Skip to main content
diagram
Risksheet is a generic tool supporting any risk analysis methodology, including Failure Mode and Effects Analysis (FMEA), Hazard Analysis and Risk Assessment (HARA), Threat Analysis and Risk Assessment (TARA), STRIDE, and Common Vulnerability Scoring System (CVSS). The column system described here applies uniformly across these methodologies; Nextedy provides solution templates for typical use cases.

Column Definition Properties

Every column in the columns array accepts the following properties:
The readOnly property is automatically set to true regardless of your configuration when any of these conditions apply: the column has a formula, the column has a serverRender script, the column references a cross-project item, the bound field is a protected system field (id, status, type, project, outlineNumber), or the user lacks write permission to the field. Since v25.2.0, the title field of a newly created linked item is exempted to allow inline naming.
Text wrapping and HTML rendering are not controlled by column-level boolean flags. Wrap behavior is configured through CSS classes defined in the styles section and applied via cellCss. HTML content is produced either by the column type system or by a serverRender Velocity template — there is no per-column toggle.

Supported Type Identifiers

The type property accepts the following identifiers. Types that use the colon syntax (e.g., enum:severity) carry the ID of a Polarion enumeration after the type prefix.
When you omit the type property, Risksheet infers the type from the bound Polarion field. For example, a field defined as an integer in Polarion automatically becomes an int column, and a native enum field becomes an enum column. Explicitly setting type overrides this inference.
Workflow status is displayed by binding a column to the status field of the work item. There is no dedicated workflow column type — standard bindings to status fields render the workflow state using Polarion’s native presentation.

Binding Patterns

The bindings property supports three patterns that determine which value the column reads and writes: The direct pattern is the most common. Use linkedItem.fieldId to surface upstream context (such as the title of a linked requirement) without writing a custom renderer. Use linkedItem.$item together with serverRender for complex rendering that combines multiple linked-item properties.

Colon Syntax for Parameterized Types

Several column types support a colon-separated syntax: baseType:parameter. The parameter is the ID of a Polarion enumeration administered in Administration > Enumerations. Risksheet loads the enumeration values from Polarion at runtime; there is no separate definition section in the sheet configuration. The type parser extracts the prefix before the first colon to determine the base data type, then passes the remainder as the enumeration reference.

Column Sorting Behavior

Risksheet applies specialized sorting logic based on column type and bindings. Sorting is performed client-side for immediate feedback without server round-trips. Configuring initial sort order uses the sortBy property:
This sorts by RPN descending (tilde prefix ~ indicates descending), then by severity ascending.
When comparing to a baseline revision, sorting operates on the baseline snapshot values rather than current values, except for systemItemId and systemItemRevision which always reference the current item.

Known Limitations

Column Configuration Examples

Examples use YAML, matching the editing experience in the configuration editor (v25.5.0+ supports YAML editing with syntax highlighting, error detection, and edit history).

Basic Text Column

Rating Column with Scale

Calculated RPN Column

The formula commonRpn is defined in the formulas section:

Grouped Columns with Header

Upstream Traceability Column

Linked-Item Display Column

Displays the title of an upstream harm without a custom renderer. Read-only because it is a linked-item field.

Server-Rendered Column

When serverRender is set, the column type is automatically forced to text and readOnly to true. The task.$item bindings pattern gives the Velocity template access to the linked task work item.

Column That Survives Group Collapse

When the Initial Risk Assessment header group is collapsed, the rpn column remains visible because collapseTo is true.

Complete Example

A full columns array for an automotive FMEA risksheet with initial assessment, mitigation actions, and revised assessment:
Last modified on July 10, 2026