Sometimes UI testing is the best option. IFS Enterprise Explorer UI controls (most of them) is automatable through MSAA and therefore supports many Windows desktop UI testing toolkits (as mentioned above)
You can use “any” Windows UI testing tools to drive the IFS EE user interface.Some examples of what I’ve seenKatalon Studio https://www.katalon.com/desktop-testing/ (free) Microsoft Visual Studio (Coded UI Test) - various editions exists. Now getting deprecated Ranorex - https://www.ranorex.com/ (free trial) etcMy main concern with tests on UI level are that such tests are quite “expensive” to maintain.Often slow to execute. Often fragile to changes. Dependent on specific data setup. And the big advantage of UI testing is that is very closely resembles what the real end-user does.
As Vishwajeet wrote, many of the lower level technical security issue types are handled by the frameworks and as an Aurena/Marble developer don’t need to worrya about.This include (but is not an exhaustive list) (from the OWASP Top Ten https://www.owasp.org/images/7/72/OWASP_Top_10-2017_%28en%29.pdf.pdf)Authentication CSRF, XXE, XSS Parts of access controlSecurity related issues that you do need to consider when doing Aurena/Marbe development areInjections, especially SQL injections. Beware of dynamic SQL commands like EXECUTE IMMEDIATE, and/or dbms_sql Insecure direct object references, missing “row level access” and lack of access control of unbound actions. Example: Apply a filter on the client side, but leaving the server (projection) with completely open API. Also, adding “enabled” control on the client side but not do the same check in the API.IFS Developer Studio contains assistance for possible security vulnerability scenarios such as SQL Injections and lack of access checks
Already have an account? Login
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
Sorry, our virus scanner detected that this file isn't safe to download.
