-
Notifications
You must be signed in to change notification settings - Fork 84
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add responsible-party-is-person constraint #652
base: feature/external-constraints
Are you sure you want to change the base?
Add responsible-party-is-person constraint #652
Conversation
6450680
to
cc33ee8
Compare
Added issue GSA/automate.fedramp.gov#57 for required documentation updates. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Will possibly approve after rebase and merge once documentation for the referenced doc PR is complete.
In the meantime, rebase, please and thank you. 🙏
cc33ee8
to
a978a29
Compare
Hey @aj-stein-gsa once I rebased, some of the validations were no longer passing due to modifications I had made to the ssp-all-INVALID.xml test content, so the latest commit rolled those changes back and created a separate test SSP for this new responsible-party-is-person constraint. |
09ddd50
to
4829962
Compare
Committer Notes
This PR adds responsible-party-is-person constraint, which checks that
responsible-party
assemblies withrole-id
set to certain values (e.g., "system-owner", "authorizing-official", "authorizing-official-poc", "system-poc-management", "system-poc-technical", "system-poc-other", and "information-system-security-officer") must reference aparty
of type "person".All Submissions:
By submitting a pull request, you are agreeing to provide this contribution under the CC0 1.0 Universal public domain dedication.