Recent Posts

31

Automation Interface, Add-Ins and Tools / Re: Make an attribute a PK in target table of a transformation to DDL

« Last post by Richard Freggi on May 26, 2026, 01:31:40 pm »

Hello reviving this post. I have the same issue to trnasform a class diagram with [id] property and Identifier datatype into a logical ERD data model using the DDL transformation.  I googled, ChatGPTed and tried different ways, and could not find clear instructions in the Sparx manuals. 
I need the [id] property / Identifier datatype to be converted to PK, then migrated correctly to FK in related entities.  All logical level so datatypes don't matter.

If someone can provide the transformation scripts and a detailed guide on how to create the transformation template please help!  Thank you!

32

General Board / Re: Security Vulnerability with Sparx EA CVE-2026-42098

« Last post by Sunshine on May 26, 2026, 01:05:16 pm »

I think the "security" feature is a bit of a misnomer.
It's more like a feature to protect users from themselves.

It's not "real" security.
If you know what you are doing you can quite easily give yourself admin rights in EA and do whatever you want.

If you give users access to your repository you should trust them to not be bad actors.
If you can't, you shouldn't give them access.

That's different for something like Prolaborate. This product is intended to be accessible from the (big bad) internet, and it should have "real" security.

Geert

So true Geert. There were some vulnerabilities in ProCloud Server identified in https://cert.pl/en/posts/2026/05/CVE-2026-42096/ Which were more of a concern.

33

General Board / Re: Security Vulnerability with Sparx EA CVE-2026-42098

« Last post by Sunshine on May 26, 2026, 01:00:11 pm »

FYI: We We got a response from Sparx Systems:  SAAS <[email protected]> Which says.

We can confirm that Sparx Systems senior management is aware of the vulnerabilities identified in the CERT Polska report and is actively working on resolving them. These CVEs were in fact what prompted the decision to introduce a collection of security improvements in the upcoming Pro Cloud Server, including enforcing HTTPS for all client connections, mandatory model security, and enhanced authentication controls.

All other outstanding development work has been paused to prioritize these security fixes.

34

General Board / Re: Security Vulnerability with Sparx EA CVE-2026-42098

« Last post by Geert Bellekens on May 21, 2026, 06:42:23 pm »

I think the "security" feature is a bit of a misnomer.
It's more like a feature to protect users from themselves.

It's not "real" security.
If you know what you are doing you can quite easily give yourself admin rights in EA and do whatever you want.

If you give users access to your repository you should trust them to not be bad actors.
If you can't, you shouldn't give them access.

That's different for something like Prolaborate. This product is intended to be accessible from the (big bad) internet, and it should have "real" security.

Geert

35

General Board / Security Vulnerability with Sparx EA & ProCloud Server.

« Last post by Sunshine on May 21, 2026, 10:41:55 am »

Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-42098
Sparx Enterprise Architect software has a security feature that limits user's actions to those specified in the role. An authenticated attacker can modify the Enterprise Architect client behavior (e.g. using a debugger) and log in as any other user or administrator - then it is possible to do every possible change to the repository. The vendor was notified early about this vulnerability, but didn't respond with the details of vulnerability or vulnerable version range. Only version 17.1 and below were tested and confirmed as vulnerable, other versions were not tested and might also be vulnerable.

Further scanning of the internet revealed some other vulnerabilities with ProCloud Serverhttps://cert.pl/en/posts/2026/05/CVE-2026-42096/

Does anyone at Sparx Systems have any further information on whether this issues have been acknowledged and are they going to be fixed.
We were in middle of procurement process to purchase Trerado - Sparx EA and Prolaborate in the cloud. Which I'm putting on hold until we find out more.

36

Bugs and Issues / Re: Attributes not displayed in same order i WebEA as in Sparx

« Last post by miksko on May 19, 2026, 06:46:09 pm »

Hi Nabil and Geert,

Thanks for your suggestions, I've now tried them both.

• Actually the diagram generation demo in WebEA seems to sense when a diagram's options have been changed, cause the image is promptly updated when I turn on, respectively turn off, the Show Attributes.
• The order of the attributes are still in alphabetical order though, even when that isn't the case in Sparx, and it doesn't matter whether I check the diagram in WebEA or ProLab (we have both).

Then, at least, I know there's nothing much we can do about it.

Mikael

37

Bugs and Issues / Re: Attributes not displayed in same order i WebEA as in Sparx

« Last post by Geert Bellekens on May 19, 2026, 12:00:27 am »

How they show on a diagram is not specific for WebEA (or Prolaborate).
The diagram is shown as an image, and it generated by EA.

It could be that WebEA is still showing an old version of the diagram (with attributes in a different order).
You can test that by changing something else on the diagram, and saving it.
That should trigger the re-generation of the diagram image.

Geert

38

Bugs and Issues / Re: Attributes not displayed in same order i WebEA as in Sparx

« Last post by Nabil on May 18, 2026, 09:18:56 pm »

Hello... I think WebEA shows attributes in alphabetical order regardless of their position in Enterprise Architect.

If the display ordering is critical for stakeholders viewing the model, you can consider Prolaborate as it allows more granular adjustments to the properties - you can define how properties are grouped and displayed explicitly using configurable modeling language profiles. It is a small setup work up front, but it gives full control over what the stakeholders see.

Thanks

39

General Board / Re: Property Type via Script

« Last post by EAButNotForGames on May 18, 2026, 05:28:43 pm »

The weird thing is, selecting a Type from the dropdown, the classifier will be set to the selected type. But the deposited ID will be 0, independent of the dropdown selection.
Welp, using the classifier enables a better traceability.
I guess this is part of the usual EA shenanigans^

40

General Board / Re: How to Disable Stereotypes Globally EA 17.1

« Last post by Geert Bellekens on May 16, 2026, 03:41:46 pm »

The easiest will be to use the template package I think.

Geert