You will learn

How to view Notifications and adjust Notification settings.

Prerequisites

Audience: IT Professional or End User
Difficulty: Basic
Time needed: Approximately 5 minutes
Tools required: N/A

Introduction

Notifications are real-time events reported by the system, letting users and administrators see what other users are doing. Notifications appear in a dropdown accessed from the main navigation:

Clicking on the Notification tray icon (highlighted above) will display available notifications. ThreadFix displays up to five notifications at a time. The notifications persist until new notifications replace them or the user navigates away from the page. In that case, notifications from the last minute are shown, if any.

A history of notifications can be viewed by clicking the Notification icon and selecting 'See all notifications'. This will redirect to the History page.

The History page displays a list of notifications and events. Note only the teams, groups, and applications the user has permissions for will appear in the list.

Notification Events

Notification Event Triggers
Application Notifications	Create Edit Delete Set Tags Upload Scan Delete Scan
Vulnerability Notifications	Open Vulnerability From Scan Deletion Create Vulnerability From Scan Upload Create Vulnerability Manually Close Vulnerability From Findings Merge Close Vulnerability From Scan Deletion Close Vulnerability From Scan Upload Close Vulnerability Manually Reopen Vulnerability From Scan Upload Reopen Vulnerability Manually Mark Vulnerability False Positive Unmark Vulnerability False Positive Create Vulnerability Comment Other Vulnerability
Defect Notifications	Submit Defect Update Defect Status Close Defect Appeared in Scan After Defect Closed
Policy Notifications	Policy Failing Policy Passing

Notification Settings

The ThreadFix role-based authentication controls govern the display of Notifications so only the Teams, Groups, and Applications the user has permissions for will appear in the list.

The settings for toggling display of notifications are found in the Notification Settings section of a user's User Details profile.

To view this, click on the Global menu in the Navigation sidebar, expand the Administration sub-menu, and select the Identity Management page. The default tab is Manage Users, select the desired user from the Users list.
The default is to display all notifications for any given user, filtered by the viewing user’s role and permissions, however custom notifications can be set for each user. Scroll down to the Notification Settings section and toggle On/Off any desired notification alerts.

Note: In order for users to view event notifications, users must have the Manage Audit History permission enabled at the Global, Team or Application level (they will see event notifications specific to the scope of their permission). For more information see the Enable/Disable Manage Audit History section of this guide.
After making any modifications to the list of notifications, click the Save Notification Settings button to save the changes to the user’s account.

ThreadFix will display a success message at the top of the interface to confirm changes have been saved.

Enable/Disable Manage Audit History

In order for users to view event notifications, users must have the Manage Audit History permission enabled, this can be found within the Identity Management page, in the Manage Roles tab.

Within the Permission section, scroll down and expand the Administration sub-section to reveal a list of options that can be toggled.
Scroll down to locate the Manage Audit History option. Toggle it On or Off as desired.
Save changes with the Save Changes button in order for the option to take effect.

ThreadFix 3.X Documentation

Notifications 3.0