Forcing an Automatic Review of Inventory Across All Projects
Code Insight provides an Apply Policy feature that enables you to force an automatic review of published inventory in all projects currently associated with a given policy profile. In this way, if the policy profile has been modified, users do not have to wait for a scan on each project or manually unpublish and re-publish individual inventory items within each project to apply the changed policy across inventory items to automatically approve or reject them.
During the automatic review, the status of those inventory items that meet any of the current policy criteria will be overwritten based on the criteria. (These items include those with a status manually set by a user.) The status of those inventory items that meet no policy criteria will remain as is.
Important:Currently this feature is available for only Code Insight instances that use the MySQL database. It is not available those instances that use the SQL Sever database. Additionally, a special server deployment configuration is recommended for running this feature. Refer to the “Supported Deployment Configurations” section in the Code Insight Installation & Configuration Guide.
To perform this feature, a user must have the system permission Manage Policy.
To apply a given new or modified policy profile to inventory in all projects associated with the profile, do the following:
| 1. | Open the Policy page (see Opening the Policy Page). |
| 2. | From the policy list, select the policy profile that you want to apply to inventory across all projects currently associated with it. |
| 3. | Click Apply Policy - Global icon for the policy. (This icon is not available if you do not have Manage Policy permission.) |
The Apply Policy on All Projects confirmation pop-up window is displayed.
| 4. | On the pop-up, click OK to proceed with the Apply Policy operation or Cancel to discontinue it. See the note below. |
Important:Once review begins, all inventory that meet the policy criteria are reviewed by the selected policy and their current review status is overwritten. This includes inventory whose current review status was set manually by a user. Currently no option exists to skip such inventory items during the review process. If you do not want the operation to overwrite statuses that were manually set, click Cancel.
If you selected OK, a success message (displayed in the upper right of the screen) indicates that the Apply Policy job was added to the Jobs queue and provides the job ID.
| 5. | To monitor the progress of the Apply Policy, open the Jobs queue and use the job ID to locate the Apply Policy - Global job and track its status. (Use the instructions in Monitoring the Code Insight Jobs Queue to access and monitor the queue.) Consider the following about the queue process for this job: |
| • | This job will execute immediately as long as no other jobs in the queue are in an Active state (that is, currently running). |
| • | If jobs are currently active when the Apply Policy - Global job is added to the queue, the job is queued with a Scheduled status and automatically run after the currently active jobs complete. |
| • | Other jobs added to the jobs queue once the Apply Policy - Global job is scheduled or in progress are placed in Scheduled status and will run according to queue order after the Apply Policy - Global job completes. |
| • | If a Apply Policy - Global job is already scheduled when a Library Refresh or Electronic Update is added to the queue, the Library Refresh or Electronic Update will run first (once any already active jobs finish). The Apply Policy - Global job remains in a Scheduled state and will run according to queue order once the refresh or update is complete. (A Library Refresh and Electronic Update have priority over all other scheduled jobs.) |
After the Job Completes
Once the Apply Policy - Global job completes, any change in the review status of a given inventory item is recorded in that item’s Inventory History.
Currently, no tasks (including remediation tasks) are automatically created for inventory items once the automated review completes.