Commit e1502d9b authored by Sam Drew's avatar Sam Drew Committed by Sam Drew
Browse files

Adds assessment steps for requirement

parent 13546995

EN-304-617.md

+24 −0
Original line number Diff line number Diff line
@@ -1152,6 +1152,7 @@ The following steps are to be carried out in order: 


Proposed ESR code: AAC



<<<<<<< HEAD

### [ACC-EXT-AAC-1]



Assessment of [REQ-EXT-AAC-1]
@@ -1318,6 +1319,29 @@ The following steps are to be carried out in order: 
**Supporting Evidence:**

- Extension console log.





### Assessment of [REQ-STORE-ACC-3]



- **Assessment Objective:** Assess whether the product enforces separation of data across browser profiles.

- **Assessment Preparation:**

    - Identify a relevant website that can be used to set uniquely identifiable data.

    - Prepare tooling that will provide visibility into data available for a given browser profile.

    - Identify supported browser profiles (eg private browsing, user profiles etc).

    - Reset browser to factory default settings.

    - Prepare browser configuration to support available browser profiles.

- **Assessment Activities:**

    - Open the website in the default browser profile, and note the data set by the website.

    - Open the website in each other browser profile, and note the data available in each profile.

    - Using the default browser profile, reload the website and note the data available.

- **Assignment of Verdict:** 

    - The data gets set in the default browser profile when visiting the website.

    - For each browser profile available, the data is set by the browser profile context successfully. 

    - The data set in the default browser profile is not available in any other browser profile.

    - Upon returning to the website, the data set initially is still available, and data set in individual profiles are not available.

- **Supporting Evidence**: 

    - Screenshot or log output from tooling at each step to demonstrate.





## 6.6 Confidentiality



Proposed ESR code: CON