OWASP
MyOpenCRE: create frontend
MyOpenCRE is a year old at this point. The API seems to have reasonable stability and to work as expected.
Time to make a frontend for it so that interested parties can use it without curl.
Acceptance criteria: Make a set of new pages and buttons linked to by the main page that allow users to:
- download a CSV with all the CREs currently in the DB
- upload a CSV with one or more standards mapped to CREs and allow the application to import them.
User journey:
- user who has "Standard A" (assume standard is SOC2 for example)
- user want to map "Standard A" to other standards but they don't have the capacity to do so manually
- user splits "Standard A" into controls or sections
- user visits myopencre.org and clicks: "myOpenCRE"
- user can download a mapping spreadsheet template using a button
- user can then map "Standard A" to CREs in their spreadsheet
- user can then upload their spreadsheet by either drag n drop or by selecting a file on their computer
- The CRE platform then imports their spreadsheet and notifies the user via a browser notification when the import is done
- User can then use "Standard A" in OpenCRE normally
This feature needs to be able to be turned on or off (aka feature flagged ). Heroku does not have enough resources to calculate gap analysis etc for a full standard and we don't want this getting abused with irrelevant standards.
For local execution this should allow people to import a full standard. For heroku the ability to Upload a standard should be turned off.
@northdpole I'd like to work on this issue and build the frontend for downloading and uploading CSVs. Before I start, could you confirm the preferred tech stack for the frontend? Should I align with any existing framework (React, Vue, or plain HTML/JS), or do you have specific requirements? Let me know, and I'll proceed accordingly. You can assign this issue to me.
You should follow the existing tech, currently react and typescript, it should be kinda seamless with the existing frontend:-)
Reach out to slack If you need help, happy to add details
@northdpole Thanks for confirming! I'll proceed with implementing the frontend in React and TypeScript, ensuring it integrates seamlessly with the existing setup. Please assign the issue to me, and I'll get started.
@abhayofc Yes, almost designed the frontend and is in middle of implementing it, would be done soon !
@Ad-tech1009 Are you still working on this?? I would like to work on this.
Hi! I noticed there hasn’t been any activity here recently. If it’s okay, I’d like to work on this issue. Could you please assign it to me if it’s available?
