The following table list all the requirements for this project.
| id | v. | intent | title | description | |
|---|---|---|---|---|---|
![]() |
RQ3 | 1.0 | MUST | Authentication | Authentication shall be established based on the correct username and password combination. |
![]() |
RQ5 | 1.0 | MUST | Failed Logons | If a logon attempt is unsuccesful the system shall inform the user, however specfic reasons for the failure shall not be communicated as this information can prove useful for malicious authentication attempts. |
![]() |
RQ7 | 1.0 | MUST | Authorisation | The system shall store permissions against each user such that their level of access to the system can be controlled. |
| id | v. | intent | title | description | |
|---|---|---|---|---|---|
![]() |
RQ4
michael; 2006-05-23
RQ4:
This requirement needs validating with the security team to validate
that they are happy with the minimum expected password strength.
|
1.1 | MUST | Password Structure | The system shall only allow passwords greater than eight characters long being a mixture of alpha-numerics. |
![]() |
RQ6
odlingsmee; 2006-05-23
RQ6:TLS should probably be used in preference to SSL - this is still under investigation.
|
1.1 | SHOULD | SSL Encryption | The system's website should support SSL Encryption to prevent data being sniffed by malicious parties. |
![]() |
RQ13 | 1.0 | MUST | Web UI | The user interface shall be a web (HTTP) user interface to ease deployment and accesibility. |