Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Requirement Tagging - Profile Resolution Specification #1089

Merged
merged 4 commits into from
Feb 24, 2022

Conversation

stephenbanghart
Copy link
Contributor

Committer Notes

This pull request includes the following changes to the Profile Resolution Specification:

  • Added requirement tagging to the XML source. added "req" to the .rnc schema
  • Added a draft status notice to the document and the landing page of the OSCAL website
  • Fixed errors in the Modify section (ref-id -> by-id, removed extraneous text)
  • Editorial fixes throughout document

@david-waltermire david-waltermire linked an issue Jan 20, 2022 that may be closed by this pull request
Copy link
Contributor

@aj-stein-nist aj-stein-nist left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OK, this turned out to be a few more fixes than I thought, but it should be easy for you to go through, separately or with me, Stephen, and approve or ignore those you do not agree with. You will not even need to make changes on your workstation.

Let me know what you think. Not sure I caught every one, and I will skim again tomorrow for a final pass.

</p>
<p>resource - distinctiveness is defined by the value of the
<p><req level="must" id="req-id-uuid">For the object resource, distinctiveness MUST be determined by the value of the
<q>uuid</q>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Consistent quoting

Suggested change
<q>uuid</q>
&quot;uuid&quot;

<p>See
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/xml-definitions/">the complete XML reference</a>for model requirements.
<p><req level="must" id="req-output-xml">The final Catalog output, if using XML, MUST be valid as defined by the XML model documentation for the OSCAL Catalog. See
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/xml-definitions/">the complete XML reference</a>for model requirements.</req>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Spacing

Suggested change
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/xml-definitions/">the complete XML reference</a>for model requirements.</req>
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/xml-definitions/">the complete XML reference</a> for model requirements.</req>

<p>See the
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>for model requirements.
<p><req level="must" id="req-output-json">The final Catalog output, if using JSON, MUST be valid as defined by the JSON model documentation for the OSCAL Catalog. See the
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>for model requirements. </req>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Spacing

Suggested change
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>for model requirements. </req>
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a> for model requirements. </req>

<p>See the
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>for model requirements.
<p><req level="must" id="req-output-json">The final Catalog output, if using JSON, MUST be valid as defined by the JSON model documentation for the OSCAL Catalog. See the
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>for model requirements. </req>
</p>
<p>The JSON format, in general use, does not require the preservation of order of fields. As order matters in OSCAL, care should be taken to adhere to the canonical OSCAL order
<xref rid="order" />when outputting a catalog in JSON.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Spacing

Suggested change
<xref rid="order" />when outputting a catalog in JSON.
<xref rid="order" /> when outputting a catalog in JSON.

</p>
<p>The JSON format, in general use, does not require the preservation of order of fields. As order matters in OSCAL, care should be taken to adhere to the canonical OSCAL order
<xref rid="order" />when outputting a catalog in JSON.
</p> <!-- TODO: Add Namespace (BaseURI) -->
</section>
<section id="yamlrequirements">
<head>Requirements and Guidance for YAML Output</head>
<p>YAML is considered a simple variation on the JSON format. Beyond cosmetic differences there are no differences in the information structure between these formats. Therefore, the
<p><req level="must" id="req-output-yaml">The final Catalog output, if using YAML, MUST be valid as defined by the JSON model documentation for the OSCAL Catalog. </req> YAML is considered a simple variation on the JSON format. Beyond cosmetic differences there are no differences in the information structure between these formats. Therefore, the
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>provides model requirements.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Spacing

Suggested change
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a>provides model requirements.
<a href="https://pages.nist.gov/OSCAL/reference/latest/complete/json-reference/">complete JSON reference</a> provides model requirements.

Copy link
Contributor

@aj-stein-nist aj-stein-nist left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So I apologize in advance, I was reminded in our earlier meeting, Stephen, Dave pointed out to me I had missed one early on in my previous review, very close to the site of one of my first suggestions. I gave it another look over since I was reminded a little while ago.

</li>
<li>
<p>If a
<p><req level="must" id="req-backmatter-dupe">If a given
<src>resource</src>has the same
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Another miss

Suggested change
<src>resource</src>has the same
<src>resource</src> has the same

<p>Tools MAY check for pruning conditions
<xref rid="cleanup" />as resources are added as long as the final result is the same as if the pruning had taken place at the end of all resource addition.
<p><req level="may" id="req-backmatter-prune">Tools MAY check for pruning conditions
<xref rid="cleanup" />as resources are added as long as the final result is the same as if the pruning had taken place at the end of all resource addition.</req>
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think this will also cause a spacing issue, not sure why I skipped it before.

Suggested change
<xref rid="cleanup" />as resources are added as long as the final result is the same as if the pruning had taken place at the end of all resource addition.</req>
<xref rid="cleanup" /> as resources are added as long as the final result is the same as if the pruning had taken place at the end of all resource addition.</req>

@wendellpiez
Copy link
Contributor

Noting a few cosmetic / editorial issues that need correction at some point --

  • review inline tagging especially usage of <code>, <term> and <em>, <q> and literal ""text"" for consistency.
    • is "directive" formal enough to index? I.e. how useful would be a tag for "directive" or are (or should be) directive names be tagged consistently as <term> for example?
  • in section 8.2.2 "Removing contents from controls" the singular form should be criterion not criteria (the plural)
    • so, "meets all the criteria" is correct
    • "The remove directive criteria class-ref MUST match" should be "The remove directive criterion class-ref MUST match"
    • etc

thanks!

Copy link
Contributor

@aj-stein-nist aj-stein-nist left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good! I am sure we can pick up other minor cosmetic things as we enhance it, you caught everything I found, nice work.

Copy link
Contributor

@david-waltermire david-waltermire left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

  • On line 24 of the specml, there is a stray ")" after depend.
  • The intro doesn't state why profile resolution is needed. The implementation layer works with catalogs of controls. Profile resolution allows for a profile to produce a resolved set of controls for use in the implementation and higher layers.
  • The text from Profile specification #1017 (comment) was removed, but not moved anywhere from what i can tell. Should this be added to a web page as indicated?

@david-waltermire david-waltermire merged commit d2f5108 into usnistgov:release-1.0 Feb 24, 2022
david-waltermire pushed a commit that referenced this pull request Feb 26, 2022
* Tagged Requirements (updated .rnc), Added Draft Status, several small fixes in modify section
* Applying AJ's fixes, other various small fixes - pending larger automated formating
* Intro purpose rewrite. Editorial fixes from comments. Small edits to "Processing" page on site.

Co-authored-by: Alexander Stein <alexander.stein@nist.gov>
Co-authored-by: Stephen Banghart <stephen.banghart@outlook.com>
stephenbanghart added a commit to stephenbanghart/OSCAL that referenced this pull request Mar 14, 2022
* Tagged Requirements (updated .rnc), Added Draft Status, several small fixes in modify section
* Applying AJ's fixes, other various small fixes - pending larger automated formating
* Intro purpose rewrite. Editorial fixes from comments. Small edits to "Processing" page on site.

Co-authored-by: Alexander Stein <alexander.stein@nist.gov>
Co-authored-by: Stephen Banghart <stephen.banghart@outlook.com>
@david-waltermire david-waltermire added this to the OSCAL 1.0.2 milestone Mar 21, 2022
iMichaela pushed a commit to iMichaela/OSCAL that referenced this pull request Apr 7, 2022
* Tagged Requirements (updated .rnc), Added Draft Status, several small fixes in modify section
* Applying AJ's fixes, other various small fixes - pending larger automated formating
* Intro purpose rewrite. Editorial fixes from comments. Small edits to "Processing" page on site.

Co-authored-by: Alexander Stein <alexander.stein@nist.gov>
Co-authored-by: Stephen Banghart <stephen.banghart@outlook.com>
Rene2mt pushed a commit to Rene2mt/OSCAL that referenced this pull request May 17, 2022
* Tagged Requirements (updated .rnc), Added Draft Status, several small fixes in modify section
* Applying AJ's fixes, other various small fixes - pending larger automated formating
* Intro purpose rewrite. Editorial fixes from comments. Small edits to "Processing" page on site.

Co-authored-by: Alexander Stein <alexander.stein@nist.gov>
Co-authored-by: Stephen Banghart <stephen.banghart@outlook.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Profile Resolution Requirement Tagging Profile Spec - Intro rewrite/trim
5 participants