-
Notifications
You must be signed in to change notification settings - Fork 193
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Requirement Tagging - Profile Resolution Specification #1089
Requirement Tagging - Profile Resolution Specification #1089
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
OK, this turned out to be a few more fixes than I thought, but it should be easy for you to go through, separately or with me, Stephen, and approve or ignore those you do not agree with. You will not even need to make changes on your workstation.
Let me know what you think. Not sure I caught every one, and I will skim again tomorrow for a final pass.
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
</p> | ||
<p>resource - distinctiveness is defined by the value of the | ||
<p><req level="must" id="req-id-uuid">For the object resource, distinctiveness MUST be determined by the value of the | ||
<q>uuid</q> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Consistent quoting
<q>uuid</q> | |
"uuid" |
<p>See | ||
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/xml-definitions/">the complete XML reference</a>for model requirements. | ||
<p><req level="must" id="req-output-xml">The final Catalog output, if using XML, MUST be valid as defined by the XML model documentation for the OSCAL Catalog. See | ||
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/xml-definitions/">the complete XML reference</a>for model requirements.</req> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Spacing
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/xml-definitions/">the complete XML reference</a>for model requirements.</req> | |
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/xml-definitions/">the complete XML reference</a> for model requirements.</req> |
<p>See the | ||
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>for model requirements. | ||
<p><req level="must" id="req-output-json">The final Catalog output, if using JSON, MUST be valid as defined by the JSON model documentation for the OSCAL Catalog. See the | ||
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>for model requirements. </req> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Spacing
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>for model requirements. </req> | |
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a> for model requirements. </req> |
<p>See the | ||
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>for model requirements. | ||
<p><req level="must" id="req-output-json">The final Catalog output, if using JSON, MUST be valid as defined by the JSON model documentation for the OSCAL Catalog. See the | ||
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>for model requirements. </req> | ||
</p> | ||
<p>The JSON format, in general use, does not require the preservation of order of fields. As order matters in OSCAL, care should be taken to adhere to the canonical OSCAL order | ||
<xref rid="order" />when outputting a catalog in JSON. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Spacing
<xref rid="order" />when outputting a catalog in JSON. | |
<xref rid="order" /> when outputting a catalog in JSON. |
</p> | ||
<p>The JSON format, in general use, does not require the preservation of order of fields. As order matters in OSCAL, care should be taken to adhere to the canonical OSCAL order | ||
<xref rid="order" />when outputting a catalog in JSON. | ||
</p> <!-- TODO: Add Namespace (BaseURI) --> | ||
</section> | ||
<section id="yamlrequirements"> | ||
<head>Requirements and Guidance for YAML Output</head> | ||
<p>YAML is considered a simple variation on the JSON format. Beyond cosmetic differences there are no differences in the information structure between these formats. Therefore, the | ||
<p><req level="must" id="req-output-yaml">The final Catalog output, if using YAML, MUST be valid as defined by the JSON model documentation for the OSCAL Catalog. </req> YAML is considered a simple variation on the JSON format. Beyond cosmetic differences there are no differences in the information structure between these formats. Therefore, the | ||
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>provides model requirements. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Spacing
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>provides model requirements. | |
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a> provides model requirements. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
So I apologize in advance, I was reminded in our earlier meeting, Stephen, Dave pointed out to me I had missed one early on in my previous review, very close to the site of one of my first suggestions. I gave it another look over since I was reminded a little while ago.
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
src/specifications/profile-resolution/profile-resolution-specml.xml
Outdated
Show resolved
Hide resolved
</li> | ||
<li> | ||
<p>If a | ||
<p><req level="must" id="req-backmatter-dupe">If a given | ||
<src>resource</src>has the same |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Another miss
<src>resource</src>has the same | |
<src>resource</src> has the same |
<p>Tools MAY check for pruning conditions | ||
<xref rid="cleanup" />as resources are added as long as the final result is the same as if the pruning had taken place at the end of all resource addition. | ||
<p><req level="may" id="req-backmatter-prune">Tools MAY check for pruning conditions | ||
<xref rid="cleanup" />as resources are added as long as the final result is the same as if the pruning had taken place at the end of all resource addition.</req> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think this will also cause a spacing issue, not sure why I skipped it before.
<xref rid="cleanup" />as resources are added as long as the final result is the same as if the pruning had taken place at the end of all resource addition.</req> | |
<xref rid="cleanup" /> as resources are added as long as the final result is the same as if the pruning had taken place at the end of all resource addition.</req> |
e277f19
to
1697757
Compare
Noting a few cosmetic / editorial issues that need correction at some point --
thanks! |
… fixes in modify section
…ated formating Co-authored-by: Alexander Stein <alexander.stein@nist.gov>
c305e7f
to
7e0ec36
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Looks good! I am sure we can pick up other minor cosmetic things as we enhance it, you caught everything I found, nice work.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
- On line 24 of the specml, there is a stray ")" after depend.
- The intro doesn't state why profile resolution is needed. The implementation layer works with catalogs of controls. Profile resolution allows for a profile to produce a resolved set of controls for use in the implementation and higher layers.
- The text from Profile specification #1017 (comment) was removed, but not moved anywhere from what i can tell. Should this be added to a web page as indicated?
…"Processing" page on site.
* Tagged Requirements (updated .rnc), Added Draft Status, several small fixes in modify section * Applying AJ's fixes, other various small fixes - pending larger automated formating * Intro purpose rewrite. Editorial fixes from comments. Small edits to "Processing" page on site. Co-authored-by: Alexander Stein <alexander.stein@nist.gov> Co-authored-by: Stephen Banghart <stephen.banghart@outlook.com>
* Tagged Requirements (updated .rnc), Added Draft Status, several small fixes in modify section * Applying AJ's fixes, other various small fixes - pending larger automated formating * Intro purpose rewrite. Editorial fixes from comments. Small edits to "Processing" page on site. Co-authored-by: Alexander Stein <alexander.stein@nist.gov> Co-authored-by: Stephen Banghart <stephen.banghart@outlook.com>
* Tagged Requirements (updated .rnc), Added Draft Status, several small fixes in modify section * Applying AJ's fixes, other various small fixes - pending larger automated formating * Intro purpose rewrite. Editorial fixes from comments. Small edits to "Processing" page on site. Co-authored-by: Alexander Stein <alexander.stein@nist.gov> Co-authored-by: Stephen Banghart <stephen.banghart@outlook.com>
* Tagged Requirements (updated .rnc), Added Draft Status, several small fixes in modify section * Applying AJ's fixes, other various small fixes - pending larger automated formating * Intro purpose rewrite. Editorial fixes from comments. Small edits to "Processing" page on site. Co-authored-by: Alexander Stein <alexander.stein@nist.gov> Co-authored-by: Stephen Banghart <stephen.banghart@outlook.com>
Committer Notes
This pull request includes the following changes to the Profile Resolution Specification: