Maximizing game security
Shift is currently in production and actively used by 600 to 800 unique users per day, from EA’s development, certification and release management, QA and testing teams around the world.
By integrating with EA’s existing game builds servers, Shift offers a highly efficient, scalable solution that provides secure and reliable game build access and delivery throughout the entire game life cycle.
Creating a new game build and access controls
When a new game build is done, it's submitted automatically into Shift using an automation tool. For example, when EA’s Stockholm location creates a new build for Battlefield, custom metadata fields are automatically populated in Shift, including information relating to access controls and the locations of the build content: source code, artwork and audio assets.
Upon validation, Nuxeo Platform retains the information provided in a custom document type (content object) for that build, with a life cycle status indicating it is available for access. Notifications are then automatically sent to everyone involved in the process.
Builds are categorized by title (e.g., Battlefield), game system platform (PlayStation, Xbox, PC), content type and language.
A full audit history for each game build is maintained, logging all user activity, such as when a build was checked in or out and by whom, and any modification of permissions.
“We also extended the Nuxeo Platform audit service to also capture every aspect of each event, including key custom elements to identify any new values created and what previous values were replaced," Scivally said.
Shift fully utilizes Nuxeo Platform’s out-of-the-box access control resources, as well as some custom security policies. For example, “only QA teams can update the life cycle state of a game build from alpha to beta, preproduction and, eventually, final release of the game," Scivally said. "Nuxeo Platform allows our Shift application to have fine-grained security, by business role, down to the metadata level.”
Of course, there are always valid exceptions to security policy. Shift utilizes approval workflows to enable workers to submit a request to access a game build not allowed by their access permissions. The submission, including an explanation from the requester, is routed to the content owner defined in Shift. The owner will approve or deny the request.
“Shift ensures the approval request process is as efficient and responsive as possible, while fully documenting who approved special access, where and when," Scivally said. "Our Shift application provides fast, reliable and responsive access to game builds with complete security, while also helping expedite our time-to-market for new games.”
Innovations by EA
Since the Shift application’s original launch using the Nuxeo Platform Document Management module, EA has since upgraded to the Nuxeo LTS 6.0 release with Elasticsearch, utilizing more of the full Nuxeo Platform and enabling more robust workflows.
In addition, the development team has built management of the Shift application within Nuxeo Platform, using another custom document type called site, which is structured to hold metadata about the technology infrastructure. Now, operators use the same application to manage the infrastructure inventory worldwide. Today, all 26 of EA’s key physical and virtual sites are managed worldwide by the Shift application.
Tracking and repurposing archived games
The EA RPM group recently deployed a second Nuxeo Platform-powered application, Vintage, for managing released game titles archived for preservation.