Define the Risk Data Type
Every Risksheet has a primary row type defined underdataTypes.risk in the sheet configuration. This is the main work item type the grid renders.
The names
risk and task are naming conventions, not constraints. The two-entity data model supports any pair of Polarion work item types — for example, dataTypes.risk.type: requirement and dataTypes.task.type: testcase to render a verification matrix.
Add a Downstream Task Type
To pair the risk type with a second work item type — typically a mitigation, control, or test case — definedataTypes.task:
Set
dataTypes.task.canCreate: false together with column-level canCreate: false to restrict users to linking pre-existing items from a shared library.
Configure Visual Levels for the Hierarchy
Multiple visual rows per risk item — such as Item, Failure Mode, Cause — are achieved through cell merging, not through extra work item types. The data model still has only two entities (risk and task); the visual tree comes from thelevels array. Each level names a control column whose value triggers vertical cell merging when consecutive rows share it.
Set the Project Property for Multiple Document Types
When a project contains more than one risk document type, configure the project property in Polarion Administration with parentheses around the list:Assign Columns to Levels
Columns are placed into the visual hierarchy through thelevel integer. The level property is 1-indexed: level: 1 maps to levels[0], level: 2 maps to levels[1], and so on. Columns bound to task fields carry no level.
bindings (plural). Use linkedItem.fieldId patterns such as bindings: task.title to display fields from the linked task, and the task.$item form to expose the entire linked work item to a serverRender template.
Severity, occurrence, and other rating scales are not declared in the sheet configuration — they come from Polarion enumerations. Columns reference them via type: rating:<enumId> or type: enum:<enumId>.
Configure Rejection Handling
When a review workflow rejects an item, behavior is governed byremoveStrategy and the related rejection properties on dataTypes.risk:
Pick
delete to remove items permanently, rejected to keep them filterable, recycle_bin to move them to a hidden bin, or hide to keep them present but filtered out by rejectedStatus.
Verify Your Changes
Open the document in Polarion and confirm that:- Work items of every configured type appear, grouped by your level hierarchy.
- Cells in each level’s control column merge vertically when consecutive rows share the same value.
- Items whose type is not in
dataTypesare filtered out of the grid.
See Also
- Configure FMEA Workflows — multi-type FMEA configuration
- Configure HARA Workflows — hazard and ASIL structures
- Configure Downstream Tasks — task configuration
- Display Multi-Level Hierarchies — column-to-level assignment
- Implement STRIDE Analysis — cybersecurity threat configuration