Release 4.11.0 - 04-01-2023 – IriusRisk Support

Features

[DRA-647] - Move IriusRisk draw.io listeners to a new class
[DRA-722] - Analyze and improve performance for project sync
[DRA-746] - Replace draw.io-widget by React component
[DRA-833] - Associate icons to the new GCP components definitions
[DRA-837] - Allow to the user change the dataflow colors
[DRA-853] - Secure TemplateDashboardPresenter methods
[DRA-869] - Add parameter to allow customized firefox path
[DRA-872] - Refactors on DrawioMxFinder
[INR-476] - Refactor MyPortfolio and Dashboard presenters
[MSR-654] - Unify creation of threats on a single method for each entity
[MSR-879] - Update External Library with new revision - CAPEC - 2022/11/30
[OPT-480] - Simplify Terraform mapping file
[OPT-484] - Return an error when calling the IriusRisk API with multiple Visio or MTMT files
[OPT-585] - Identity Server must be mapped to an IAM component (MTMT)
[RT-105] - Change icon colors for actions in tables/grids
[RT-430] - Sort priority filter from highest to lowest
[RT-520] - Compliance drop down for countermeasures should only show the relevant standards
[RT-774] - Secure AddThreatModalPresenter methods
[OPT-429] - Add support for multiple IaC files in IriusRisk API
[RT-598] - Audit changing CIA and Ease of Exploitation values in Threats
[DRA-796] - Wrong styles on modal of close sessions
[RT-780] - Workflow selector is displayed even when no workflow states have been created
[RT-507] - Issue tracker config at threat level

[DRA-836] - Delete project notification coming from another user action can be closed
[DRA-863] - Endless loading message after creating project version
[INR-497] - The literals of the countermeasure status chart are overlapping
[INR-526] - Access denied loading login page due to ReactDashboardPage constructor
[INR-529] - Fix home dashboard errors
[MSR-394] - Duplicated asset question when asset is renamed
[MSR-448] - Standards form not visually read-only when user only has read permission
[MSR-691] - Asset is getting corrupted after trying to update its name with an existing name from other asset
[MSR-791] - Project versions are displayed in the modal 'Select Projects to update'
[OPT-625] - Terraform file may exclusively contain terraform module elements
[RT-432] - After updating model the UI is not refreshed
[RT-453] - Positions of Custom fields does not work
[RT-463] - User without permissions to view the architecture is redirected to diagram if this is empty
[RT-536] - Threats and countermeasures are created with owner = NULL depending on settings
[RT-745] - Switching workflow states from within a project does not update the project permissions for the user
[RT-748] - Keep template comments when template is created from a project
[RT-749] - Error when you select all countermeasures from father component
[RT-771] - Standards threat filter is not refreshing after updating a standard in the countermeasures
[RT-804] - ExpiryDate value for Threats is not being returned in API call

Updated security standards:

Cloud components:

[CON-1380]: New Google Cloud Platform components:
- GCP Looker Studio
- GCP Dataflow
- GCP DLP (Data Loss Prevention)
- GCP DNS (Domain Name System)
- GCP Spanner
- GCP Resource Manager
- GCP Compute Engine
- GCP Container Registry
- GCP Data Catalog
- GCP Secret Manager
- GCP KMS (Key Management Service)
- GCP Memorystore for Redis
- GCP VPC Service Controls
- GCP Anthos Service Mesh
- GCP Apigee X
- GCP Artifact Registry
[CON-1382]: Google Cloud Platform Firestore and Firebase Realtime Database components are now available as components
[CON-1384]: New AWS components:
- AWS Apache Flink
- AWS ElastiCache for Redis
- AWS Hyperledger Fabric
- AWS Ethereum
[CON-1392]: Removed AWS Common Security Considerations from several AWS components due to adding too much noise

Content Updates:

[CON-1396]: Added specific details for each technique in Mitre ATT&CK countermeasures
[CON-1400]: Enabled IR-Dataflows library by default

Detailed changelog ([N]ew/[E]dited/[D]eleted):