Maniphest T320976

Obtain security review of uniqueDevices
Closed, ResolvedPublic
Actions

Assigned To

Authored By

	VirginiaPoundstone
	Oct 17 2022, 3:08 PM

Description

In preparation for deployment of uniqueDevices Endpoint: AQS 2.0, a security review is required.

Related Objects
Search...

Status	Assigned	Task
Stalled	None	T324931 Clean up open RESTBase related tickets
In Progress	None	T262315 <CORE TECHNOLOGY> API Migration & RESTbase Sunset
In Progress	• DAbad	T263489 AQS 2.0
Open	None	T356693 [SPRINT 09][SDS 2.6.4] AQS 2: Complete AQS 2.0 maintainer docs to do’s
Open	Atieno	T318111 <spike>[needs grooming] API services deployment plan for Gerrit
Resolved	None	T288663 Obtain a security review of AQS 2.0
Resolved	hnowlan	T320967 [AQS 2.0] New Service Request device_analytics
Resolved	Atieno	T320983 Move uniqueDevices service repo from Gitlab to Gerrit
Resolved	Atieno	T320976 Obtain security review of uniqueDevices
Resolved	Mstyles	T324710 Application Security Review Request: Device analytics

Event Timeline

VirginiaPoundstone assigned this task to Atieno.Oct 17 2022, 3:08 PM

VirginiaPoundstone created this task.

VirginiaPoundstone moved this task from API Platform Roadmap to Backlog on the API Platform board.

VirginiaPoundstone edited projects, added API Platform; removed API Platform (API Platform Roadmap).

VirginiaPoundstone moved this task from Backlog to Sprint Backlog on the API Platform board.

Atieno moved this task from Sprint Backlog to Backlog on the API Platform board.Oct 17 2022, 3:09 PM

• EChetty edited projects, added Data-Engineering-Planning; removed Data-Engineering.Oct 18 2022, 6:03 PM

VirginiaPoundstone moved this task from Backlog to Sprint 01 on the API Platform board.Oct 26 2022, 2:10 PM

VirginiaPoundstone edited projects, added API Platform (Sprint 01); removed API Platform.

BPirkle mentioned this in T322152: Route external requests to RESTbase via API gateway.Nov 1 2022, 9:54 PM

Depends on https://phabricator.wikimedia.org/T320983

• EChetty moved this task from Backlog to Radar on the Data-Engineering-Planning board.Nov 7 2022, 10:50 AM

JArguello-WMF added a parent task: T320983: Move uniqueDevices service repo from Gitlab to Gerrit.Nov 7 2022, 1:14 PM

VirginiaPoundstone added a project: AQS2.0.Nov 14 2022, 7:36 PM

VirginiaPoundstone moved this task from Incoming to In Current Sprint on the AQS2.0 board.Nov 14 2022, 7:39 PM

JArguello-WMF moved this task from Next Up to In Progress on the API Platform (Sprint 01) board.Nov 29 2022, 3:06 PM

JArguello-WMF edited projects, added API Platform (Sprint 02); removed API Platform (Sprint 01).Nov 30 2022, 1:54 PM

JArguello-WMF moved this task from Next Up to In Progress on the API Platform (Sprint 02) board.

JArguello-WMF triaged this task as High priority.Nov 30 2022, 2:45 PM

T324710 has been created to request the security review. Moving this to Pause for the moment because there is no more to do for us here at the moment.

JArguello-WMF moved this task from In Progress to Blocked/Paused on the API Platform (Sprint 02) board.Dec 8 2022, 3:48 PM

Our security review request has made it to this quarters' work. Priority has been set to medium

For Legal they are not sure if they should review so waiting on Security to ping them on if they should after security's review

JArguello-WMF added a subtask: T324710: Application Security Review Request: Device analytics.Jan 10 2023, 6:12 PM

JArguello-WMF edited projects, added API Platform; removed API Platform (Sprint 02), Data-Engineering-Planning.

JArguello-WMF moved this task from Incoming to Radar on the API Platform board.

Security confirms they will have an update on this latest February 10th

VirginiaPoundstone moved this task from In Current Sprint to Done on the AQS2.0 board.Feb 17 2023, 4:36 PM

Mstyles closed subtask T324710: Application Security Review Request: Device analytics as Resolved.Mar 1 2023, 5:07 PM

VirginiaPoundstone moved this task from Radar to Needs Grooming on the API Platform board.Mar 8 2023, 7:59 PM