ID Reservation (IDR) Service Phase 1 Epic

[athu-tran]

User story:
As a CNA*, Root CNA or CNA-LR I want to use an on-demand IDR service so that I can reserve CVE ID(s) without human intervention.
*Note: For Phase 1 implementation, the Root CNA, and CNA-LR role is filled by MITRE, hence the implementation is limited to CNAs and MITRE

AC:

• Coding has been complete to implement all functionality noted in the these User Stories
• All source code for deployed services is available in Github for public review
• Unit Tests are written and pass for new code to insure good test coverage across the code base
• User Acceptance Tests are written and pass
• User Acceptance Tests are reviewed by the community
• Publicly available REST API

DoD:

• IDR service is deployed in a production environment and usable by all stakeholders to address their operational role in the CVE Program related to ID reservation as defined by the user stories.
• All defects identified during community testing have been fixed and unit tested. (@mattrbianchi : please revise as discussed in 9/15/2020 AWG meeting)

Historical Requirements Mapping:
R2: Reservation service requests need to be available via an API for automation and a web page utility. Note: the web utility does not map to this Epic Description.
R10: Once a CVE ID is reserved, they are released forever and can only be REJECTed by the CNA in the publication service.