Risk treatment plan exporter should have asset populations

[mike1813]

In the version tagged as v3.6.0-test, the web U/I supports extraction of a risk treatment plan. This provides a list of system model asset classes, each displayed with its type, a brief description, and its population level, followed by a table listing its potential (mis)behaviours. This table cites threats that cause each misbehaviour, and control strategies that block those threats.

There is an option to 'Export' the risk treatment plan as a offline HTML document. In the web U/I, the correct population levels are shown for each asset class, but in the 'exported' version, they are not. Instead, we get a population level 'Very Many', which is the highest level in the domain model population scale, highest population level for the relevant asset. This is 'greyed out', so it may be a default, suggesting that the problem may be that population levels are actually missing in the exported version.

The attached test case reproduces the error using domain model v6a5-1-2.

small-uncontrolled asserted.nq.gz

[kenmeacham]

Assigned to @dgc, as related to reporting work. Not sure if this is required, depending on what happens with the reports generally.

[mike1813]

Reviewed by @mike1813 : this probably should be addressed because we know ongoing research projects do need enhanced reports. The code affected is fairly new, and was originally intended to meet some of those needs, so it seems likely this flaw will affect at least some current research activities.

[sdm2d11]

@druimalban and @kenmeacham to discuss how to fix (or better avoid) this in the new version of the report export.
Suggestions from Mike is that it might be a problem of including it in the actual exported file rather than in retrieving the information from the Knowledge Base.

Close the issue when the new reporting function is available, provided it does not show up there.

@dgc : in your handover discuss this issue with @druimalban if you have done anything (actually or planned).