|
Agile and scrum I understand, but why would Kanban be useless?
It's basically an organized wall of post-it notes.
Toyota developed it to keep track on stock, but it should probably be considered a workflow management system.
The good part, and this is where most systems fail, is that anyone can understand it.
|
|
|
|
|
Jörgen Andersson wrote: The good part, and this is where most systems fail, is that anyone can understand it.
I certainly like that part!
Will Rogers never met me.
|
|
|
|
|
Thanks... This OpenProject looks interesting, it supports Gantt Chart in the free version.
I will give it a try - I am curious how it compares to JIRA Software ...
|
|
|
|
|
I've used MS Project and some others. I got it / them all to do what I wanted (plant scheduling; software; capital budgeting; pipelines). They all do it a bit different; you improvise; a resource is a resource. There are legitimate sources of discounted licenses for MS Project; and it's a business expense.
If you program, it also means you can access its object model (MS Project); export / import Excel, Access; etc.
"Before entering on an understanding, I have meditated for a long time, and have foreseen what might happen. It is not genius which reveals to me suddenly, secretly, what I have to say or to do in a circumstance unexpected by other people; it is reflection, it is meditation." - Napoleon I
|
|
|
|
|
I gave up trying to use it around 2008 - more time spent maintaining it than doing actual work. But for a top level tool, it just might work, especially if MS has made any actual effort to make it useful. Thanks for the suggestion!
Will Rogers never met me.
|
|
|
|
|
|
Cool product, raddevus, but it's really directed at software/CRM type stuff. I don't see a way to manage tasks like, allocate budget and track RFPs for 200 MVA solar panel acquisition, order and install N x 100MVAh LiPFe battery banks and charge controllers, Develop and submit Environmental Impact Statements and schedule Cultural and Archeological surveys, design/build 80 miles of 230kV transmission lines, conduct System Failure Modes and Effects Analysis (FMEA) and provide 20 year spares stock to support future maintenance, and a few other small tasks. Once upon a time (1988), a company called Harvard Graphics made a product called Project Manager 3.0, IIRC, that could do all of this. No one since has been able to come close, so far as I know. If you'd like to tackle the project to replicate those capabilities on modern platforms, I think I can guarantee you a comfy retirement. No one else is doing it, and I'm not a very good programmer. Go for it!
Will Rogers never met me.
|
|
|
|
|
Things we looked at for minimum spend - no budget allocated to us for this sort of thing so "minium" meant "free"
Trello (premium is not free)
Monday.com (not free)
Microsoft Planner
Miro (big whiteboard with Addons, really only works for one project)
Mural (free version may not be secure, really only works for one project)
Confluence (only free for up to 10 people)
We opted for MS Planner in the end
|
|
|
|
|
Thanks for those suggestions! I've looked at a couple of them, but not MS Planner. I'll check it out!
Will Rogers never met me.
|
|
|
|
|
I haven't used much yet, but what I could see from MindManager was not that bad. Around 400$ to buy the pro version... and a 30 days trial to test before... maybe worth to check?
M.D.V. 
If something has a solution... Why do we have to worry about?. If it has no solution... For what reason do we have to worry about?
Help me to understand what I'm saying, and I'll explain it better to you
Rating helpful answers is nice, but saying thanks can be even nicer.
|
|
|
|
|
I haven't heard of that one; thanks! I'll check it out!
Will Rogers never met me.
|
|
|
|
|
|
Some nice sounds indeed ...  but, most of the time the podcast is talking.
This inspires me to search for more, thanks ... 
|
|
|
|
|
#Worldle #433 1/6 (100%)
🟩🟩🟩🟩🟩🎉
https://worldle.teuteuf.fr
easy one
"A little time, a little trouble, your better day"
Badfinger
|
|
|
|
|
Hi all,
I have a question based on the below hypothetical scenario.
I have an Azure based system comprised of:
Web app (Blazor)
Multiple Azure functions
A set of C# library NuGets written to support shared code
Azure SQL
Internal-only APIM
External APIM (for mobile apps and third Party subscriptions)
Azure Front Door
Various Azure services, like Key Vault, Azure Storage, etc.
ADO DevOps (incl. ADO Git repos, not GitHub, pipelines, artifacts, testing, etc.)
ADO Boards for case management
Developers use VS 2022 with access
Secure information that apps use like keys, usernames/passwords, etc. are stored in a key vault.
Now, for the question. What process do you recommend for the apps (not directly publicly accessible other than port 80 HTTP for the web UI) to access the key vault without leaving any keys in config files that could be compromised?
I know what I think, but if I knew everything 100% correctly, I probably wouldn’t be here. 🙂
Thanks in advance.
|
|
|
|
|
In a domain? Doesn't Azure use SQL Server?
We have some data encrypted in SQL Server, with keys and certificates, etc.
Only a user authenticated on the domain with access to the SQL Server database with access to the keys and certificates can decrypt the encrypted values.
|
|
|
|
|
That is certainly a common practice.
Where is the username and password stored for the user you mentioned?
If the app uses that type of user login, doesn’t it have to get the username and password from somewhere outside the DB?
|
|
|
|
|
The domain performs authentication for the user.
The user provides the username and password to the domain.
|
|
|
|
|
And the user can share their password, have it hacked, etc. Still not secure.
|
|
|
|
|
As has always been the case. The user has to know his/her password and might write it on a sticky note or something. That can never be fully secure.
Consider a building with many doors and the janitor has copies of all the keys, locked in a box. But the key for that box can't be in the box, it has to be somewhere else, usually in the janitor's pocket. If that one key gets stolen, the thief has access to all of the other keys.
The janitor can lock the lockbox key in another box, but then the key to that box might get stolen.
It's never-ending. There will always be some nth item which might get stolen and may then provide access to all of the other items like dominos.
I have no idea how someone can possibly think that anything can be fully 100% secure. The concept is a fallacy.
|
|
|
|
|
Not 100%. Just reasonably secure. That is why Azure (and I am sure AWS and others) have the kind of authentication that doesn't require an app storing the means of authentication.
|
|
|
|
|
That is where MFA comes in. MS Authenticator or other.
Differing levels of engagement there:
-Are you trying to log in?, (yes that's me) - logging in, after userid and pwd validate, Authenticator chirps with yes or no
-What number is on the screen, (42) - login shows a number, type it into the app
-Which number is on the screen, (11, 34, 78) - login show a number, app shows choices, pick the right one
-Enter the code on Authenticator app (010 767) - app gens a number, enter it into login dialog
I am sure there are other options and there are other products.
How you set it up - IDK - victim not perp.
b
|
|
|
|
|
Have the app read from the key vault when it starts, and then cache the value.
You don't want to constantly read from the key vault, as it is not a high throughput service.
|
|
|
|
|
And by what is the app validated to the KV, and where is that stored outside the KV where the app can access it?
|
|
|
|
|
You would probably use Active Directory, with the app running under an account (you can have the system generate one), then providing read access to the Key Vault for that account.
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
