<data requirement #SFREQ-cvegl>

Guid: 
Id: SFREQ-cvegl
Title: Uploaded Media Metadata MUST be persisted.
Tags: [UI], [Usability], [MediaUploadService], [MediaMetadataService]
Stakeholders: [Users], [Accreditation Services]
Summary [wiki]: Provide a mockable service to return a persistable MediaMetadata entity containing metadata (Name, Size, Type, etc.) determined from analysing a media file or stream.
Statement [wiki]: **Requirement:**\\ Uploaded Media Metadata `MUST` be persisted as a Record.\\ \\ **Rational:**\\ For *Usability* and *Compliance* *Quality* reasons, UI links to media `MUST` indicate the Type and Size of the media to be downloaded.  \\ **Context**:\\ General.\\ \\ **Impact**\\ \\ **Comments:**\\ Use a `MediaUloadService` to orchestrate first the checking of the uploaded media for malware, then -- whether it passes or fails -- the invocation of a `MediaMetadaService` to create an Entity to be persisted, that has Attributes for the Guid based Id, User Id, Tenant Id, Utc DateTime, SrcName, Name (in many systems, but not all, these two are the same), Byte Size, Mime type, Malware Checked flag, Notes (for the malware service response).\\ The DataStore should NOT be indexed by name (too many duplicate names across all users).\\ The DataStore should be searched for by Id. \\ \\

</data>

<data requirement #SFREQ-cvsav>

Guid:  
Id: SFREQ-cvsav
Title: A MediaUploadService MUST be provided.
Tags: [Service], [Core Service], [Security], [MediaUploadService]
Stakeholders: [Developers], [Accreditation Services]
Summary [wiki]: Provide a mockable service to orchestrate the verification of uploaded media for malware, the persistence of a media metadata, and the persistence of the media itself.
Statement [wiki]: **Requirement:**\\ A `MediaUploadService` `MUST` be provided.\\ \\ **Rational:**\\ For Usability, Compliance, and Security Quality objectives, ensure that uploaded media is verified before it is persisted in the system, in order to ensure the system does not become a propagator of malware. Persist metadata (size, filename, mime type) about the uploaded media.\\  \\ **Context**:\\ General.\\ \\ **Impact**\\ The disclosure that a System has been determined to propagate malware has significant and lasting negative reputational impact on the organisation. \\ **Comments:**\\ \\

</data>