[Digital Product Pass] - Release Checks R24.05

[matbmoser]

Important

Follow the guidance on how to use the templates.

Release Info

Please provide information on what you want to be included in the Eclipse Tractus-X release.
If you are not owner of this issue, please provide the information as comment to the issue.
Make sure to assign this issue to expert(s) for their approval, as soon as you have finished preparation. Multiple assignees allowed; they will un-assign themselves once review completed.

Version to be included in Eclipse Tractus-X release: v3.0.0-rc1

Leading product repository: https://github.com/eclipse-tractusx/digital-product-pass

Compliance Verifications

This issue tracks all checks, that need to be performed for a product release in Eclipse Tractus-X.

• [DPP] Interoperability checks performed digital-product-pass#299
• [DPP] Data Sovereignty checks performed digital-product-pass#300

General Checks

• [DPP] [TRGs] [R24.05] Tractus-X Release Guidelines fulfilled digital-product-pass#263

Note

Note: most criteria for documentation and security are now covered in TRGs

Security Checks

• [DPP] Threat Modelling Analysis passed digital-product-pass#301

Test Results

• [DPP] E2E Integration Test passed digital-product-pass#302
• [DPP] User Journey approved digital-product-pass#303

Helpful Links

• Eclipse Tractus-X openAPI specs on SwaggerHub

[matbmoser]

Ok TRG approved and double checked by two committers, @saudkhan116 which prepare and me which reviewed.

[matbmoser]

For the Thread Modelling was already requested and reviewed with @szymonkowalczykzf in Friday. He will open a pull request and it will be merged in the main branch.

[ThomasObermeyer]

Reviewed interoperability based on the provided documentation (delta since last release):

https://confluence.catena-x.net/x/uYnrBw

@kelaja Approved!

[matbmoser]

App release candidate with the TRGs + Interoperability Requirements and E2E Tests passed (still missing documentation) released!

https://github.com/eclipse-tractusx/digital-product-pass/releases/tag/v3.0.0-rc1

[cbrugg]

E2E Tests and INT Tests performed successfully. Data Sov Tests outstanding.

[RolaH1t]

2024-05-14: QG review
data sov just a matter of completion / no blockers.
TRGs completed with several comitters. great!
User Journey approval expected on final version 3.0.0
no additional mtg required.

[vialkoje]

Data sovereignty - Expert approval granted as the solution considers the company rules by showing all accceptable options to the end-user and no decision is made without the company knowing.

[matbmoser]

Thank you @vialkoje! Then I can set the Data sov checkpoint to done. I believe this also solved the E2E Tests checkmark, requested confirmation per email since tests are all done and passed.

[matbmoser]

App in version 3.0.0 released: https://github.com/eclipse-tractusx/digital-product-pass/releases/tag/v3.0.0 User Journey approval can be done.

Can I close the E2E Test ticket?

[KMA-2019]

@vialkoje , @cbrugg , @matbmoser as aligned referencing here notes / feedback from E2E Tests for Data Sovereignty.
No blocking issues for current Rel 24.05 but main items to be considered for next release(s):

• Note: additional tests (from customer perspective) only partially possible
• app relies mainly on backend configuration of policies, no UI yet for definition and maintenance of Company specific Rules
• Each Customer runs own application instance, any user is able to login with Part number and can see and select company rules (however, important that users cannot change or propose new ones)
• incomplete Policy: no validation / no error if e.g. pre-defined policy is missing
• ContractReference Contraint can be added in backend, but not easily configurable separately for different partner BPNs
• Error Handling / failed negotiation: nice that in case own company rule selected does not match a contract offer with this material, Error Screen mit "policy selected is not allowed per config or does not exist"
• It is possible (for one user!) to decline a specific policy but same screen and option will appear for same user and all other company users again, i.e. backend process unclear
• no validation of the Schema "profile": "cx-policy:profile2405" (required to ensure interop with other traceability apps)

[matbmoser]

Super! Thank you @KMA-2019 for the review! I see all this points as valid points to improve in the next release :) Luckily we had so many testers (105 persons aprox) testing the application yesterday and today in the Second Tractus-X Community Days and the application worked as expected! Data Sovereignty is completely configurable and will restrict by design any other policy that is not specified in the configuration for security reasons. Following the concept of Deny all accept the configured ones.

[cbrugg]

All tests have passed successfully.
Testmanagement Approval is hereby given. Thank you for your efforts!

[RolaH1t]

looks good @matbmoser
so the approval of user journey is the only thing missing for full QG approval
Roland

[matbmoser]

I have sent a reminder today again to the business owner for getting the User Journey approval, waiting for response.

[matbmoser]

User Journey Approved by Business Owner!
@RolaH1t I believe we are ready then 💯

[RolaH1t]

User Journey Approved by Business Owner! @RolaH1t I believe we are ready then 💯

yes, evidence confirmed

[RolaH1t]

Congrats:
Quality Gate fully approved with all necessary pre-requisites fulfilled!
Thanks for all your efforts,
Roland