hp quality center 10 from a test manager

8/18/2019 HP Quality Center 10 From a Test Manager

1/38

HP Quality Center 10 from a Test Manager’s

Perspective

03/02/2009 by Serge Baumberger

The new Version 10 of the HP Quality Center (QC) is now available. Yet what are the actual

advantaes of the new QC co!"ared to its "redecessor fro! a Test #anaer$s "ers"ective%

&elow' will tae a loo at so!e of the new features and chanes' and will answer the *uestionwhether one should even !ae the switch.

The Most Significant Changes

The new QC Version 10 has seen a series of chanes' of which the !ost sinificant ones are+

• Version control

• &aselinin

• nterated dashboard

• ,hared libraries

• Cross Pro-ect Custo!iation

Version Control

/inally' QC has been "rovided with a fully interated version control. n "ast versions' one had

to !ae do with third"arty interation' which enerally stu!bled rather than ran. The version

control' if desired' !ust first be activated for every individual "ro-ect via the ,ited!in. 2ncethis is done' all entities fallin under the version control beco!e Version 1. QC entities include

re*uire!ents' tests' test resources' and business co!"onents. f one wishes to add a test ste" to a

test case for e3a!"le' one is auto!atically re*uested to chec this test case. s soon as there is!ore than one version of an entity' one can co!"are various versions aainst each other or

retrieve an older version.

Summary: The whole thing is intuitive and easy to operate. But what’s the use of having eight

versions of a reuirement! when one doesn’t "now whi#h software release a version belongs to$

Baselining

http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/https://h10078.www1.hp.com/cda/hpms/display/main/hpms_content.jsp?zn=bto&cp=1-11-127_4000_100__http://www.beteoblog.com/2008/08/18/is-tool-supported-test-management-profitable/https://h10078.www1.hp.com/cda/hpms/display/main/hpms_content.jsp?zn=bto&cp=1-11-127_4000_100__http://www.beteoblog.com/2008/08/18/is-tool-supported-test-management-profitable/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/


2/38

lon with version control co!es baselinin' which is intended to answer the *uestion above.

4sin the new 5#anae!ent6 !odule that re"laces the 57eleases6 introduced in 8.3 one ets to

the baseline function via the 59ibraries6 tab. This enables one to obtain a su!!ary of a co!"letetestin release and retrieve it if necessary. n this way' a test set can be "inned to a baseline in the

test lab. n other words' as of now' the !anual co"yin of entire trees into the test "lan !odule is

a thin of the "ast. t last' test !anaers will be able to "ro"erly oranie software that has!ulti"le "arallel releases (in "roduction' current release' future release).

Summary: Setting up the baseline wor"s very well. %hile #reating it! a log "eeps one updated on

what is #urrently ta"ing pla#e. &owever! setting up baselines probably needs to be done during

off'pea" hours sin#e it #an ta"e a while for larger () pro*e#ts.

ntegrate! "ash#oar!

:*ually interestin for test !anaers is the new interated dashboard that can be found on the

lefthand naviation bar where the 5#anae!ent6 !odule is' too. The s"ecial feature of the new

dashboard does not "ertain to the ra"hics' which are not "articularly a""ealin' but the 5CrossPro-ect6 functionality. t is now finally "ossible' when worin on a QC "ro-ect' to et an

overview of all of one$s onoin "ro-ects. These dashboards are freely confiurable and can be

desinated to be "ersonal favorites or "ublicly accessible. ,"ecial :3cel re"orts also enable

direct access to the database via ,Q9. The enerated re"orts can then be ra"hically "rocessed atthe sa!e ti!e by !eans of V&,cri"t.

Summary: The new dashboard module is ui#"ly #ustomi+ed and a#hieves its purpose in

ongoing pro*e#ts. %hat is missing is a sensible way of printing #ontent for a given pro*e#t

meeting! for e,ample.

Share! $i#raries

9ibraries' which are located in the 5#anae!ent6 !odule' can be reused and distributed with

Version 10. library re"resents a collection of entities in a QC "ro-ect' includin theirrelationshi"s to each other. ;hen dealin with !any si!ilar "ro-ects' it offers the advantae of

not havin to re"eatedly create entities. 9ibraries can be i!"orted fro! "ro-ect into "ro-ect &'

co!"ared aainst each other' or even synchronied. library also allows one to collect the sa!e

entities as in versionin.


3/38

Cross Pro%ect Customi&ation

nd now here$s the last bi chane+ Cross Pro-ect Custo!iation. #any oraniations have

defined standards' such as a unifor! defect status field or a standardied "riority scale' for theirsoftware *ualityrelated areas. However' these fields and lists were often chaned or even deleted

by QC "ro-ect ad!inistrators. ,o!e co!"anies have even one to reat lenths in usin theirown "rora!!in to define a te!"late that can be distributed to all QC "ro-ects' thereby

establishin a unifor! standard.

/or all those who want to s"are the!selves this ti!e and effort or do not wish to ee" an in

house "rora!!ed interface oin' there is a solution. ,ite d!inistrator now "rovides a way to

lin "ro-ects with a te!"late. f the te!"late is chaned' the delta can then be "assed on later atthe riht "oint in ti!e. This function has been awaited not only by test !anaers who lie to

have the sa!e confiuration in all their "ro-ects' but es"ecially also by the res"ective o"erators

of QC installations' na!ely the syste! ad!inistrators. Cross Pro-ect Custo!iation is also only

available in the Pre!ier :dition.

Summary: This #hange is awesome inally! testing organi+ations or Test a#tory managers are

able to implement a #ertain basi# standard in their pro*e#ts. n#e this is a##omplished! nothing

#an get in the way of standardi+ed! a#ross'the'board reporting.

s an 'pgra!e (orth t)

The new Version 10 is an absolute !ilestone not only for tests !anaers. t also !aes life easier

for testers' Test /actory !anaers' as well as QC syste! ad!inistrators. The new functions have been antici"ated for *uite so!e ti!e and have been i!"le!ented in the new "roduct in a well

conceived !anner.

However' there are still *uestions about how stable the new version is (!y tests ran flawlessly)

and how si!"le a !iration of a larer installation !iht be. f these *uestions receive favorableres"onses' one should absolutely consider switchin over to the new version>

,hareThis

,"here+ 7elated Content

You can follow any res"onses to this entry throuh the 7,, ?.0 feed. You can leave a res"onse'

or tracbac fro! your own site.

*0 +esponses

• 1

1o21roup+0@=0@=?008 at A+?B "!

http://void%280%29/http://www.sphere.com/search?q=sphereit:http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/feed/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#respondhttp://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/trackback/http://www.go2group.com/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-788http://void%280%29/http://www.sphere.com/search?q=sphereit:http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/feed/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#respondhttp://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/trackback/http://www.go2group.com/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-788


4/38

This is a reat review' ,ere>

;e$ve done our own review as it relates to re!ote P calls in HP QC 10 and are e3cited

about the results' s"ecifically with our own "roduct' the a# Pluin. ;e initially startedsu""ortin Test


5/38

1. Version Control.

7eardin 5F&ut what$s the use of havin eiht versions of a re*uire!ent' when one

doesn$t now which software release a version belons to%6

G;e reco!!end that you ca"ture baseline in every sinificant !ilestone of your release

(re*uire!ent sinoff' every sinificant develo"!ent "hase' "roduct release' etc).;hen you view the history "ae for each versioned entity (tests for e3a!"le) you can all

see the baselines related for this version. ;hen a""lyin !eaninful baseline na!es' youeasily associate versions to releases.

:3a!"le+

Version 1 I &aseline+ 7elease 1.0Version ?

Version @ I &aseline+ 7elease 1.1

Version B I &aseline+ 7elease ?

?. nterated


6/38

• L

Serge Baumberger +0A=?0=?008 at ?+A8 "!

Lynn:05/13/2009 at 7:21 pmSerge, what’s your assesment on the reporting features? oming from !"#2 an$ wi%% &e upgra$ing to 10, '’m (urious# "#2 is not the mostfrien$%y as far as reporting goes#)han*s,Lynn

The i!"rove!ent fro! re"ortin co!in fro! QC D.? to 10.0 is hue. :s"ecially the


7/38

• 8

5ar# 6obertson+0L=01=?008 at 8+A@ "!


8/38

O Canned re"orts J ra"hs are now available for the &PT !odule

O Create collections of &PT co!"onents in a fi3ed se*uence that "erfor! a s"ecific tas

(flows)O Can convert !anual tests to &PT co!"onents

O Can add user defined fields and worflow code to &PT !odule

O Can co"y co!"onents and &PT tests fro! one "ro-ect to another O Pro!"ts for "ara!eter "ro!otion when &PT co!"onent is assined to test

O #ore 54sed &y6 de"endency views (resources and a""lication area)

O


9/38

vi 4avas+0L=1E=?008 at E+@0 "!

would lie to co!!ent to ,halini$s "ost'

5Hi vi=,ere'Test #anae!ent is already available in HP QC8.?.

Mow !y client wants to u"rade the HP QC8.? to HP QC10. ny i!"acts due to

!iration of the data to QC10%6

don$t antici"ate any noticable i!"act of data !iration to QC 10.0. s there any s"ecificas"ect you are concerned about%

Thans'

vi

• 1A

mit 4umar +0L=?@=?008 at 8+AL a!

Hi vi'

found version control a bit confusin

9ets say a "ro-ect is under version control' now create a new folder in Test Plan tab

callin it 5Mew 7e*6' now when add a new folder 5test cases6 and test case 5test one6

under this folder it is checed out with version 1' now the !o!ent chec in its versionchanes to ?.


10/38

we are u"radin fro! QC8.? to QC10 and was wonderin if you have had any issues

with the installFany ti"s or trics or holes to avoid%

we had issues with u"radin to 8.? so we want to be a little !ore "roactive for the 4 to10.

if there is a se"arate lin for this "lease direct !e.

thans'

a!es

• 1E

1erman 1ar#ia+0D=0D=?008 at 1?+AA a!

Hi all'

had the chance to assist a webinar of this latest version. have to say that is aweso!e.

&esides version control' baselines' interated dashboards' co!!on shared libraries' you

have to !ention that now HP thins not only in very bi enter"rises but also in s!allco!"anies (let$s say ?0) that doesn$t need to stablish a very hue toolR see this "ositive

because of QC costs. can recall that now there are available about @ versions (Co!e on

QC uys' hel" !e out on e3act na!es).

7eards'

1erman.

• 1D

6am+01=1?=?010 at 1+?E "!

Hi'

;hen tried to interate !y QTP 8.A scri"ts to QC 10.0 and while tryin to run the

scri"ts i! ettin error sayin 5The QuicTest 7e!ote ent is either not installed on thehost you s"ecified'or a version earlier than 10.00 is installed.To run this test'Quictest

Professional 10.00 !ust be installed on the host co!"uter.6. Please let !e now what is

the solution as $! not findin QTP 10.00 either.

• 18

http://www.linkedin.com/gcgmhttp://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-868http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-868http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-902http://www.linkedin.com/gcgmhttp://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-868http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-902


11/38

)hris )apasso+01=?A=?010 at D+@B "!

To ll'

heard there was so!e issue runnin 8.A QTP scri"ts in the 10.0 QC. Has anyone tried or encounter such a "roble!%

Thans'

Chris

• ?0

Thomas attner +0?=10=?010 at @+0@ "!

Thans a lot' this is really what a test !anaer needs to now at first.

tried to use your Tweet&utton' which atte!"ts to send a retweet' but it said the url is

wron. +=

• ?1

Thorsten+0?=?@=?010 at 10+?? a!

Hi all'

is electronic sinature now available as it is re*uired in the #P related "har!a

industrie%

&7=Thorsten

• ??

8an Taylor +0@=0?=?010 at 11+A1 "!

have not used *c and can do the funy chicen. with that said how does one enter in a

blo in *c%

• ?@

http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-904http://lattner.info/consultinghttp://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-906http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-911http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-911http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-914http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-914http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-904http://lattner.info/consultinghttp://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-906http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-911http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-914


12/38

lga+0@=10=?010 at D+00 "!

Hi ll'


13/38

Thans

Pravat

• ?L

:ithin 4uria"ose+0A=11=?010 at L+A8 a!

$ve -ust been investiatin and "layin on the version 10 starter edition fro! HP. /ro!

what have seen' it runs sea!lesly and the installation=custo!iation is also "retty

straiht forward. This version has actually taen off a "ile of "endin wors fro! QCad!in section and caters widely to the testin co!!unity for all facets.

Your article is e*ually briliant' ,ere. Thans for "uttin this u".

7eards'

Mithin

• ?E

Stephen+0L=?8=?010 at 8+01 "!

Here is a *uestion on verson control. How do et rid of obsolete versions% f every ti!e

a test is !odified a new version is created' you are oin to very *uicly create a lot of

versions. Mow now that there is no delta !anae!ent of versions' every chane results

in a co!"lete co"y of the test as the new version.

,o how !uch s"ace is oni to be consu!!ed for this%

How' when reach version ?0 of a test do et rid of versions 110%

will not advise usin version control until HP can "ublish a solution for that.

• ?D

6agu+0D=@0=?010 at E+AE "!

How to e3ecute the "revious version of a test case in the T:,T 9&%

• ?8

1eorges auture+08=?D=?010 at E+@8 "!

http://www.nithinkuriakose.com/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-937http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-962http://google.com/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-989http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-994http://www.nithinkuriakose.com/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-937http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-962http://google.com/http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-989http://www.beteoblog.com/2009/03/02/hp-quality-center-10-from-a-test-manager%E2%80%99s-perspective/#comment-994


14/38

have a *uestion on #ar /ord$s "ost fro! 0L=0?=?008 at 10+?? "! about 5"arallel

develo"!ent6.

ust to reca"F Version 1.1' which is bein u"dated for the version 1.?.

Version 1.1.1' which was i!"orted fro! 1.1 and !odified for the "aralleldevelo"!ent=testin.

You$re finished with version 1.1.1 tests and tae a baseline You retrofit your chanes bac into version 1.? tests.

Here is !y *uestionF

1. ;hat do you do with the actual tests in Test Plan that were i!"orted (i.e. 1.1.1)% f youdelete the!' all run history is lost.

• @0

5i"e+10=0L=?010 at E+?? "!

Here$s a feature would lieF.tell !e which develo"er is the !ost "roductive and least

"roductive (i.e. who fi3ed the !ost bus' the fastest etc.). QC has this info in the


15/38

).: e


16/38

testing an$ regression testingH an$ &usiness pro(ess $esigna%i$ation#e%ease 9#0 of 4er(ury !ua%ity enter in(%u$es a wi$e rangeof enhan(ements that improe the fun(tiona%ity an$ usa&i%ityof the so%ution# )hese enhan(ements in(%u$e:'ntegration for etter )estingD Inhan(e$ e


17/38

Quality Center 10 Patch Level 7

Tuesday, November 24th, 2009

HP has released a new "atch for Quality Center 10.0. Patch E is now downloadable fro! their

su""ort website here (re*uires loin).

This "atch fi3es one security issue. lso' it now "rovides official su""ort for nternet :3"lorer D.

Posted in Quality Center I 1 Co!!ent

ulnerability in Quality Center ! "art 2

Thursday, #ay 14th, 2009

/ollowin a Vulnerability that was discovered "reviously' HP has "atched the issue on Quality

Center 8.?. However' Quality Center 10.0 is still affected by this issue even if you a""ly the

"atch level ?.

;e investiated further and found out that the way they "atched the security issue is not really

clever. 9et !e e3"lain.

The issue is that the worflow scri"ts are co"ied onto your local drive and are bein used by

Quality Center in order to e3ecute the worflow event functions whenever they occur. The issue

was that those scri"t could be a!ended !anually allowin a user to chane the behaviour of the

"ro-ect (and throuh so!e clever P calls ain "riviledes).

The "atch issued by HP solves the issue by doin the followin chec+

5f the file sie has chaned' a new co"y is downloaded fro! the server. ;hen overwrittin the

file' if the access is not "er!itted' abort the connection to the "ro-ect and re"ort an error.6

This solution has a !a-or drawbac+ if the file sie does not chane' the issue still e3ists.

t !eans that all the versions of Quality Center are still vulnerable to such an attac.

s far as we are aware' HP has not "rovided any "atch for it.

/ind attached a Visual ,tudio ?00A "ro-ect attributechane ("assword is Ue3"osit$) which

contains the source code and the co!"iled e3ecutable to de!onstrate the issue.

n order to use this e3a!"le tool' o"en a V&, file fro! the cache folder' a!end it ensurin you

don$t e3ceed or di!inish the sie of the oriinal file then save it.

http://blogs.exposit.co.uk/2009/11/24/quality-center-10-patch-level-7/http://support.openview.hp.com/selfsolve/document/KM792746http://support.openview.hp.com/selfsolve/document/KM792746http://blogs.exposit.co.uk/category/qualitycenter/http://blogs.exposit.co.uk/2009/11/24/quality-center-10-patch-level-7/#commentshttp://blogs.exposit.co.uk/2009/05/14/vulnerability-in-quality-center-part-2/http://blogs.exposit.co.uk/wp-content/uploads/2009/05/attributechange.ziphttp://blogs.exposit.co.uk/wp-content/uploads/2009/05/attributechange.ziphttp://blogs.exposit.co.uk/2009/11/24/quality-center-10-patch-level-7/http://support.openview.hp.com/selfsolve/document/KM792746http://blogs.exposit.co.uk/category/qualitycenter/http://blogs.exposit.co.uk/2009/11/24/quality-center-10-patch-level-7/#commentshttp://blogs.exposit.co.uk/2009/05/14/vulnerability-in-quality-center-part-2/http://blogs.exposit.co.uk/wp-content/uploads/2009/05/attributechange.zip


18/38

Please note that this Ue3tended$ vulnerability wors only if the worflow file contains so!e

V&,cri"t state!ents. file of sie 0 cannot be chaned and is conse*uently "rotected by the

"atch introduced in Quality Center 8.?.

,!!ition -. /ov -00

Quality Center "atch level B now fi3es this security issue. t is conse*uently advised that

custo!ers u"rade to this release.

Posted in Quality Center I Mo Co!!ents

ulnerability in Quality Center

#onday, $ebruary 2%rd, 2009

/ind below the details of a vulnerability in the HP Quality Center "roduct (for!ely #ercury

Quality Center). t is referenced as CV:?00EA?D8 (V4D8DDLA).

To solve this issue' it is advised to u"rade to version 8.? of Quality Center and a""ly the latest

"atch.

Mote that Quality Center 10.0 is vulnerable to this issue.

Introduction

Quality Center (QC) is a webbased Q testin and !anae!ent tool. t is a "roduct fro! HP

when they too over #ercury nteractive last year.

The frontend of the a""lication is co!"osed of C2# co!"onents that "lu into the web

browser. Quality Center "rovides a custo!iation ca"ability (called worflow) which allow the

ad!inistrator to !odify the default behavior. This worflow is driven by V&,cri"t functions that

are called whenever a "articular event occurs on the client frontend.

n order to o"ti!ie the interaction s"eed of the a""lication' a cache folder is created on the

client !achine. &y default' this folder is located at Wt!"W=T


19/38

• #anual Test -.ecution (manrun)tds*

• Test /euirements module (re)tds*

• Test Lab module (testlab)tds*

• Test Plan module (test"lan)tds*

The custo!iation feature of Quality Center is often used for+

• Controllin& "assord com"liance (no blan "assord, more than 3 letters,etc)*

• Chained lists (hen a value is selected in a eld, another eld &ets u"datedith a list relevant to that value*

• 5utomatic u"dates to some QC com"onents (Test, Test 6et, +eect obects,hidden elds*

• 8iddin& inormation de"endin& on the users &rou" (used hen a "roect isshared ith di:erent vendors*

• ;thers

The worflow is often driven by usin the 2T (2"en Test rchitecture)' the Quality Center

P. This P allows the !ani"ulation of any QC ob-ect (e.. ,ub-ect folder' Test=


20/38

• Quality Center 10)0 Patch 1 or belo (Tested*! 6everity 8i&h> user has hi&her ca"ability than dened by their "role

• Quality Center 9)2 (?nconrmed*! 6everity 8i&h> user has hi&her ca"ability than dened by their "role<! Patch 14 contains the ., earlier "atches is unnon

• Quality Center 9)0 Patch @ 17= 6everity 8i&hly Critical> a user (even ith a ieer "role* can amend thedata renderin& it useless) 8e ill also have hi&her ca"ability than dened bytheir "role

• Quality Center 3)2 ' 3)0 (?nconrmed*! 6everity 8i&hly Critical> a user (even ith a ieer "role* can amend thedata renderin& it useless) 8e ill also have hi&her ca"ability than dened bytheir "role

•

Test+irector (5ny ersion*! Test+irector is the ormer name o Quality Center! Potentially the same issues as or Quality Center 9)0 Patch @ 17

Please note that HP has released a "atch that fi3es this issue' "lease contact HP su""ort for

further details.

Example

This really short e3a!"le shows how a user can si!"ly chane the content of all the defects to

so!e !eaninless values+

Please' do not try the followin e3a!"le as it will "er!anently da!ae you Quality Center data.

Su& .efe(tsug4oe)o

Set o&Bomman$ ).onne(tion#omman$

o&Bomman$#omman$)et C.)I CK SI) KSC44MNCse%essN,

K.IS')'6ONCse%essN

o&Bomman$#Ie(ute

In$ Su&

Notes

You can find your "atch level by loin into a Quality Center "ro-ect' selectin the !enu o"tion

Hel" bout HP Quality Center ,oftwareF and clicin the dditional nfor!ation button.

Patches for Quality Center are available at htt"+==su""ort.o"enview.h".co!=selfsolve="atches

(loin re*uired).

Posted in Quality Center I D Co!!ents

http://support.openview.hp.com/selfsolve/patcheshttp://blogs.exposit.co.uk/category/qualitycenter/http://blogs.exposit.co.uk/2009/02/23/vulnerability-in-quality-center/#commentshttp://support.openview.hp.com/selfsolve/patcheshttp://blogs.exposit.co.uk/category/qualitycenter/http://blogs.exposit.co.uk/2009/02/23/vulnerability-in-quality-center/#comments


21/38

QC Proect #ana&ement version 2)00

Thursday, November 1Ath, 2007

new version of QC Pro-ect #anae!ent has been released today.

The e3istin features have been i!"roved es"ecially reardin "erfor!ance. lso' you will find

so!e new handy functionalities such as+

• Email preview> no hen "re"arin& an email or mailin& the Quality Centerusers, you can "revie and send a test email<

• Export> you can no e."ort the list o Quality Center users to an -.cels"readsheet<

• Import> instead o manually addin& ne users, you can use an -.cels"readsheet and im"ort the users automatically<

• Groups> to avoid havin& to use the Quality Center customiBation atercreatin& users, you can no assi&n users to &rou"s directly rom the QCProect #ana&ement a""lication<

• Locks removal> i a resource &ets loced, you can no remove it ithout thehel" o the 6ite 5dministrator)

Mot yet a user' download a 10 days evaluation license fro! here.

Please note that this new release re"laces the QC 4ser #anae!ent v1.3 a""lication.


Quality Center security issue

Thursday, ;ctober 2Ath, 2007

severe security issue in Quality Center has been discovered by :3"osit 9i!ited. This issue

can be used to corru"t Quality Center data or ain "ro-ect ad!inistrator "rivilees.

The "roble! has been discovered in version 8.0 of Quality Center and it affects all the releases

u" to "ublic "atch 1L. The issue also e3ists in version 8.? u" to latest "ublic "atch @. ;e haven$t

tested earlier releases of the "roduct but we stronly believe that they are affected by the sa!e

issue.

Custo!ers usin Quality Center 8.0 or below are advised to u"rade to at least Quality Center

8.0 "atch 1L in order to !ini!ie the i!"act of this issue. Patch 1L and "atch 1D li!it the effect

of the defect.

http://blogs.exposit.co.uk/2007/11/15/qc-project-management-version-200/http://www.exposit.co.uk/projectManagement.htmlhttp://blogs.exposit.co.uk/category/qualitycenter/http://blogs.exposit.co.uk/2007/11/15/qc-project-management-version-200/#commentshttp://blogs.exposit.co.uk/2007/10/25/quality-center-security-issue/http://www.exposit.co.uk/http://blogs.exposit.co.uk/2007/11/15/qc-project-management-version-200/http://www.exposit.co.uk/projectManagement.htmlhttp://blogs.exposit.co.uk/category/qualitycenter/http://blogs.exposit.co.uk/2007/11/15/qc-project-management-version-200/#commentshttp://blogs.exposit.co.uk/2007/10/25/quality-center-security-issue/http://www.exposit.co.uk/


22/38

Custo!ers usin Quality Center 8.? are also at ris of data corru"tion and should wait for a "atch

fro! HP Custo!er ,u""ort.

The issue has been re"orted to security instances under reference CV:?00EA?D8 and

vulnerability disclosure is bein coordinated with the vendor (HP).

;e will ee" you u"dated as soon as a "atch beco!es available.


;T5, an 5P or e.tendin& Quality Center

#onday, 5"ril 2%rd, 2007

9ast wee' "rovided consultancy reardin QuicTest Professional and the ;eb,ervices addin

(!ore about this addin ne3t wee>). t so!e "oint' the custo!er ca!e to !e and ased for

advice reardin access to the Quality Center (QC) database. ;hat was interestin about this

*uery is that discovered that the custo!er was not aware about the 2"en Test rchitecture

(2T).

,o' today' want to ive you insiht about what is the 2T and ive you a short e3a!"le

showin what you can achieve with it.

/irst of all' the 2T is+

1) 5n inte&ration 5P that allos the inte&ration o any third="arty tool ithin

Quality Center<

2) 5 mani"ulation 5P that "ermits the interaction ith the Quality Centera""lication ithout havin& to use the D? rontend)

;e will not tal about the interation P so if you are interested in learnin !ore' lo on your

QC server then select Hel"


23/38

• Eeb server> the QC communication beteen the client and the server are"erormed usin& the 8TTP "rotocol<

• 5""lication server> by deault, the FG;66 a""lication server is installed ithQuality Center) the QC a""lication is built usin& Fava and reuires a F2--a""lication server) The F2-- "latorm is "articularly ell desi&ned orclient'server a""lications over the nternet

• Quality Center a""lication> develo"ed to be e.ecuted on a F2-- a""licationserver<

• +atabase 6erver> the database that holds the Quality Center inormation)

Quality Center API

The !ani"ulation P is called Quality Center P and allows the interaction with Quality

Center. t also allows you to interact with the database throuh the P !ain the interactions

!ore secure. lso' it avoids your


24/38

:ach "ro-ect stored in a Quality Center server is identified by its "air Q).pi6%e"0#).onne(tionR@

!onne(tion#'nitonne(tionI Qhttp:///QI(e%#pp%i(ationR@ P 6pen I(e%

I(e%#8or*oo*s#$$>@ P $$ a new wor*&oo*


25/38

P Ket the first wor*sheet#

Set Sheet I(e%#(tieSheet

.im ug, ow

ow 1

P 'terate through a%% the $efe(ts#;or Ia(h ug 'n ugList

P Sae a spe(ifie$ set of fie%$s#

Sheet#e%%s>ow, 1@#Aa%ue ug#;ie%$>QKCK'.R@

Sheet#e%%s>ow, 2@#Aa%ue ug#Summary

Sheet#e%%s>ow, 3@#Aa%ue ug#.ete(te$y

Sheet#e%%s>ow, =@#Aa%ue ug#riority

Sheet#e%%s>ow, 5@#Aa%ue ug#Status

Sheet#e%%s>ow, T@#Aa%ue ug#ssigne$)o

ow ow 1

Oet

P Sae the new%y (reate$ wor*&oo* an$ (%ose I(e%#

I(e%#(tie8or*&oo*#Saes>Q(:U!ua%ityenter.emo.I;I)S#%sR@

I(e%#!uit

Summary

Today' you have seen how to use the QC P to "erfor! a si!"le tas such as retrievin a list of

defects. &ear in !ind that you can do !uch !ore than that.

/ind here a !ore co!"lete e3a!"le of the scri"t described in this article.

Posted in nteration' Quality Center I 8? Co!!ents

Passord checin&

Thursday, 5"ril Ath, 2007

This wee' will !ae a short article reardin how to ensure the user has set a "assword lon

enouh.

s you now' there is no "assword checin in Quality Center' and even a blan "assword is still

considered as a valid "assword. f you have already installed the Quality Center


26/38

,o' now' the *uestion is UHow to chec a user$s "assword%$ ood *uestion and will answer that

in the ne3t "arara"hs.

f you re!e!ber fro! last wee' the worflow "rovides a set of event functions where you can

control the behavior of Quality Center. The one that interest us today is roBe(tanLogin.

ndeed' this function has the followin "rototy"e+

;un(tion roBe(tanLogin>.omainOame, roBe(tOame, CserOame@

where+

• +omainName> Name o the domain the user is tryin& to lo& in

• ProectName> Name o the "roect the user is tryin& to lo& in

• ?serName> Name o the user ho is tryin& to lo& in

• and more im"ortantly, this unction returns a boolean value that indicates iyou acce"t or not this user) $alse, or stay aay rom my "roect

Mow' we can deny access to a user but we still cannot chec his "assword. &ut this can be

*uicly resolved. There is an ob-ect called ).onne(tion (nearly the sa!e as in the 2T

P) that has an interestin "ro"erty called asswor$.

f you try to do the followin in roBe(tanLogin then you will see your "assword+

4sgo ).onne(tion#asswor$

;e now have all the buildin blocs for solvin the issue+


P ;irst he(* the passwor$#

'f ).onne(tion#asswor$ QR )hen

4sgo QMour user i$ $oes not hae any passwor$ $efine$#

%ease (onta(t the proBe(t a$ministrator#R, 0, QIrrorR

roBe(tanLogin ;a%se

I%se

roBe(tanLogin )rue

In$ 'f

In$ ;un(tion


27/38

2N' not too bad but !aybe we can o a little bit further. Mow' we can even enforce a lenth of

!ini!u! D characters and force the user to chane his or her "assword if the sie is incorrect.

The full scri"t is below+

;un(tion roBe(tanLogin>.omainOame, roBe(tOame, CserOame@ P ;irst he(* the passwor$#

'f ).onne(tion#asswor$ QR )hen

4sgo QMour user i$ $oes not hae any passwor$ $efine$#

%ease (onta(t the proBe(t a$ministrator#R, 0, QIrrorR

roBe(tanLogin ;a%se

Iit ;un(tion

I%se'f Len>).onne(tion#asswor$@ " )hen

4sgo QMour passwor$ %ength is too short# Mou hae to (hange

your passwor$ now an$ %og in again#R, 0, QIrrorR

roBe(tasswor$hange CserOame

roBe(tanLogin ;a%se

Iit ;un(tion

In$ 'f

roBe(tanLogin )rue

In$ ;un(tion

Su& roBe(tasswor$hange>CserOame@

6%$asswor$ 'nputo>Q)ype in your o%$ passwor$:R, Qasswor$

hangeR@

Se%e(t ase 6%$asswor$

ase QR

4sgo QMou wi%% not &e a%%owe$ to %og into this proBe(t#R

Iit Su&

In$ Se%e(t

Oewasswor$1 'nputo>Q)ype a new passwor$ with " or more

(hara(ters:R, Qasswor$ hangeR@

Se%e(t ase Oewasswor$1

ase QR

4sgo QMou wi%% not &e a%%owe$ to %og into this proBe(t#R

Iit Su&

ase I%se

'f Len>Oewasswor$1@ " )hen

4sgo QMour passwor$ is too short, p%ease type a %onger

passwor$#R, 0, QIrrorR


28/38

roBe(tasswor$hange CserOame

Iit Su&

In$ 'f

In$ Se%e(t

Oewasswor$2 'nputo>Qetype your new passwor$:R, Qasswor$hangeR@

'f Oewasswor$1 Oewasswor$2 )hen

6n Irror esume Oet

).onne(tion#hangeasswor$ 6%$asswor$, Oewasswor$1

'f Irr#Oum&er - 0 )hen

4sgo QMour passwor$ was not (hange$:R V &OewLine V

Irr#.es(ription, 0, QIrrorR

I%se

4sgo QMour passwor$ has &een su((essfu%%y (hange$R, 0,

Q'nformationR

In$ 'f

6n Irror Ko)o 0

I%se

4sgo Qasswor$ is ina%i$#R, 0, QIrrorR

In$ 'f

In$ Su&

That$s it for today. 2ne last re!ar+ anythin you define in the worflow only a""lies to 1

"ro-ect. ,o' if you want to i!"ose this rule to all your "ro-ects' you have to co"y this code in all

the worflows.

Posted in Quality Center I A Co!!ents

+enin& user "ermissions ("art 2 o 2*

Eednesday, #arch 23th, 2007

This is the second and last "art of this ite!.

Set 'p Pro%ect 'sers

This custo!iation !odule defines the list of users who are allowed to lo into the "ro-ect. :ach

user can be "art of 1 or !ore rou". Conse*uently' the user inherits the "er!issions fro! the

rou"s he or she is "art of. !aine that a rou" has access only to


29/38

&y default' when a user is created' it belons to the Viewer rou". This rou" has no

!odification "er!ission but can see everythin. f you want to restrict visibility access to so!e

users' then it is advisable to disable the Viewer rou". This will avoid havin users "art of the

Viewer rou".

To disable this rou"' you need to add a chun of scri"t in the worflow+


'f Cser#'s'nKroup>QAiewerR@ )hen

4sgo QMour se(urity settings are in(orre(t%y $efine$,

a((ess to the proBe(t is for&i$$en#R V &OewLine V

Q%ease, (onta(t your proBe(t a$ministratorWR

roBe(tanLogin ;a%se

I%se

roBe(tanLogin )rue

In$ 'f

In$ ;un(tion

Customi&e Mo!ule ,ccess

n this "art' you can se"arate rou"s which have access to the


30/38

n the ,cri"t :ditor' the different events that !iht occur are s"litted accordin to the Quality

Center !odule they relate which ives L sections+

• Common scri"t> a e events that &o nohere else

• /euirements module scri"t

• Test Plan module scri"t

• Test Lab module scri"t

• #anual /unner scri"t

• +eects module scri"t

/or each section (e3ce"t co!!on scri"t)' you will find si!ilarities. ;henever you see

#oduleMa!e' you will need to re"lace it with the na!e of the !odule (


31/38

• @#oduleNameHI@;bectHI5terPost> /aised ater a ne @;bectH has been"osted

There are other events which are s"ecific to each !odule.

,o!e events e3"ect a boolean return value that deter!ines if the chane is acce"ted or not. /orinstance' the QKS))CSR@#Aa%ue

'f 6%$Aa%ue QOewR n$ OewAa%ue Q6penR )hen

.efe(tsug;ie%$anhange )rue I%se'f 6%$Aa%ue Q%ose$R n$ OewAa%ue Q6penR )hen

.efe(tsug;ie%$anhange )rue

I%se

P ny other transition is $enie$#

.efe(tsug;ie%$anhange ;a%se

In$ 'f

I%se

.efe(tsug;ie%$anhange )rue

In$ 'f

In$ ;un(tion

Posted in Quality Center I @ Co!!ents

+enin& user "ermissions ("art 1 o 2*

Eednesday, #arch 21st, 2007

This article describes the "er!ission$s functionalities that e3ists in Quality Center.

The first thin you have to be aware when custo!iin a Quality Center "ro-ect is that

"er!ission settins are not defined in a sinle location but are s"read in different "arts of the

custo!iation sections. You !iht wonder why such a decision has been !ade% :ven thouh' the

location of these settins have so!e 5reasonable6 sense' believe this co!"le3ifies the tass of

securin access to the "ro-ect data.

nyway' this is how it is so let$s start e3a!inin these settins.

http://blogs.exposit.co.uk/category/qualitycenter/http://blogs.exposit.co.uk/2007/03/28/defining-user-permissions-part-2-of-2/#commentshttp://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/http://blogs.exposit.co.uk/category/qualitycenter/http://blogs.exposit.co.uk/2007/03/28/defining-user-permissions-part-2-of-2/#commentshttp://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/


32/38

ll the security settins are defined in the Custo!iation (accessible throuh Tools

Custo!ieF).

The different sections where you can affect user$s "er!issions are+

• 6et ?" Proect ?sers

• 6et ?" Drou"s

• CustomiBe #odule 5ccess

• 6et ?" EorKo

• 6cri"t Denerator ! 5dd +eect $ield CustomiBation

• 6cri"t Denerator ! +eect +etails $ield CustomiBation

• 6cri"t -ditor

9et$s first start with settin u" the rou".

Set 'p 4roups

2n a fresh "ro-ect' there are always A default rou"s that are already defined+

• +evelo"er

• Proect #ana&er

• Q5Tester

• T+5dmin

• ieer

These rou"s cannot be custo!ied and cannot be re!oved fro! the "ro-ect. n order to tailor

the rou" "er!issions to your "ro-ect' you need to create new rou"s. ;ith these new rou"s'

you will be able to custo!ie their settins. ;hen creatin a new rou"' you need to indicate

fro! which rou" you want to du"licate the initial settins. This can be useful es"ecially if your

new rou" has si!ilar settins fro! another rou".

2nce created' you can a!end its settins by selectin Chane "er!issions. This will brin a new

window divided into tabs for each Quality Center !odule+

• /euirements


33/38

• Gusiness Com"onents (o"tional*

• Test Plan

• Test Lab

• +eects

• 5dministration (customiBation module "ermissions*

/or each !odule you will find si!ilar settins where you can allow (if checed) or disable

(uncheced) "er!issions for different as"ects of the !odule.

There are usually @ actions dd=#odify=


34/38

,econdly' you can also hide fields fro! the user. This "revents a user fro! seein values he

shouldn$t.

to be continuedF

+esponses to 5"efining user permissions 6part 1 of -78

1. praveen ,ays+/ebruary 1st' ?00D at 8+?A a!

Very Very :3cellent worF learned !uch with your blo. 2ne *uestion s there any

"ossibility to ettin the ,#, to the !obile when any *t" scri"t fails while runnin fro!

the QCFThans in advance

?. Sensba#htal ,ays+#arch 1Eth' ?00D at 11+@@ a!

ust wanted to say Hello to everyone.

#uch to read and learn here' $! sure will en-oy >

@. 4ishore ,ays+,e"te!ber 8th' ?00D at 1+0? "!

&lo has very e3cellent infoF

while oin throuh the blo i have *uestion test "lan = Test lab'

i have ? "ro-ects in *c say "ro- and Pro- &.

Pro- has so!e test "lans and test setsF if "ro- & wants use those test "lans =test sets in "ro- . how is it "ossible%

is there any way i can lin the test "lans = test sets to "ro- & and e3ecute the! in "ro- &

test lab.%

7eards'ishore.

B. Sabareesh ,ays+


35/38

?. ,o!e Codin on the 4ser Per!issions and Pro-ects

@. QC


36/38

f you !ade a !istae in the worflow that "revents you fro! accessin the

custo!iation or loin into the "ro-ect' the solution is to !odify the file stored on the

server.

To do this' connect to the Quality Center server (usually re!otely)' then find your Quality

Center re"ository folder. default installation would "lace it in QCinstallationZre"ository and naviate to the relevant folder. n e3a!"le would be+

C+ZProra! /ilesZ#ercuryZQuality CenterZre"ositoryZ*cZ


37/38

s there any way to download the re"ort fro! the Test 9ab.

Can you uide !e if it is there.

Thans in advance..

11. S#hott ,ays+/ebruary 1Dth' ?010 at 8+@@ a!

Hi'

$ve a new *uestion% How to create folder testPlan% Can u hel" !e%

Thans.

&est 7eards'

,chott

1?. 6a*u ,ays+#arch 1Eth' ?010 at ?+0L "!

Hi

Very e3cellent infor!ation need the infor!ation' to i!"ort defects fro! Quality Center to :3cel usin !acros.

Meed code ' for filterin defects based on 5nitiave6 usin !acros

Thans

1@. eslie ,ays+#arch @1st' ?010 at A+A@ "!

lie all your ite!s. was looin to see if you had any code for when you e3"ort e3cel

docu!ent' that you could e3"ort a dro" !enu with it%

1B. ;ete ,ays+"ril 1Ath' ?010 at L+01 "!

Hi '

tired your "assword scri"t in the co!!on area of the worflow and it didn$t wor for

!e when try to loin without a "assword' it still let loin into QC.

Thans

1A. :agara*u ,ays+#ay 11th' ?010 at D+11 a!

Hi

http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-11051http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-11785http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-12243http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-12243http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-12720http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-13384http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-13384http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-11051http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-11785http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-12243http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-12720http://blogs.exposit.co.uk/2007/03/21/defining-user-permissions-12/#comment-13384


38/38

want to et each test ste" status under Test 9ab K /older K Test ,et K Test ,te"s

i.e' i want to i!"ort all testste"s fro! Test 9ab' with their status usin #acros code

e.' if a testset consits of 10 ste"s and with different status(norun' inco!"lete' "ass' failed)' ;ant to et the desc' ste"no' e3"ected ' actual' staus of all the ten ste"s

Please any one of you "rovide the #acros code to et the re*uired fields data

1L. 5ahesh ,ays+#ay ?Bth' ?010 at A+AA a!

Hi'

s there any way to find the sie occu"ied by a folder in the "ro-ect re"ository in Test9ab%

7eards'

#ahesh.

1E.

hp quality center 10 from a test manager

Documents