AWS database @ 35.175.102.155 Github link: https://github.com/blah88/trello_ext_api

This is an attempt at creating an extension to Trello boards which attempts to enable users to add parent-child relationship to lists and cards in terms of property and visually to create a mind-map. Lists and cards may be placed at all directions instead of just orthogonal postions as per current set up. It is still WIP and database is not properly set up yet although you can connect to it since it is still deployed at AWS.

Discuss how the application will handle the privacy of user data within the system, and how security features of the frameworks you are utilising will assist to mitigate security concerns.

Object Relational Mapping (ORM) frameworks to make the translation of SQL result sets into code objects more seamless. ORM tools often mean developers will rarely have to write SQL statements in their code which use parameterized statements under the hood. This will lessen the likelihood of SQL injection attacks.

The API framework will sanitise user input.

User passwords will be hashed which add a layer of protection.

The combination of these measures will give some level of security and enhence user's privacy.

Discuss how you will address the following obligations as a developer:

• professional obligations (delivering the project on time, being explicit about ongoing maintenance of the system)
  CITD WIP

• ethical obligations: ensuring that the application conforms with ethical codes of conduct approved by industry
  Thorough terms and conditions. Handling of offensive material.

• legal obligations: that you have assessed whether the application is subject to any legal regulation, if none, consider any privacy implications Compliance. Legal requirements for data storage (PCI DSS)

Terms and Conditions

Ethical Obligations as a User: By joining our service you as a user agree to use our service that offensive materials defined by the Summary Offences Act 1988. Further information on what can be considered offensive or harmful is outlined by the following link: https://www.esafety.gov.au/report/illegal-harmful-content/what-we-can-investigate

If an ample number of complaints are made the content in question will be investigated and dealt with.

This application adhere to all Australian laws. Some of these legislations include the Privacy Act 1988, the Privacy and Personal Information Act 1998 (NSW), the Telecommunications Act 1997 (Cth) and the Telecommunications (Intercetion and Access) Act 1979 (Cth).

We respect user privacy until incriminating evidence against a user is found.

User input validation - Day 11 schema and main

Use flask and CRUD resource. Modular programming.

Display data. HTML, CSS, JINJA (DO IT LAST)

Extra class method in the admin model. Just one method only.

For example: clearly indicate how you have tested the integrity of the data for entities to ensure that data will not lead to a database with incomplete data, or data that is not appropriate (for example: properties should have a size limit appropriate for the data held)

Error messages for wrong input

tables

• fields with validation
• relationships between tables

Your database must have at least FIVE tables which demonstrate:

• one to many relationships
• one to one relationships

Use of Flask migrate

SQL Alchemy , Day 10

SQL Alchemy , Day 10 Outer left etc.