IBM OpenPages GRC Platform Version 7.0 FP2. Enhancements

Transcription

1 IBM OpenPages GRC Platform Version 7.0 FP2 Enhancements

2 NOTE Before using this information and the product it supports, read the information in the Notices section of this document. Product Information This document applies to IBM OpenPages GRC Platform and may also apply to subsequent releases. Licensed Materials Property of IBM Corporation. Copyright IBM Corporation, 2003, US Government Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. Documentation Release Information Last Modified: June 19, :08:26 PM

3 Table of Contents Usability enhancements to Grid View, Bulk Update and filters...4 ORM usability enhancements...8 Report enhancements...8 Risk API enhancements...9 Performance enhancements...9 Security enhancements...9 Notices...10

4 Usability enhancements to Grid View, Bulk Update and filters Enhancements have been made to the Grid View and Filtered List View, and to the Bulk Update and filter capability to improve usability. These enhancements provide the following benefits: Enhance a user s ability to understand the state of filters in Filter List Views and in Grid Views. Help business users to better understand how to use the Grid View and Bulk Update. Improve the user experience for advanced users. Reduce confusion between Filtered List Views and Grid Views. Provide a means for a user to understand which Grid View fields are editable. Improve the ability for a user to confirm that they are about to bulk update intended content. Increase usability of Grid View Guidance and Grid View Row Info Cards. Simplify the ability for users to filter on themselves for objects. Provide visual enhancements that improve usability. Improve the user experience when using a Grid View with a large amount of data. Improve the usefulness of object type Home Page Filtered Lists. Further information about these enhancements, and how to access them, is provided in the following sections. Enhance a user's ability to understand the state of filters in Filter List Views and in Grid Views A filter message bar has been added above the Grid View content in Grid Views and Filtered List Views. It indicates the name of the applied filter, provides a Clear Filter link if a filter is applied, contains the number of records returned by the filter and provides the number of Grid View Rows currently selected. Synchronization has been improved between the filter selector combo box, the advanced filter panel label, the advanced filter panel criteria and the new filter message bar so it is always clear to a user which filter is applied and which filter is being edited.

5 The ability to type ahead in the filter selector combo box has been removed. This capability interfered with selection of the correct filter and entering and applying the intended quick filter. The None filter has been removed from the filter selector combo box; this capability is now provided by the Clear Filter link in the new filter message bar. Help business users to better understand how to use the Grid View and Bulk Update To improve understanding of Grid View Rows, further context sensitive information has been added, and Grid View Row tooltips have been improved. The entire tooltip is now clickable to launch the Info Card. A View Details link has also been added in the tooltip so that a user knows there is more information available. Tooltips now include context-sensitive information about use of the row plus and minus sign icons to expose and hide additional levels of content in the Grid View. The Bulk Update panel object type selector now automatically disables selections for object types where there are no fields configured to be updated via Bulk Update. This will reduce confusion caused in previous versions because users were able to select object types to update that did not include any fields configured for update. Guidance information provided from the question mark icon on the Bulk Update panel has been improved, and additional guidance has been made available from the Bulk Update object type selector. Improve the user experience for advanced users An (advanced) user now has the ability to disable Grid View Row tooltips, and can apply this setting across sessions. Since the tooltip is also used as a launch point for the Grid View Row Info Card, a user is now able to right click on a Grid View Row to see a context menu. This context menu can then be used to launch the row Info Card, even when tooltips are disabled. There is now a toggle menu item on the Grid Actions menu which allows a user to disable or enable tooltips on Grid View Rows for all Filtered List Views and Grid Views. Reduce confusion between Filtered List Views and Grid Views Grid views and Filtered List Views look and feel the same but behave differently, which was confusing for users. Filtered List Views can now be configured to behave similarly to Grid Views by making them editable. A registry setting has been added which globally sets all Filtered List Views for all profiles to be editable, so that they behave like Grid Views, including access to Bulk Update. For default setting of false, there is no behavior change on upgrade. From the Administration menu, choose Settings à OpenPages à Applications à GRCM à Filtered List à Editable. A value of false sets all fields in the Filtered List View to read only. A value of true enables all fields in the Filtered List View to be edited. The actual ability to edit is controlled by security settings and field dependencies. Possible values are true false.

6 Provide a means for the user to understand which Grid View fields are editable A row cannot be edited in a Grid View unless there are fields currently displayed in the Grid View body that are configured to be editable. There may be editable fields but they may be configured to display only in Full Mode or only in the Info Card. In this case, a tooltip will indicate that the row is read only and that the user should make hidden fields visible to edit the row. A user can now check which fields are configured to be editable, and can use a one click method to add all editable fields to a Grid View. The Manage Columns dialog now includes a pencil icon next to each editable field. It also provides a link Display all editable fields in Full Mode which adds all editable fields for all configured object types for that view into Full Mode, and upon returning to the Grid View, it automatically switches the Grid View display to Full Mode. Improve the ability for a user to confirm that they are about to Bulk Update intended content The content and layout of the Bulk Update confirmation dialog has been improved and additional guidance has been added to it. Both the Name and Description fields are now shown for each of the objects to be updated. Increase usability of Grid View Guidance and Grid View Row Info Cards The Grid View Guidance Card and Grid View Row Info Card now use an improved algorithm for sizing the cards based upon the content that they will display. In addition, users can now resize these cards, and the new sizes will be retained per object type per view, for subsequent launches of those cards by that user. Simplify the ability for users to filter on themselves for objects A user can now easily filter on themselves when creating an ad-hoc filter by using a one click link that contains the user's username. Ad-hoc advanced filters will now display the logged in user s username instead of an End User link. Any filters created via the Admin UI that can be used by multiple users continue to have an End User link.

7 Provide visual enhancements that improve usability A number of visual enhancements have been made to improve usability of the Grid View. Background colors for row hover, row select and row in edit mode have been changed to increase contrast. The icon for the calendar has been improved to look more like a calendar. The size of the plus and minus icons on the Grid View Rows has been increased. The Bulk Update and Advanced Filter panels are now both toggled between opened and closed using tabs with text links, and both panels now include Close buttons. Improve the user experience when using a Grid View with a large amount of data Attempting to perform a Bulk Update on a Grid View with 1000s of grandchildren, previously caused a very long delay followed by one of several error messages that did not help define the cause of the problem. A registry setting has been added to restrict the combined number of children and grandchildren that can be opened when a single Grid View Row is expanded. The setting is available at: Administration > Settings > OpenPages >Applications >GRCM >Filtered List > Maximum Expand Size. This setting is the maximum number of children and grandchildren rows that can be exposed when the user clicks the plus sign to expand a Grid View Row. A view that attempts to return more rows than the value of this setting will quickly display an error instead of displaying the data. Setting larger values will adversely impact performance. The value must be a positive integer less than The default value is 200. Improve the usefulness of object type Home Page filtered lists The Show All link will now always appear on Home Page Filtered Object Lists with more than zero rows; previously the link appeared only when the number of rows limit was exceeded. The configured value for that limit still affects the maximum number of rows that will be shown in a list; it no longer affects whether or not the Show All link appears. This enhancement allows users to access the Filtered List View or a Grid View filtered per the Home Page list filter, even when the number of items present in the list is less than or equal to the maximum.

8 ORM usability enhancements The ORM Helpers and Notifications have been modified to align their look and feel with the modernized look and feel of the IBM OpenPages application introduced in version Improvements have also been made to these components in the area of localization. Report enhancements The Risk Heat Map report has been redesigned to make it more interactive. Prompts for the report are now located on the main report page making it easier to modify their values. The heat map portion of the report has also been redesigned to have a more modern look and feel. The Process Analysis report has been redesigned to have additional interactivity and features. Risks can be expanded to see their Controls, details for a Risk can be viewed without leaving the context of the report, and the Risk Severity Trend can also be viewed. A Risk Heat Map, Business Process Flow visualization, Business Entity Hierarchy visualization and the application Detail Page for the selected Process can be launched in popup windows from the main report window. If browser security is set appropriately, a customer can easily reconfigure the Process Analysis report to launch these elements in the same window as the main Process Analysis report. A hidden prompt control has been added to the header of the report called "pflyoutsupported". Its default value will be 0. A value of 1 will enable the flyout capability (appearance of these report elements in the same window as the main report). Follow these steps to configure the required security setting in Internet Explorer to enable the flyout capability: 1. Open Internet Options. 2. Click on the Security Tab. 3. Click on Trusted Sites. 4. Click on Sites and ensure ibm.com is listed as a trusted site. 5. Click Custom Level... and ensure that "Access data sources across domains" is set to Enable.

9 Risk API enhancements A number of performance and functional improvements have been made to the Risk API introduced in v7.0.0, in the areas of: Association Node not set with correct type on getchildren String Encrypt/Decrypt implementation enhanced Metadata retrieval on initial calls; MetaDataService for field dependencies Retrieving GRC object data; ResourceService for getresource call Performance enhancements Performance of the Risk Heat Map report has been greatly improved. Performance of ObjectManager loads when there are a large number of users provisioned in OpenPages has been improved. If using the new optional command line argument -server then ObjectManager will use cached users rather than reloading all users as its first step, saving minutes per XML file load, if thousands of users are provisioned. Invoke ObjectManager with the new -server command line argument as the first argument to realize the benefits of this improvement Security enhancements The ability to use AES encryption to protect passwords has been added. The encryption administration tool has also been updated to support the conversion of existing data from 3DES to AES encryption. There is reduced vulnerability to link injection. The OpenPages framework model generator now uses version of Apache Tomcat.

10 Notices This information was developed for products and services offered in the U.S.A. IBM may not offer the products, services, or features discussed in this document in other countries. Consult your local IBM representative for information on the products and services currently available in your area. Any reference to an IBM product, program, or service is not intended to state or imply that only that IBM product, program, or service may be used. Any functionally equivalent product, program, or service that does not infringe any IBM intellectual property right may be used instead. However, it is the user's responsibility to evaluate and verify the operation of any non-ibm product, program, or service. This document may describe products, services, or features that are not included in the Program or license entitlement that you have purchased. IBM may have patents or pending patent applications covering subject matter described in this document. The furnishing of this document does not grant you any license to these patents. You can send license inquiries, in writing, to: IBM Director of Licensing IBM Corporation North Castle Drive Armonk, NY U.S.A. For license inquiries regarding double-byte (DBCS) information, contact the IBM Intellectual Property Department in your country or send inquiries, in writing, to: Intellectual Property Licensing Legal and Intellectual Property Law IBM Japan Ltd , Nihonbashi-Hakozakicho, Chuo-ku Tokyo , Japan The following paragraph does not apply to the United Kingdom or any other country where such provisions are inconsistent with local law: INTERNATIONAL BUSINESS MACHINES CORPORATION PROVIDES THIS PUBLICATION "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF NON-INFRINGEMENT, MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE. Some states do not allow disclaimer of express or implied warranties in certain transactions, therefore, this statement may not apply to you. This information could include technical inaccuracies or typographical errors. Changes are periodically made to the information herein; these changes will be incorporated in new editions of the publication. IBM may make improvements and/or changes in the product(s) and/or the program(s) described in this publication at any time without notice. Any references in this information to non-ibm Web sites are provided for convenience only and do not in any manner serve as an endorsement of those Web sites. The materials at those Web sites are not part of the materials for this IBM product and use of those Web sites is at your own risk.

11 IBM may use or distribute any of the information you supply in any way it believes appropriate without incurring any obligation to you. Licensees of this program who wish to have information about it for the purpose of enabling: (i) the exchange of information between independently created programs and other programs (including this one) and (ii) the mutual use of the information which has been exchanged, should contact: IBM Corporation Location Code FT0 550 King Street Littleton, MA U.S.A. Such information may be available, subject to appropriate terms and conditions, including in some cases, payment of a fee. The licensed program described in this document and all licensed material available for it are provided by IBM under terms of the IBM Customer Agreement, IBM International Program License Agreement or any equivalent agreement between us. Any performance data contained herein was determined in a controlled environment. Therefore, the results obtained in other operating environments may vary significantly. Some measurements may have been made on development-level systems and there is no guarantee that these measurements will be the same on generally available systems. Furthermore, some measurements may have been estimated through extrapolation. Actual results may vary. Users of this document should verify the applicable data for their specific environment. Information concerning non-ibm products was obtained from the suppliers of those products, their published announcements or other publicly available sources. IBM has not tested those products and cannot confirm the accuracy of performance, compatibility or any other claims related to non-ibm products. Questions on the capabilities of non-ibm products should be addressed to the suppliers of those products. All statements regarding IBM's future direction or intent are subject to change or withdrawal without notice, and represent goals and objectives only. This information contains examples of data and reports used in daily business operations. To illustrate them as completely as possible, the examples include the names of individuals, companies, brands, and products. All of these names are fictitious and any similarity to the names and addresses used by an actual business enterprise is entirely coincidental. If you are viewing this information softcopy, the photographs and color illustrations may not appear. This Software Offering does not use cookies or other technologies to collect personally identifiable information.

12 Copyright Licensed Materials - Property of IBM Corporation. Copyright IBM Corporation, 2003, US Government Users Restricted Rights Use, duplication or disclosure restricted by GSA ADP Schedule Contract with IBM Corp. This information contains sample application programs in source language, which illustrate programming techniques on various operating platforms. You may copy, modify, and distribute these sample programs in any form without payment to IBM, for the purposes of developing, using, marketing or distributing application programs conforming to the application programming interface for the operating platform for which the sample programs are written. These examples have not been thoroughly tested under all conditions. IBM, therefore, cannot guarantee or imply reliability, serviceability, or function of these programs. You may copy, modify, and distribute these sample programs in any form without payment to IBM for the purposes of developing, using, marketing, or distributing application programs conforming to IBM's application programming interfaces.

13 Trademarks IBM, the IBM logo and ibm.com are trademarks or registered trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. The following terms are trademarks or registered trademarks of other companies: Adobe, the Adobe logo, PostScript, and the PostScript logo are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States, and/or other countries. Microsoft, Windows, Windows NT, and the Windows logo are trademarks of Microsoft Corporation in the United States, other countries, or both. Intel, Intel logo, Intel Inside, Intel Inside logo, Intel Centrino, Intel Centrino logo, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries. UNIX is a registered trademark of The Open Group in the United States and other countries. Java and all Java-based trademarks and logos are trademarks or registered trademarks of Oracle and/or its affiliates. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at Copyright and trademark information at