Release 1.3.2 - 2 January 2017 – IriusRisk Support

This release was focused on bug fixes and additional features including:

An additional API call to upload test results to a specific component, rather than the whole product: https://app.swaggerhub.com/api/continuumsecurity/IriusRisk/1
Support for the Redmine bug tracker;
Distinguishing between Threats generated by the rules and those edited manually

New Features

[IR-577] - Create integration with Redmine ticketing system
[IR-631] - Default risk patterns should be stored in the CS-Default library and removed from the PROTOTYPE library.
[IR-651] - Allow importing of test results specific to a component
[IR-652] - When collapsing a component in Threat table, it should stay collapsed after table is updated
[IRX-413] - Add new Custom Fields: User and Business unit
[IRX-443] - Reject Control should require the user to provide a reason
[IRX-444] - Add "Comments" to the Risk Details as a Tab
[IRX-445] - Add "Comments" tab to the Countermeasure details
[IRX-446] - New Action: Modify mitigation value
[IRX-448] - On the products tab, use a Split panel between the product details and the charts
[IRX-494] - Distinguish between Threats that are generated by import process and those created manually
[IRX-495] - Create new RISK_CREATE permission

Bugs

[IR-592] - Update BDD-Security with the new annotations: @iriusrisk-
[IR-598] - Global settings are visible on individual projects.
[IR-638] - Make IriusRisk ref (project IDs) and Project Name case insensitive.
[IR-625] - When we delete a product, the Dashboard and the Portfolio views don't remove its associated threats
[IR-630] - Do not load Assets, Access Types, Settings or Security Classifications from PROTOTYPE.xml
[IR-642] - Synchronising Jira status with control does not update the threat's risk
[IR-648] - When adding a new Risk Pattern, the Apply Standards window appears
[IR-659] - Test results imported from "Automated test sources" are marked as MANUAL
[IR-662] - Remove BDD-Security settings from global config
[IRX-433] - In dashboard, cannot sort by "Test Result"
[IRX-437] - Search status on the Threats tab is not correctly updated
[IRX-439] - Cross Site Scripting vulnerability in Artifact upload
[IRX-454] - Incorrect settings when creating a new project
[IRX-455] - Error saving settings
[IRX-477] - The risk response bar is not updated with the correct mitigation percentage
[IRX-490] - Increase column size of UDTValue to 100000 characters
[IRX-492] - Only user with RISK_UPDATE permission can modify the control mitigation
[IRX-508] - Import template window needs adjust if there are many rows
[IRX-509] - Retract a template with id that doesn't match pattern throws complex error
[IRX-511] - Define custom types window is not big enough to display the button
[IRX-513] - First time you click on component, use case or threat row, the form is disabled