Security
ID: QA-01WHY_IT_MATTERS: Intaliq holds private data such as user account details, activity logs and personal fitness goals. That data must be protected from unauthorized access, and users must be authenticated before they reach their accounts. Authentication and authorization must also make sure that coaches and regular users can only run the functions they are authorized for.
Quality Attribute Scenario
- Source
- An unauthorized user
- Stimulus
- Attempts to access another user’s fitness information without authentication
- Environment
- Normal system operation
- Artifact
- Authentication and Authorization component
- Response
- The system verifies the user’s authentication and permissions and denies unauthorized access
- Response Measure
- 100% of unauthorized access attempts in the defined security test cases are rejected