Sr. SRS Cl . No.

Observations BSNL Remarks STQC

No. Remarks

1 Login Screen>User_ID One factor Login Interface is Open

authentication common for Bidder &
mechanism BSNL Officers but
(password based) allows successful log
is implemented in based on only valid
for dealing hand, user’s ID password &
officers and roles authorization
bidders. Same assignment.
interface is used
for login for
dealing hand and
bidders.
2 Login Screen>User_ID As per BSNL SRM Required changes Closed
E Tendering have been done in
Functionality reference document.
Process Flow Use New version of Flow
Case Business Use Case Business
Rules Ver-1.0, Rules Ver-2.0 is being
User_ID shall be submitted.
Alphanumeric
however in
application
User_ID for
single user is
accepting
numeric.
3 Login Screen>User_ID As per BSNL SRM As per the SAP Verification
E Tendering Standards User ID required
Functionality might be of more
Process Flow Use than 10 characters
Case Business but in BSNL it can
Rules Ver-1.0, vary from 8 to 14
user id shall have characters & there is
maximum 10 no standard
alphanumeric validation for
character, character length on
however in field” User ID” of log
application user in screen & changes
id is accepting have been done in
more the 10 reference document.
 characters. New version of Flow
Use Case Business
Rules Ver-2.0 is being
submitted
4 Login Screen>User_ID Multi session of This is the standard Closed
DA login and feature of SAP SRM
vendor logins are Module and can not
allowed in the be restricted.
application i.e. Moreover, if a user is
same DA user working on a
can login in two particular object then
different session that object gets
locked for any
changes/modification
through other
sessions/logins.
5 Purchaser>RFx As per BSNL SRM Changes have been Closed
Creation>RFx type E Tendering done in reference
Functionality document. New
Process Flow Use version of Flow Use
Case Business Case Business Rules
Rules Ver-1.0 Ver-2.0 is being
there shall be 5 submitted
types of RFx
however in
application there
are 8 types of
RFx. REMl, REMO
and VNEP type of
RFx are not
mentioned in
reference
document.
6 Purchaser>RFx In BSNL SRM E Changes have been Closed
Creation>RFx Name Tendering done in reference
Functionality document. New
Process Flow Use version of Flow Use
Case Business Case Business Rules
Rules Ver-1.0, it Ver-2.0 is being
is mentioned submitted
that RFx Name
shall be
alphanumeric
 character,
however in
application RFx
name may be of
text only.
7 Purchaser> Process In BSNL SRM E Changes have been Explanation
for Tendering done in reference required
TOC/TEC formation Functionality document. New
and its Process Flow Use version of Flow Use
approval Case Business Case Business Rules
Rules Ver-1.0, it Ver-2.0 is being
is mentioned submitted
that approval for
the formation of
TOC/TEC shall be
forwarded
through
reviewer,
however, in
application it
may be directly
forwarded to
awarder.
8 Approver In BSNL SRM E Changes have been Open
Tendering done in reference
Functionality document. New
Process Flow Use version of Flow Use
Case Business Case Business Rules
Rules Ver-1.0, Ver-2.0 is being
it is mentioned submitted
that awarder can
approve/reject
the remark note
sheet forwarded
by purchaser,
however in
application
awarder can
approve/review
the remark note
sheet forwarded
by purchaser.
9 Vendor Screen Vendor User manual SRM- Closed
 Registration Vendor Creation
process is not Replication & Linking
mentioned in has been attached in
BSNL SRM E the New version of
Tendering Flow Use Case
Functionality Business Rules Ver-
Process Flow Use 2.0 is being
Case Business submitted
Rules Ver-1.0
User manual SRM-
Vendor Creation Replication & Linking.docx

10 Vendor Screen The bidder The configuration has Open

accounts locked been done as per
after 3 invalids BSNL IT Security
attempts. policy accordingly
User IDs/ accounts
will be disabled after
3 consecutive
incorrect password
attempts. (Security
Policy already sent
through email dated
16-10-2018 in the
document named VA
requirement-1, S. No.
80. POLICY CATEGORY 4:
LOGICAL ACCESS
CONTROLS Policy Section
4.1: USER ACCESS
MANAGEMENT 4.1.4.
Password Management
and Protection)
11 Vendor Screen The maximum There is no Open
document sizes, restriction on the
one document file/document size
size, number of and numbers of
attachments and attachment.
format to be However only
uploaded are not following file
mentioned in the types/formats can be
SRS. uploaded :
PDF
DOC
DOCS
XLS
 XLSX
PNG
JPG
JPEG
BMP

12 During Tender Price bid/Tech This process is Open

Opening bid can be already present in
opened BSNL EPS.
separately,
However, Purchaser & Opener
Price/Tech bid (Openers can be
can be decrypted Max. 4) use their
by the one user Key to open &
officer alone. decrypt the
Tech./Price Bid.

13 Awarder> In BSNL SRM E Changes have been Closed

Acceptance/Rejection Tendering done in reference
of Price Bid Functionality document. New
Process Flow Use version of Flow Use
Case Business Case Business Rules
Rules Ver-1.0, it Ver-2.0 is being
is mentioned submitted
that awarder
shall also see the
TOC/TEC report
by clicking on
“View Report
“Icon however
there is no such
functionality in
application.
14 Corrigendum Corrigendum Changes have been Closed
process is not done in reference
mentioned in document. New
BSNL SRM E version of Flow Use
Tendering Case Business Rules
Functionality Ver-2.0 is being
Process Flow Use submitted
Case Business
Rules Ver-1.0
15 Encryption/ The mechanism Encryption &
decryption of for encryption/ Decryption of
bid decryption is not Bid_V_1.1 is being
provided clearly. sent

Encryption &
Decryption of Bid_V_1.1.pdf