I am getting some positive feedback on the project from Richard Berg , and he had blogged about it under the title of New CodePlex project: TFS Event Handler . And John Lambert has commented on some issues that he has envisioned with referenced assemblies and security of allowing people to upload Assemblies.
I would like to address both of these issues:
Security issues on uploaded assemblies
I do not ever envision that this would be uses when facing the public. It is designed for large internal teams where you want to give them the capability to setup their own Handlers. It may be that all assemblies uploaded must be secured using a key that only I provide to the developers!
Although not for this version of the application, I would like to use a zip format file to allow the addition of extra files, like .htm templates for emails, or an additional referenced assemblies.
I have raised both of these issues on CodePlex and you can vote for them there. If anyone has any other issues that they would like to point out, please don’t hesitate to let me know…
Technorati Tags: WIT Personal TFS
What to read next
TFS Event Handler (Prototype) Refresh
Bug fixes and updates for the TFS Event Handler Prototype, now supporting .NET 3.5 and Visual Studio 2008. Includes installer refresh and …
TFS EventHandler: Now on CodePlex
Team Foundation Server EventHandler is now available on CodePlex, with ongoing updates to use Message Queuing and a Windows Service. Source …
TFS Event Handler Progress
Update on TFS Event Handler project progress, focusing on resolving security issues, improving error handling in WCF services, and …
Detecting agile theatre with real delivery signals
Why Most Companies Operating Models Fail in Dynamic Markets
A concise comparison of Predictive and Adaptive Operating Models, explaining why traditional structures fail in dynamic markets and how …
Don’t Manage Dependencies, Remove Them
Explains why dependencies are a sign of poor system design and outlines steps to eliminate them by aligning teams, clarifying ownership, and …
The Estimation Trap: How Tracking Accuracy Undermines Trust, Flow, and Value in Software Delivery
Tracking estimation accuracy in software delivery leads to mistrust, fear, and distorted behaviours. Focus on customer value, flow, and …
Flow of Value vs Flow of Work – Misnomer or Useful Shorthand?
Compares “flow of value” and “flow of work” in Kanban, explaining why only validated outcomes count as value and stressing the need for …
Why Outsourcing DevOps Fails, and How Real Engineering Excellence Starts With Your Team
Avoid DevOps vendor lock-in, discover how true engineering excellence starts with partnership, not outsourcing. Ready to transform your …