This project poster is following the template at https://www.atlassian.com/team-playbook/plays/project-poster
projectB is the 2nd one of 26 projects from A to Z that I intend to develop on the way to become a full-stack developer.
After the projectA, I realize that even learning by practicing, it still takes much time to master a knowledge domain. Thus, instead of learning knowledge about server, client and DevOps at the same time, I will focus on back-end and come back later for other parts.
projectB will last in two months from Oct 12 to Dec 6. I will focus on database (the 1st month) and security configuration (the 2nd month).
| Team project owner |
|---|
| @iamacoderguy |
| Team members | Project status: Active / Inactive / Shipped |
|---|---|
| @iamacoderguy | Active |
PROBLEM STATEMENT: Need for one who is looking for a sample system that requires database and basic knowledge about security to build.
IMPACT OF THIS PROBLEM: Database and security are important knowledge on the way to become a master of back-end. After this project, I hope that I won't worry anymore when talking about DB or Security, and figure out where I should go to discover the knowledge domains further.
The project will be finished if:
- We finish developing a server (back-end) that can work with Postman
- The system can run, do one or more useful tasks
- The system will run on-cloud with database
- The system should survive one or more security attacks.
My movies service
So I'm implementing a system that can help me to store and share lists of movies I've watched or 'd like to watch. For more information, please refer to What are we doing?
I will reuse the framework from projectA which can help us create an API system.
I will deploy the server to heroku.
I will use mongoose and MongoDB for database.
I take ownership of defining of done.
- What security configurations will I apply on the system?
- Detailed requirements
- List of APIs
- Database design
- Learn about node.js security ✔️
- Learn about non-relational DB ✔️
- Define detailed requirements ✔️
- Develop the system
I will define the requirements and APIs so that they will match to the DB knowledge I'd like to learn.
Then I will develop the system, and try to attack it with the security knowledge.
Sharing the security knowledge after fixing the threats and vulnerability would be the final step for this project.
It can help me to learn about basics of database and security.
TBD
For the 1st month, Oct 12 to Nov 8: I will focus on developing the back-end server integrating to MongoDB and providing the movies service.
For the 2nd month, Nov 9 to Dec 6: I will focus on attacking and defending my server