The ACME Yearbook Company has an existing desktop application that allows customers to create school yearbooks. The desktop application imports a portrait CD containing a text document with student and faculty names, grades, and filenames. The filenames identify the yearbook photo for the respective individual. The application then allows the customer to edit the portrait database and to design the school's yearbook, including the ability to import additional photographs and then lay out each page of the yearbook. When the yearbook is completed, the application creates a CD containing the portrait database and all of the layout data for each page of the yearbook. This CD is sent to the company so that the company can produce a high-resolution PDF of the yearbook, which is then used to produce the printed yearbooks for the school.The ACME Yearbook Company has hired your team to help them develop an Internet-based product to complement the existing desktop application.
The Internet-based product should include the following additional features:
- Allow all of the yearbook data to be stored on ACME's servers, rather than on the customer's local computer.
- Allow the desktop product to be used to edit the yearbook, in addition to any new Internet version of the product.
- Allow multiple people to edit the yearbook at the same time (including any students who are working on the yearbook).
- Allow people to purchase copies of the completed yearbook using a credit card.
- Allow a low-resolution PDF of the completed yearbook to be available to the school for proofing.
- Also make available a high-resolution PDF that can only be accessed by ACME's printing facilities and partners.
Identify security risks within this system, including risks that can be addressed by encryption and risks that cannot be addressed by encryption.