DAST: On-demand scheduler design
Problem to solve
As a DAST on-demand user, I would like to schedule my scans, so that I do not have to manually trigger an on-demand DAST scan.
User experience goal
The user should be able to use the UI to schedule a DAST scan by selecting the Site profile, Scanner profile, and time to run. There should be options for scheduling recurring scans, as well as on-off schedules. The user should also be able to view all of the scheduled scans, change the schedule for an already scheduled scan, and delete the scan from the schedule.
In the DAST On-demand page, users should be able to click a "Schedule scan" button after they have configured a scan. This will show a modal with the scheduling options.
There should also be a tab for showing "Scheduled scans". This will take them to a list of all scheduled scans. From here, they should be able to change the schedule for any scan that they created as well as delete it from the schedule.
Permissions and Security
- Maintainers and Owners should be able to add scans as well as see, change, and delete any scheduled scans in a project.
- Developers should be able to add scans, see all scans, but only be able to change and delete scans that they have created themselves.
- All other roles should only be able to view scheduled scans.
The DAST On-demand documentation should be changed to reflect the fact that users can now schedule scans.