Release 1.4.0 - 5 April 2017 – IriusRisk Support

This release was focused on bug fixes and additional features including:

Re-designed UI look and feel
Import results from HP Fortify scans. We could upload a .fpr file into IriusRisk using the API in the previous version. For this version, uploading the .fpr through the Product's Artifact upload feature is also possible
Improvements and updates to the default Continuum Security Risk Patterns Library and default data set

New Features

[IR-833] - Added Data Asset descriptions to the Assets tab on the questionnaire
[IR-545] - Apply the Vaadin Valo (new UI look and feel) theme
[IR-844] - For the new email config option, add a button to "test connection"
[IR-884] - Invite external users to complete the product's questionnaire
[IR-891] - Add a "Priority" column to the Countermeasure table
[IR-892] - Create the Issue Tracker tickets with a priority based on the risk mitigated by the countermeasure
[IR-897] - New API call: Import project from an XML

Bug Fixes

[IR-953] - Columns of tables cannot be resized
[IR-963] - Control state bar not correctly updated
[IR-987] - The lower scroll shouldn't show in the main questionnaire
[IR-996] - Bug on "invite an existing user" to fill a new project questionnaire
[IR-999] - Missing i18n for Audit events associated with adding data assets
[IR-1000] - Reduce the Vulnerability Found Factor to 0 instead of 0.1
[IR-1003] - Error in the documentation of some default permissions
[IR-1014] - Threats tab is not refreshed when we go from Templates to Products section
[IR-1015] - In Safari browser, screen is locked when an error message is displayed
[IR-890] - Modal windows behaviour should be consistent
[IRX-601] - A user can edit a countermeasure without the COUNTERMEASURE_UPDATE permission
[IRX-604] - On the Users UDT selector an internal user "System System" is shown as an option and it shouldn't be visible
[IRX-605] - The product description area does not auto-update when a User Defined Field is changed
[IRX-608] - When applying a template to a project the Countermeasure status is reset
[IRX-616] - Skip the current template from the list of templates during template creation
[IRX-617] - Threats tab not displayed after create a new template
[IRX-619] - Changing workflow state via rules causes hibernate exception
[IRX-621] - Fix security settings in nginx.conf for product installation based on our Docker containers
[IRX-623] - Workflow condition "Architecture Questionnaire is completed" fires even if questionnaire is not completed
[IRX-627] - Component questions are permitted in the Main and Workflow rules engines
[IRX-628] - Actions from normal rules are being copied to Workflow rules
[IRX-637] - Marking a countermeasure as implemented is overridden by running the rules engine
[IRX-639] - When saving a rule in the GUI rules editor the position is lost
[IRX-646] - Workflow notification emails not being sent for some mail servers
[IRX-647] - Template import process produces incorrect results when combined with importing risk patterns
[IRX-650] - Clicking on a Threat or Control from another screen does not select the Threat/Control
[IRX-652] - Countermeasure progress bar does not change colour
[IRX-653] - Highlighting items in drop down selectors is not the same as for menus
[IRX-533] - Change appearance of Threats and Countermeasures tabs when editing libraries