Contribution

Contributor

Kevin Bui (lead developer)
Michelle Morris
University of Pittsburgh

Justin Prosser (security expert)
University of Washington

Mike Mendis
Jeff Klann
Reeta Metta
Mass General Brigham

Ability to specify user parameter defaults

Michael Horvath
Wake Forest University

This change is meant to allowing user params to take precedence over hive params. Currently, it's the other way around.

Particularly, if you have the situation where you have a large number of users who use an authentication method other than the default basic, but your service account (AGG_SERVICE_ACCOUNT) is using basic then you need to specify a user param for each of your users.

With this change, you can set default authentication params in pm_hive_params for all users, and then set your service account specifically to be authentication_method = 'BASIC'. May seem like a small change, but it would be very welcome not to need to assign params for each new user at our institution.

In the process of making this change, I re-organized basic authentication into its own package and removed some code duplication.

LDAP UPN Support

Michael Horvath
Wake Forest University

Active Directory enables other methods of binding which are more flexible besides just using the distinguished name. https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-adts/6a5891b8-928e-4b75-a4a5-0e3b77eaca52. This change is to enable binding the the User Principle Name form, which is very convenient when the distinguished names for users is not easily available (OU by department, etc.).

Kevin Bui
Michelle Morris
University of Pittsburgh

The metadata GetChildren API call, which returns information on the children of an ontology node, can now be configured to return multiple levels of children (e.g., children, children's children, etc.). This is done by specifying the numLevel parameters. 

By default, the function assumes numLevel = 1 and will return the direct descendants of the concept, which is one level of children.  When the numLevel = -1 the function will return ALL descendants of the concept, otherwise the function will return up to and including the number of levels specified by numLevel (eg. numlevel=2 returns two levels of descendants, numLevel=4 returns four levels of descendants).

Ambreen Zaver
University of Colorado

• CORE-399 Oracle index hints must use the table alias 
• CORE-382 Username / password errors should not specify which had the problem
• CORE-402 Fix Veracode identified Security flaws in i2b2 Server-Side Code
• CORE-404 Adding support for JDK 11. Now including the gensrc due to jaxb has been removed. (CLOSED)
• CORE-413 FetchAllChildren (CLOSED)
• CORE-414 SAML (server side) (CLOSED)
• CORE-415 Log4j upgraded to v2  (RESOLVED)v2
• CORE-416 User parameter precedence change (contributed by Michael Horvath) (CLOSED)
• CORE-417 LDAP UPN support (contributed by Michael Horvath) (CLOSED)

• DATA-7 QT_PATIENT_SET_ENC_COLLECTION should be a bigint (DONE)
• DATA-14 Synthea i2b2 data (DONE)
• DATA-6 improve i2b2 db upgrade process (DONE)
• DATA-12  Stored procedure to update concept dimension (DONE)
• DATA-11 Age in years updater during demodata install (DONE)
• DATA-9 ACT v4 ontology (DONE)
• DATA-13 Postgres time interval corrections in ACT v4 demographics ontology (DONE)
• CORE-389 Totalnum performance improvements (DONE)
• CORE-394 Obfuscated totalnum reporting tables (CLOSED)table
• CORE-398 Multifact support for totalnums  (DONE
• CORE-400 Show totalnums in top level folders (DONE)folders