IDS
IDS copied to clipboard
Make system name mandatory for classification requirement
According to this example it is possible to create a classification requirement that is accepted if an object has any classification. That is, it is possible to have this kind of requirement:
<requirements>
<classification minOccurs="1" maxOccurs="1" />
</requirements>
My interpretation of this is that if an object happens to have exactly one classification of any kind, the requirement is met. I don't see that this is a feasible case. I'd propose to make the system obligatory in classification.
This is a valid point, but is also flagged from the audit tool, so I'm closing the issue as we will solve all audit issues ahead of 1.0.
Added to the schema discussed today in the call