 14 points. The team completed XX points.
Note - The velocity was less than prior sprints due to the holidays and personal time off.
Burndown
Sprint Themes and related tickets for Sprint 120:
- Partner and Community support
- Forum discussions
- Support community with Release 4.2 deployments and questions
- Research related to issues encountered during large payload testing in CMS Environment and support CMS with 4.2 installation(CONN-697, CONN-703, CONN-708)
The CONNECT Product team was able to isolate the issue in the ESMD custom adapter and figured out the ESMD adapter uses Asynchronous mechanism (Using Threads) to process the DS request, which terminates the HTTP DS request before the attachment data is read from the request stream , causing file payload truncation or in some cases zero payload.
We provided a solution to read the full Payload from the DS request stream and pass the full payload data to the ESMD adapter for continued processing.
Based on this effort, we also confirmed the following:
1. CONNECT 4.2 large payload support feature works as designed
2. CONNECT 4.2 is Interoperable with prior versions of CONNECT
3. CONNECT 4.2 supports large payloads of 1 GB data files and larger
Document DIL testing for CONNECT approach(CONN-704)
- Link to related documentation -
- Install and test HIEOS with CONNECT codebase (CONN-668)
- Research related to issues encountered during large payload testing in CMS Environment and support CMS with 4.2 installation(CONN-697, CONN-703, CONN-708)
- Investigate why xmlsec-1.5.3.jar is packaged within each web application(CONN-709)
- NIST tool testing with CONNECT(CONN-689)
- Successfully exchanging(sending and receiving) Document Submission messages with http://transport-testing.nist.gov/ttt/
- Security scan analysis
- Addressed Path manipulation scan results(CONN-675/CONN-701)
- Addressed Null dereference Fortify scan results(CONN-676)
- Security scan Issues above were fixed and validation/regression tests were executed successfully
- As a CONNECT developer, I want to include the security plugin for findbugs, to help identify security vulnerabilities in CONNECT.(CONN-710)
- Direct enhancements
- Provide the ability to create MDN Notification request header via Sylpheed (CONN-700)
- Ongoing Custodial Agent Duties
Prioritized JIRA Planning Board of Committed User Stories for Sprint 120
