Added system-characteristics 'has-authorization-boundary' constraints…

… & tests

features/fedramp_extensions.feature

@@ -43,6 +43,20 @@ Examples:
   | data-center-us-PASS.yaml |
   | deployment-mode-FAIL.yaml |
   | deployment-mode-PASS.yaml |
+  | has-authorization-boundary-diagram-FAIL.yaml |
+  | has-authorization-boundary-diagram-PASS.yaml |
+  | has-authorization-boundary-diagram-caption-FAIL.yaml |
+  | has-authorization-boundary-diagram-caption-PASS.yaml |
+  | has-authorization-boundary-diagram-description-FAIL.yaml |
+  | has-authorization-boundary-diagram-description-PASS.yaml |
+  | has-authorization-boundary-diagram-link-FAIL.yaml |
+  | has-authorization-boundary-diagram-link-PASS.yaml |
+  | has-authorization-boundary-diagram-link-rel-FAIL.yaml |
+  | has-authorization-boundary-diagram-link-rel-PASS.yaml |
+  | has-authorization-boundary-diagram-link-rel-allowed-value-FAIL.yaml |
+  | has-authorization-boundary-diagram-link-rel-allowed-value-PASS.yaml |
+  | has-authorization-boundary-diagram-uuid-FAIL.yaml |
+  | has-authorization-boundary-diagram-uuid-PASS.yaml |
   | has-configuration-management-plan-FAIL.yaml |
   | has-configuration-management-plan-PASS.yaml |
   | has-incident-response-plan-FAIL.yaml |
@@ -71,12 +85,12 @@ Examples:
   | resource-has-title-PASS.yaml |
   | response-point-FAIL.yaml |
   | response-point-PASS.yaml |
-  | role-defined-system-owner-FAIL.yaml |
-  | role-defined-system-owner-PASS.yaml |
   | role-defined-authorizing-official-poc-FAIL.yaml |
   | role-defined-authorizing-official-poc-PASS.yaml |
   | role-defined-information-system-security-officer-FAIL.yaml |
   | role-defined-information-system-security-officer-PASS.yaml |
+  | role-defined-system-owner-FAIL.yaml |
+  | role-defined-system-owner-PASS.yaml |
   | scan-type-FAIL.yaml |
   | scan-type-PASS.yaml |
   | user-type-FAIL.yaml |
@@ -110,6 +124,13 @@ Examples:
   | data-center-country-code |
   | data-center-primary |
   | deployment-model |
+  | has-authorization-boundary-diagram |
+  | has-authorization-boundary-diagram-caption |
+  | has-authorization-boundary-diagram-description |
+  | has-authorization-boundary-diagram-link |
+  | has-authorization-boundary-diagram-link-rel |
+  | has-authorization-boundary-diagram-link-rel-allowed-value |
+  | has-authorization-boundary-diagram-uuid |
   | has-configuration-management-plan |
   | has-incident-response-plan |
   | has-information-system-contingency-plan |
@@ -124,9 +145,9 @@ Examples:
   | prop-response-point-has-cardinality-one |
   | resource-has-base64-or-rlink |
   | resource-has-title |
-  | role-defined-system-owner |
   | role-defined-authorizing-official-poc |
   | role-defined-information-system-security-officer |
+  | role-defined-system-owner |
   | scan-type |
   | user-type |
 #END_DYNAMIC_CONSTRAINT_IDS

src/validations/constraints/content/ssp-all-VALID.xml

@@ -109,6 +109,13 @@
       <description>
         <p>The authorization boundary includes all components within the main data center and the disaster recovery site.</p>
       </description>
+      <diagram uuid="dbf46c27-52a9-49c4-beb6-b6399cd75497">
+            <description>
+               <p>A diagram-specific explanation.</p>
+            </description>
+            <link href="#d2eb3c18-6754-4e3a-a933-03d289e3fad5" rel="diagram"/>
+            <caption>Authorization Boundary Diagram</caption>
+         </diagram>
     </authorization-boundary>
   </system-characteristics>
 

src/validations/constraints/fedramp-external-constraints.xml

@@ -62,6 +62,27 @@
             <expect id="categorization-has-information-type-id" target="//system-characteristics" test="system-information/information-type/categorization/information-type-id" level="ERROR">
             <message>A FedRAMP SSP information type categorization must have at least one information type identifier.</message>
             </expect>
+            <expect id="has-authorization-boundary-diagram" target="./system-characteristics/authorization-boundary" test="diagram" level="WARNING">
+            <message>A FedRAMP SSP has at least one authorization boundary diagram.</message>
+            </expect>
+            <expect id="has-authorization-boundary-diagram-uuid" target="./system-characteristics/authorization-boundary" test="diagram/@uuid" level="ERROR">
+            <message>Each OSCAL SSP authorization boundary diagram has a unique identifier.</message>
+            </expect>
+            <expect id="has-authorization-boundary-diagram-description" target="./system-characteristics/authorization-boundary" test="diagram/description" level="ERROR">
+            <message>An OSCAL SSP document authorization boundary diagram has a description.</message>
+            </expect>
+            <expect id="has-authorization-boundary-diagram-link" target="./system-characteristics/authorization-boundary" test="diagram/link" level="ERROR">
+            <message>Each FedRAMP SSP authorization boundary diagram has a link.</message>
+            </expect>
+            <expect id="has-authorization-boundary-diagram-link-rel" target="./system-characteristics/authorization-boundary" test="diagram/link/@rel" level="ERROR">
+            <message>Each FedRAMP SSP authorization boundary diagram has a link rel attribute.</message>
+            </expect>
+            <expect id="has-authorization-boundary-diagram-link-rel-allowed-value" target="./system-characteristics/authorization-boundary" test="diagram/link/@rel eq 'diagram'" level="ERROR">
+            <message>Each FedRAMP SSP authorization boundary diagram has a link rel attribute with the value "diagram".</message>
+            </expect>
+            <expect id="has-authorization-boundary-diagram-caption" target="./system-characteristics/authorization-boundary" test="diagram/caption" level="ERROR">
+            <message>Each FedRAMP SSP authorization boundary diagram has a caption.</message>
+            </expect>
         </constraints>
     </context>
     <context>

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-FAIL.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Negative Test for has-authorization-boundary-diagram
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram
+  content: ../content/ssp-all-INVALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram
+      result: fail

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-PASS.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Positive Test for has-authorization-boundary-diagram
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram
+  content: ../content/ssp-all-VALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram
+      result: pass

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-caption-FAIL.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Negative Test for has-authorization-boundary-diagram-caption
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-caption
+  content: ../content/ssp-all-INVALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-caption
+      result: fail

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-caption-PASS.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Positive Test for has-authorization-boundary-diagram-caption
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-caption
+  content: ../content/ssp-all-VALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-caption
+      result: pass

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-description-FAIL.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Negative Test for has-authorization-boundary-diagram-description
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-description
+  content: ../content/ssp-all-INVALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-description
+      result: fail

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-description-PASS.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Positive Test for has-authorization-boundary-diagram-description
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-description
+  content: ../content/ssp-all-VALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-description
+      result: pass

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-link-FAIL.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Negative Test for has-authorization-boundary-diagram-link
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-link
+  content: ../content/ssp-all-INVALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-link
+      result: fail

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-link-PASS.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Positive Test for has-authorization-boundary-diagram-link
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-link
+  content: ../content/ssp-all-VALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-link
+      result: pass

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-link-rel-FAIL.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Negative Test for has-authorization-boundary-diagram-link-rel
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-link-rel
+  content: ../content/ssp-all-INVALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-link-rel
+      result: fail

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-link-rel-PASS.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Positive Test for has-authorization-boundary-diagram-link-rel
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-link-rel
+  content: ../content/ssp-all-VALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-link-rel
+      result: pass

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-link-rel-allowed-value-FAIL.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Negative Test for has-authorization-boundary-diagram-link-rel-allowed-value
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-link-rel-allowed-value
+  content: ../content/ssp-all-INVALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-link-rel-allowed-value
+      result: fail

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-link-rel-allowed-value-PASS.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Positive Test for has-authorization-boundary-diagram-link-rel-allowed-value
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-link-rel-allowed-value
+  content: ../content/ssp-all-VALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-link-rel-allowed-value
+      result: pass

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-uuid-FAIL.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Negative Test for has-authorization-boundary-diagram-uuid
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-uuid
+  content: ../content/ssp-all-INVALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-uuid
+      result: fail

src/validations/constraints/unit-tests/has-authorization-boundary-diagram-uuid-PASS.yaml

@@ -0,0 +1,9 @@
+test-case:
+  name: Positive Test for has-authorization-boundary-diagram-uuid
+  description: >-
+    This test case validates the behavior of constraint
+    has-authorization-boundary-diagram-uuid
+  content: ../content/ssp-all-VALID.xml
+  expectations:
+    - constraint-id: has-authorization-boundary-diagram-uuid
+      result: pass