View source for Security/Reviews/CloudServices/Marketplace Backend

== Status ==
{| class="wikitable"
|-
! colspan="2" | Identity (TEMPLATE) 
|-
| Tracker Bug
| -
|-
| Stage
| Definition
|-
| Status
| Red (Green, Yellow, Red?)
|-
| Release Target
|
|-
| Health
| -
|-
| Status Note
| -
|}

== Team ==
{| class="wikitable"
|-
| Product manager / Feature manager
|Lindsay Saunders, Stephanie Turner and Caitlin Galimidi.
|- 
| Engineering lead
| 
|-
| Engineering manager
|Payments - Andy McKay
Marketplace - 
|-
| Security lead
|Adam Muntner 
|- 
|Privacy lead
| 
|- 
|Localization lead
|Peiying Mo
|- 
|Accessibility lead
| -
|- 
|QA lead
|Krupa Raj
|- 
|UX lead
|Elizabeth Hunt
|- 
|Product marketing lead
| 
|- 
|Additional members
|Amy Tsay - Community
Scott DeVaney - Editorial Manager
|-
|}

== Open issues/risks ==
== Stage 1: Definition ==

=== Introduction ===

Marketplace Backend, also known as "Zamboni."

Source code: https://github.com/mozilla/zamboni

Documentation: https://marketplace.readthedocs.org/en/latest/

Production site: https://marketplace.firefox.com/

Testing: https://marketplace.allizom.org

=== Use Cases ===

=== Data Flows ===

==== Diagram ====

===== Description =====

==== 1. Section ====
{| border="1" class="fullwidth-table"
| align="center" style="background:#f0f0f0;"|'''ID'''
| align="center" style="background:#f0f0f0;"|'''Origin'''
| align="center" style="background:#f0f0f0;"|'''Destination'''
| align="center" style="background:#f0f0f0;"|'''Description'''
|-
|1.A||Abcdefg hij klmnop||Abcdefg hij klmnop|| Abcdefg hij klmnop.
|-
|1.B||klmnop||klmnop klmnop||klmnop klmnop klmnop klmnop. klmnop klmnopklmnopklmnop
|}

==== 2. Section  ====
{| border="1" class="fullwidth-table"
| align="center" style="background:#f0f0f0;"|'''ID'''
| align="center" style="background:#f0f0f0;"|'''Origin'''
| align="center" style="background:#f0f0f0;"|'''Destination'''
| align="center" style="background:#f0f0f0;"|'''Description'''
|-
|2.A||Abcdefg hij klmnop||Abcdefg hij klmnop|| Abcdefg hij klmnop.
|-
|2.B||klmnop||klmnop klmnop||klmnop klmnop klmnop klmnop. klmnop klmnopklmnopklmnop
|}

==== 3. Section  ====
{| border="1" class="fullwidth-table"
| align="center" style="background:#f0f0f0;"|'''ID'''
| align="center" style="background:#f0f0f0;"|'''Origin'''
| align="center" style="background:#f0f0f0;"|'''Destination'''
| align="center" style="background:#f0f0f0;"|'''Description'''
|-
|3.A||Abcdefg hij klmnop||Abcdefg hij klmnop|| Abcdefg hij klmnop.
|-
|3.B||klmnop||klmnop klmnop||klmnop klmnop klmnop klmnop. klmnop klmnopklmnopklmnop
|-
|}

=== Architecture Diagram ===
[[File:Mkt systems.png|1200px|Marketplace Services diagram -  by David Durst]]
Marketplace Services diagram by Wil Clouser

===== Description =====
Logical diagram of Marketplace application services architecture.  

'''Usage'''

The dotted line from a red service goes to a breakout describing the logical components of its service stack. 
This is a logical diagram, it does not represent the deployed physical network or server architecture.

===== Mozilla Services =====

Descriptions and links to services in the Architecture Diagram. 

Mozilla Services Glossary - https://docs.services.mozilla.com/glossary.html

{| class="wikitable"
|-
! Component Name !! Description !! Documentation URLs
|-
| Celery || Celery is an asynchronous task queue/job queue based on distributed message passing. It is focused on real-time operation, but supports scheduling as well.
The execution units, called tasks, are executed concurrently on a single or more worker servers using multiprocessing, [http://eventlet.net/ Eventlet], or [http://gevent.org gevent]. Tasks can execute asynchronously (in the background) or synchronously (wait until ready). || Project - http://www.celeryproject.org/<br />
Known Security Issues - http://www.cvedetails.com/vulnerability-list/vendor_id-11748/Celeryproject.html
|-
| DB0 || Example || Example
|-
| DB2 || Example || Example
|-
| DB3 || Example || Example
|-
| Elastic Search 0 || Example || Example
|-
| Elastic Search 1 || Example || Example
|-
| Memcache || Example || Example
|-
| Monolith || Example || Example
|-
| Rabbit MQ || Example || Example
|-
| Recommendation Engine || Example || Example
|-
| Redis || Redis is an open source, BSD licensed, advanced key-value cache and store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets, sorted sets, bitmaps and hyperloglogs. || http://redis.io/
|-
| Webheads || Example || Example
|}

===== External Services =====

{| class="wikitable"
|-
! Component Name !! Description !! Documentation URLs
|-
| Firefox Accounts || Example || Documentation - https://wiki.mozilla.org/Identity/Firefox_Accounts
<br />Security Review - https://wiki.mozilla.org/Security/Reviews/B2G/FirefoxAccounts
|-
| Google Analytics || Example || Example 
|-
| Sentry || Example || Example 
|-
| Solitude || Example || Example 
|}

== Stage 2: Design ==

=== Threat Model ===

{| border="1" class="fullwidth-table sortable"
| align="center" style="background:#f0f0f0;"|'''ID'''
| align="center" style="background:#f0f0f0;"|'''Title'''
| align="center" style="background:#f0f0f0;"|'''Threat'''
| align="center" style="background:#f0f0f0;"|'''Proposed Mitigations'''
| align="center" style="background:#f0f0f0;"|'''Threat Agent'''
| align="center" style="background:#f0f0f0;"|'''Rating'''
| align="center" style="background:#f0f0f0;"|'''Likelihood'''
| align="center" style="background:#f0f0f0;"|'''Notes'''
| align="center" style="background:#f0f0f0;"|'''Impact'''
| align="center" style="background:#f0f0f0;"|'''Notes'''
|-
| 1||Title text||Threat description||Proposed mitigation.||Threat agents||Rating #||Likelihood #||Notes.||Impact Score # – Impact||Notes.
|-
| 2||Title text||Threat description||Proposed mitigation.||Threat agents||Rating #||Likelihood #||Notes.||Impact Score # – Impact||Notes.
|-
| 3||Title text||Threat description||Proposed mitigation.||Threat agents||Rating #||Likelihood #||Notes.||Impact Score # – Impact||Notes.
|-
| 
|}

[[image:TEMPLATE-Threat-Model.png|thumb|TEMPLATE Implementation Dataflow]]

==== User Interactions ====
{| border="1" class="fullwidth-table"
| align="center" style="background:#f0f0f0;"|'''ID'''
| align="center" style="background:#f0f0f0;"|''' Summary'''
| align="center" style="background:#f0f0f0;"|'''Description'''
|-
| 1.A|| Summary||Description.
|-
| 1.B|| Summary||Description.
|-
| 2.A|| Summary||Description.
|-
| 2.B|| Summary||Description.
|}

==== Client Interactions ====
{| border="1" class="fullwidth-table"
| align="center" style="background:#f0f0f0;"|'''ID'''
| align="center" style="background:#f0f0f0;"|'''Summary'''
| align="center" style="background:#f0f0f0;"|'''Description'''
|-
| 2.A|| Summary||Description.
|}

==== Server Interactions ====
{| border="1" class="fullwidth-table"
| align="center" style="background:#f0f0f0;"|'''ID'''
| align="center" style="background:#f0f0f0;"|'''Summary'''
| align="center" style="background:#f0f0f0;"|'''Description'''
| align="center" style="background:#f0f0f0;"|'''Path'''
| align="center" style="background:#f0f0f0;"|'''Input'''
| align="center" style="background:#f0f0f0;"|'''Output'''
| align="center" style="background:#f0f0f0;"|'''CEF'''
| align="center" style="background:#f0f0f0;"|'''CSRF'''
|-
| 3.A|| Summary||Description||Path||Input||Output||CEF||CSRF
|-
| 3.b|| Summary||Description||Path||Input||Output||CEF||CSRF
|}
CEF and CSRF columns indicate wether or not CEF logging or CSRF prevention is required for the interactions

==== Security Recommendations / Open Issues ====
{| border="1" class="fullwidth-table"
| align="center" style="background:#f0f0f0;"|'''ID'''
| align="center" style="background:#f0f0f0;"|'''Title'''
| align="center" style="background:#f0f0f0;"|'''Status'''
| align="center" style="background:#f0f0f0;"|'''Summary'''
|-
| [[https://bugzilla.mozilla.org/show_bug.cgi?id=000000]]||Title||Status(Open/Closed)||Summary.
|-
| [[https://bugzilla.mozilla.org/show_bug.cgi?id=000000]]||Title||Status(Open/Closed)||Summary.
|}

==== CEF Logging Requirements ====

=== Business Test Cases ===
Document application specific test cases here

=== Privacy Risk Analysis ===
(Status of and link to privacy review and outcome here)

== Stage 3: Planning ==

=== Application Security Requirements ===
Document individual requirements for the application here (e.g. CEF logging, captcha, etc)
=== Operation Security Requirements ===
Document network/platform security requirements here (e.g. IDS concerns, firewall changes, system hardening reqs, etc)
====Mana Website Creation Form ====
* https://mana.mozilla.org/wiki/display/websites/Home

=== Critical Security Requirements ===
Itemize individual security blockers here.  Reference components in section AppSec or OpSec subsections.
These blockers must be addressed before the product can go live.

== Stage 4: Development ==
=== Repeatable Security Test Cases ===
Document individual repeatable security test cases here.  Include a reference to the source repo, and documentation that governs how to execute test cases.
=== Secure Coding Guidelines ===
Document specific secure coding guidelines to be followed and relate them to specific issues/requirements that are specified; capture bug ids related to those issues.
=== Code Review Milestones ===
Table 1 - itemized list of code review milestones {i.e. breakdown of specific components that will be reviewed}
Table 2 - list of app components/modules that should trigger additional security review (e.g. auth, csrf, file upload handling, etc)

== Stage 5: Release ==
=== Application Security Verification ===
These subsections should contain a list of the steps to be taken, and the status of each activity
==== Code Review ====
==== Automated Security Testing ====
* [https://wiki.mozilla.org/WebAppSec/garmr Garmr]

==== Manual Security Testing ====
=== Operational Security Verification ===
==== ArcSight Information ====
==== Network Design Security Review ====
==== Database Security Review ====
==== Platform Security (Hardening & Specific Config Requirements) ====
=== Landing Criteria ===
This should be a table itemizing everything from Stage 3 - Critical Security Requirements, including status.
For status Red=Unimplemented,Yellow=implemented,Green=tested and passed?
== Stage 6: Post Implementation Review ==
=== Production Security Considerations ===
Document additional/ongoing work for this application (e.g. specific things to watch for in ArcSight, gaming behaviour, etc)
=== Post Implementation Tasks ===
Itemize process/kb changes developed from this project (e.g. secure coding guidelines, policy stuff, etc)


== Team status notes ==
{| class="wikitable"
!
!status
!notes
|-
|Products
|tbd
| -
|-
|Engineering
| tbd
| -
|-
|Engineering
| tbd
| -
|-
|Engineering
| tbd
| -
|-
|Engineering
| tbd
| -
|-
|Engineering
| tbd
| -
|-
|Engineering
| tbd
| -
|-
|Engineering
| tbd
| -
|-
|Engineering
| tbd
| -
|}