7 September 2021
- Create and edit of Quarterly Surveillance elements must use new fields
- Remove Banned Developer errors from the Listing Validation Report
- Automate Cures Reporting Phase 1 Charts
- Use consistent names for Quarterly Surveillance data elements
- Display consistent permissions error when splitting Products and Versions
- Move stateful date field out of Spring component, allowing for Cures Statistics Reports to be generated correctly
31 August 2021
- Use "Mandatory Disclosures" instead of "Transparency Attestation URL"
- Update Real World Testing email to dynamically determine eligibility
23 August 2021
- Generate SVAP Summary CSV and allow download of that file and schema
- Add new Non-conformity close date field
- Restrict Listings to have only valid Test Procedures on edit
- Update email failure with custom exception and log message
- Confirmed Listings with RWT eligible parents become RWT eligible on confirmation
- Use updated link for ONC "Contact Us" form
- Audit Data Retention jobs failing in PROD
- Provide appropriate errors/warnings on Test Standards on removed criteria based on ROLE
9 August 2021
- Add Attestation change request
- Track and notify of deprecated endpoint usage by API Key
- Add "Suspended by *" statuses to ONC-ACB Questionable URL report
- Require "Actions/Response" on closed Complaints
- Validate Complaint dates for reasonableness
- Filter ONC-ACB Questionable URL report by Status AND Edition, not Status OR Edition
2 August 2021
- Change Meaningful Use User term to Promoting Interoperability; deprecated MUU fields and endpoints
- Enable Real World Testing fields for all 2015 Edition Listings
- Treat Test Standards as Optional Standards on Upload/Confirm
12 July 2021
- Create new search endpoint /search/beta that incorporates all types of compliance
- Deprecate /search endpoint
- Remove ability for ROLE_ONC to upload surveillance
- Add acbId to Listing Activity metadata
- Add header to all responses indicating prod/non-prod environment
- Disable Merge ability for ROLE_ACB
28 June 2021
- Generate Surveillance Activity Report as Excel spreadsheet
- Add Direct Reviews to Listing basic endpoints
- Require Measures with multiple criteria to be entered as a single Measure
- Allow Users without phone number
- Support add/edit/view of Optional Standards
- Display Mandatory Disclosures URL in some error messages instead of Transparency Attestation URL
2 June 2021
- Add cures statistics creation and basic email report
- Update README documentation
- Add developer data to version activity when creating a version
- Incorporate listing status in certified product collection direct review counts
- All activity metadata returned for Version and Listing activity
17 May 2021
- Remove background jobs, /data/job_types
- Add Developer, Product, and Version information to complaints
- Move Surveillance Upload and Meaningful Use Upload background jobs to quartz scheduled jobs
- Allow edit/view of Service Base URL List value
- Add listing-level fields to flexible upload
4 May 2021
- API Key registration requires confirmation of email
- Add 'processing' flag to /certified_products/pending/metadata response
- Remove applicable UCD Processes and Test Tasks if a criterion is edited to have SED = false
- Mark pending listing as processing during confirm
19 April 2021
- Add surveillance and non-conformity counts to developer hierarchy
- Do not allow new test standards during upload/edit
- Basic listing validation for flexible uploads
- Copy developerId value so it is available in /collections/certified_products response
- Show correct criterion number when (e)(1) Cures Update is missing other required criteria
5 April 2021
- Update the overnight job schedule
- Remove G1/G2 Data Fix job
- Add Direct Review information to Summary Statistics report
- Display "Informed ONC per 170.523" in Complaints report
- Filter a listing's direct reviews by listing status, edition
- Add quartz job to get list of user-defined triggers in email
22 March 2021
- Remove developer explanation from direct review data
- Add G1-G2 measures to basic API endpoints
- Generate email when scheduled jobs are added, updated or deleted by a user
- Allow Test Functionality to be removed for (c)(3) if criterion is removed
- Add temporary Quartz Job to Fix G1/G2 Cures Criteria Data
- Enhance the current Summary Statistics report to produce PDF
- Allow ROLE_ONC_STAFF to access Complaints
- Allow ROLE_ONC_STAFF to access quarterly surveillance data
- Add ONC-ACB specific Questionable URL report with filtering
- Put CHPL Product Number in CMS ID results data
8 March 2021
- Remove /key/activity endpoints
- Update quarterly/annual surveillance reports to have 2019 and 2021+ formats
- Remove dependency on tables that used to be used for security, but are now obsolete
- Add v20 upload template parsing to include old b3 criterion
- Store HTTP Method in API Key Activity table
- Support edit and display of SVAP Notice URL
22 February 2021
- Give ROLE_ONC_STAFF access to scheduled and background jobs
- Enable Standards Version Advancement Process Administration
- Add /collections/certified-products endpoint including Direct Review data for listings
- Create scheduled job to identify any listings that fail current validation rules
8 February 2021
- Add Direct Review and Non-conformity counts to downloadable CSVs
- Add Direct Reviews into Listing XML download file
- Create endpoints for flexible upload of Listings
- Questionable Activity Report - activity details missing for old G1-G2 measure activity
- Legacy + Cures criteria get associated with measure on upload
25 January 2021
- Developer PUT endpoint for developer updates and merges was modified
- Add reports on missing / soon-to-be-missing RWT Plans & Results
- Update validation for b10 and g10 criteria
- Execute developer merge as background quartz job
- Change 2014 Download file generation to be quarterly
- Ensure email is used when username does not exist
- Add /activity/metadata/beta/api-keys endpoint for paged API Key activity
- Allow edit of SVAP information for listings
- Only put RWT data in downloadable CSV files when flag is enabled
11 January 2021
- Add scheduled job that allows audit data to be archived
- Able to add and remove nonconformity in a single action
- Add null check for surveillance requirement comparison
28 December 2020
- Update statistics history to use certification status history table
14 December 2020
- Move G1/G2 macra measures to measures at listing level
- Generate direct review download file and manage DR cache
- Enable ROLE_ONC_STAFF user type
- Make "username" not required for new users
30 November 2020
- Add upload for Real World Testing
- Stop showing "System Administration" accounts on User Management page
- Stop allowing "System Administration" accounts to log in
16 November 2020
- Add new endpoint to get developer hierarchy
- Remove friendly name from developer and product points of contact
- Correct the wrong URLs in few emails
- Re-order "reason" element for dev status changes in XML
19 October 2020
- Add ability to validate and save Real World Testing data
- Send email to Direct Review/Jira team upon developer split
- Revise email subject and body for shared ONC-ACB reports
5 October 2020
- GAP=TRUE should not be allowed for 170.315 (f)(3) during upload, confirm or edit of listing
- Reschedule 2014 Download file generation to be monthly
- Allow users to log in via either username or email address
- Add error handling for any error returned by Jira with respect to Direct Review
- Do not mark old ICS error data deleted until job completes
- Lookup user by email or name for password reset
- Do not mark old broken surveillance rule data deleted until job completes
- Re-enable Pending "Change Request" report for ONC-ACBs
21 September 2020
- Clean up duplicate ONC and ONC-ACB scheduled jobs report
- Send email to user when account is first locked
- Return ambiguous msg on login if acct locked, disabled, etc
- Add new /metadata/beta activity endpoints for pending listings, pending surveillance, corrective action, atls, and announcements
- Allow complete listing file to always be downloaded
8 September 2020
- Add "Ignore warnings" checkbox when editing or confirming certified product
- Get direct reviews from Jira
- Send HTTP Error 401 when the api key is not valid
18 August 2020
- Create report showing developer user access
- Remove cures-specific jobs
- Require Test Procedure & Data Versions on confirmation
- Remove no longer required Transparency Attestation validation logic
- Generate valid XSD for download files
- Include curesUpdate true/false value in XML download
10 August 2020
- Add Quartz job to set Real World Testing Eligibility Year for eligible listings
- Add /metadata/beta/users endpoint for paged user activity
- Remove ERD and ERD+1 week flags
- Updated Quartz jobs to handle updated ONC-ACB selection requirements
- Correctly handle error with k2 surveillance requirement
- Upgrade jackson-core library to be compatible with databind lib
- Show "Cures Update" on Broken Surveillance Report
27 July 2020
- Add 2015 Cures Edition metrics to Summary Statistics Report
- Update summary statistics creator job to be non-blocking
- Check for duplicate data on listing confirm and edit
- Move data loaded on startup to caching framework
- Updated text on user invitation email messages
- Add endpoint to get direct reviews for any developer
- Unlock user accounts on successful password reset
- Allow users to change their passwords using provided workflow
13 July 2020
- Split developer action moved to a quartz job
- Do not allow ONC to upload listings
- Generate warning on upload when test standard does not exist
- Create secured endpoint /activity/metadata/beta/acbs
25 June 2020
- Update removeCriteriaJob parameters
24 June 2020
- Add "Removed | " to removed criteria in the SED download CSV file
- Update Macra Measures to match final Cures rule
- Correct macra measure comparison logic
15 June 2020
- Update G3Sed2015DownloadableResourceCreatorJob to be non-blocking
- Update DownloadableResourceCreatorJob to be non-blocking
- Restrict use of old Criteria based on Certification Date & ICS
- Allow developer split without considering retired listings
- Use updated titles for new criteria
- Provide error for invalid additional software source grouping length
- Show full criterion (incl. Cures Update) for test functionality mismatch
- Inappropriate test functionality should not be saved
1 June 2020
- Reset user's failed log in account when their accout is unlocked
- Stop distinguishing between bad un/pw combination and non-existent user
- Update BrokenSurveillanceRulesCreatorJob job to be non-blocking
- Add /activity/metadata/beta/versions endpoint
- Stop generating some stats for 2014 Charts
- Lockout user after too many failed login attempts
- Update validation of user data when updating user and fix security responses on User endpoints
- Add e2 criterion into v19 upload template
18 May 2020
- ONC-ACB should only be able to add or remove criteria if listing is in "Active" status
- Show repeated information in Questionable URL report
- Provide better error message for QMS Standards that are too long in upload
- Allow addition of active Macra Measures by ROLE_ACB
- Reduce incorrect "activity" in Developer reports
- Show all surveillance update activity in listing reports
4 May 2020
- Add inactive date, decertified date, and ids to generated CSVs
- Add /activity/metadata/beta/products endpoint
- Send individual emails when developer ban may be triggered
- Add comma between developer address line 1 and line 2 in CSV download
- Add 'Activity Level' column to questionable activity report
- Add /activity/metadata/beta/developers endpoint
- Require d12 and d13 when editing certain 2015 listings in certain scenarios
- Remove requirement for d4 from certain a criteria
- ACBs receive error when editing a listing with removed MACRA measures
- Questionable URL Report Generator not sending report
- Use correct URL for listing report in questionable activity email
20 April 2020
- Add Quartz job to update listings to be marked as Cures Update
- Change the order of display of revised criteria so "Cures Update" is first
- Remove no longer needed Quartz job
- Display "Cures Update" everywhere it's appropriate
- Add "Developer Details" Change Request type
10 April 2020
- Allow application startup despite missing criteria
8 April 2020
- Report on pending "Change website" requests for ONC-ACBs
- Add Specific d2, d3, d10 Activity to Questionable Activity Report
- Include '(Cures Update)' in criteria error/warning messages
- Update requirements for new certificates with respect to d12 and d13
- Support display of Listing's Cures Update status
- Lookup g1/g2 measures, test proc, test data by criterion ID
- Fix bug preventing ACB from approving a change request
23 March 2020
- Handle duplicate criteria numbers in CMS ID generation
- Remove the ability for ONC-ACBs to add/edit values for the test functionality field from (c)(3)
- Update quartz job to handle new criteria
- Add V19 Upload Template scheduled job.
- Add criterion objects to surveillance reqs and nonconformities
- Update job to add new Test Functionalities as required
- Return errors when attesting to both old and new criteria
- Add d2, d3, and d10 revised to 2015 CSV Definition file
- Add new CSV definition file with updated fields for new and removed criteria
- Update transparency attestations to work in accordance to new Cures rule
- Disallow generation of CMS EHR IDs containing any 2014 Edition Listings
- Mark any modification of 2014 Edition Listings as "Questionable Activity"
- Requires a "Reason for change" for any such edits, in a similar fashion to existing functionality with 2011 Edition Listings
- Update 2015 CMS EHR ID generation to handle removed and added criteria
- Restrict ONC-ACB Users from modifying any 2014 Edition listings
- Add schedulable job to update 2014 listing status
- Add new error to Inheritance Errors Report when ICS=0 and Gap=1 for any criteria and certification date after Cures rule effective date
- Restrict ONC-ACB Users from adding, editing, or removing any criteria marked as removed
- Restrict ACBs from altering Transparency Attestation
- Restrict ACBs from altering Transparency Attestation in all locations found
- Externalize developer validations
- Return all attestations no matter who is logged in
- Stop allowing ONC-ACBs to add/edit surveillance and/or non-conformities associated to 2014 Edition Criteria
- Update requirements on required criteria
- Change validation based on criteria relationships
9 March 2020
- Update various endpoints to return ID instead of Number for criteria
- Update job to remove more macra measures
- Expand quartz job to cover more data related to new Cures specific criteria
- Update quartz job to modify test functionality related to e1
- Allow upload of v18 2015 listing template with b3, d12, d13
- Allow edit and view of Cures revised criteria
- Restrict surveillance editing for things removed from the Program
- Add BOM to allow for display of extended characters in CSV files
20 February 2020
- Improve performance of some developer, product, and version API calls
- Add updateMacraMeasuresJob to update g1g2 MACRA measures from ACI to PI
- Discontinue validation checks against criteria marked as removed.
- Add new criteria data types to URL report
11 February 2020
- Allow generation of downloadable files
- Support view of all system triggers on Scheduled Jobs page
- Add job to remove the 2015 Upload Template (v17)
- Add "Self-developer" as field for Developers
- Add Quartz Job to insert new Test Tool
- Add job to modify Test Functionality name/number
- Update Transparency Attestation to have a new format
27 January 2020
- Add job to create four new criteria b10, d12, d13 and g10
- Add endpoint to get listing activity metadata with paging
- Add Certification Status to Listing object; updates XML structure
- Add some more statistics to the Weekly Summary Statistics report
- Allow ONC and ONC-ACB to split Developers again
2 January 2020
- Allow Admin/ONC users to edit listing if developer is banned
- Prevent ONC-ACBs from adding/editing surveillance referencing removed criteria
- Remove "Complaint Status Type" as distinct concept
20 December 2019
- Add questionable activity when b3 is added to listing after 1/1/2020
16 December 2019
- Update Questionable Activity Report to support a user defined range of days
- Add job to remove RT13 EC Macra Measure
2 December 2019
- Add scheduled job to update 2014 listing status
- Add a scheduled job that will remove 2014 upload templates
- Stop displaying "removed" criteria in download files or on Charts
- Add new (flagged) CSV definition file to be used when criteria are removed
- Add a 'removed' field to macra measures
- Add job to mark specific 2015 criteria as removed
18 November 2019
- Add endpoint to retrieve API Key activity metadata
- Update API Key calls to follow the metadata/details pattern used in other reports
- Create report for pending Website Change Requests
4 November 2019
- Do not require test tools or UCD Processes for 2014 listings that have ICS
24 October 2019
- Add Quartz job that will update a set of listing's status
- Add User scheduled job to generate and send a report of Pending Change Requests
21 October 2019
- Add ROLE_DEVELOPER User type
- Allow ROLE_DEVELOPER to create "Change Requests" to change their Organization's website
- Update objects in basic Certified Product response to not have errors/warnings inappropriately
- Fix error/warning update exception and count discrepancy
- Fix exception thrown when updating pending listing error/warning counts
- Fix warning count discrepancy of auto-fixed warnings in confirm listings screen due to failed pending listing confirmation
- Display CHPL Product Number change popup when oldest active status date is changed
7 October 2019
- Give errors on confirm if missing developer data
- Add scheduled jobs to gather and report on questionable urls
- System job to gather questionable URL data runs at 0330 GMT
- User-triggered job to email questionable URL report runs on demand
- Log appropriate activity upon user deletion
- Only log one activity when a user is deleted
- Update activity description to match in both user delete scenarios
23 September 2019
- Allow users to enter and retrieve surveillance reporting data
10 September 2019
- Update the user to
- Track the last logged in date
- Return the list of organizations the user is associated with
- Allow retrieval of deleted API keys when retrieving all keys
- Move announcements security into CHPL custom framework
- Allow upload of supporting surveillance documentation
- Reschedule nightly quartz jobs to run serially
26 August 2019
- Remove address re-use between organizations
- Summary Statistics error when listing w/o status exists (listing was deleted)
12 August 2019
- Support entry and edit of complaints
29 July 2019
- Remove "insert missing split activity" job
- Add fields for open/closed surveillance counts and surveillance dates
- Update permissions for announcements metadata activity endpoint
22 July 2019
- Add three more optional fields to the /collections/certified_products endpoint
- openSurveillanceCount, closedSurveillanceCount, surveillanceDates
- Remove insertMissingSplitActivity quartz job
- Add new endpoint for activity metadata for announcements. Endpoint is:
- /activity/metadata/announcements
17 June 2019
- Add endpoints to provide activity metadata for users, announcements, pending listings, corrective action plans, and pending surveillances
- Add activity for split actions to allow for better history display in listing 'eye'
- Add temporary quartz job to insert missing split activity. Can only be run by ADMIN and should be removed in a following release
- Add /versions/{versionId}/split endpoint
3 June 2019
- Add FF4j framework (feature flags)
- Add endpoints to provide ability for users to save filters for admin reports
- Updated product and version activity metadata to parse activity for merges and splits; better parsing of product and developer names if they have been deleted
- Correctly handle scheduled job update when an ACB is renamed
20 May 2019
- Moved permissions from many-to-many relationship with users to a one-to-many so that each user may only have one role. Invitations are sent slightly differently and logic enforces a user having a single role within the system while ACB and ATL users may still have access to multiple ACBs and ATLs. Returned user data is also slightly different as it has only a single role per user rather than a set of granted permissions. Affected endpoints include:
- /users/invite
- /users
- /acbs/{id}/users
- /atls/{id}/users
- Add endpoints to provide ability for users to save filters for admin report
- Updated product and version activity metadata to parse activity for merges and splits; better parsing of product and developer names if they have been deleted
- Added endpoints for ACB and ATL activity metadata
- /activity/metadata/acbs
- /activity/metadata/acb/{acbId}
- /activity/metadata/atls
- /activity/metadata/atl/{atlId}
- Deprecated existing endpoints for ACB and ATL activity
- /activity/acbs
- /activity/acb/{acbId}
- /activity/atls
- /activity/atl/{atlId}
8 May 2019
- Added endpoint /collections/decertified-developers to improve response time getting that data. This endpoint will eventually replace /decertifications/developers which has been deprecated
- Updated security for edit/split/merge of developers, products, and versions
25 April 2019
- Convert error about g1/g2 for 2014 listings back to warning
22 April 2019
- Quartz jobs that gather data delete old data and insert new data within a single transaction
- Support clustering of Quartz schedulers
8 April 2019
- Add /system-status API call which returns the combined server up/down status and the cache initliazing/ok status
- Deprecated /status and /cache_status API calls. Will be removed in a future release
- Add new API call /certified_products/pending/metadata for high-level information about pending listings. /certified_products/pending is now deprecated
- Add new endpoints for activity metadata for lisings, developers, products, and versions. Endpoints are:
- /activity/metadata/listings
- /activity/metadata/listings/{id}
- /activity/metadata/developers
- /activity/metadata/developers/{id}
- /activity/metadata/products
- /activity/metadata/products/{id}
- /activity/metadata/versions
- /activity/metadata/versions/{id}
- Add new activity details endpoint to get the detailed activity json
- /activity/details/{id}
- Upload surveillance job properly runs when there is an invalid CHPL Product Number in the upload file
1 April 2019
- Removed unused references to certification status in pending listing objects
27 March 2019
- Add error message for unparseable certification date on Listing upload
- Allow certain users to impersonate certain other ones
- Modify security to use CHPL managed user/ATL relationship
- Removed unused "compliance terms accepted" references
- Fixed error on banned developer page when banned developer has listings without meaningful use counts
- Use correct ROLE for surveillance authority
11 March 2019
- Fix incorrect developer appearing in product owner history after developer split
11 March 2019
- HTTP caching of several resources that are pretty static
- Update subject and email text of overnight surveillance broken rules report and all surveillance broken rules report
- Add developer split functionality
- Display more helpful error message when a Reason for Change is required
- Modify security to use CHPL managed user/ACB relationship
- Update validation of test tools based on workflow and ICS
25 February 2019
- Allow upload / confirm of macra measures RT 13, 14, 15
- Update behavior of pre-loaded caches which will affect the /cache_status call
- All pre-loaded caches have an additional copy loaded in the background when their data changes. The background cache is then swapped with the live cache when necessary
- The /cache_status call was reporting OK after initial startup but would later report INITIALIZING if user actions changed any cached data. Now once it reports OK it should continue to do so
- Save uploaded SED task/participant numbers as text; give error when cannot be parsed to numbers
11 February 2019
- Remove ACB from scheduled jobs when ACB is retired
- Save retirement dates for ACBs/ATLs
- Allow ROLE_ADMIN and ROLE_ONC to manage pending surveillances
- Allow ROLE_ADMIN to run Quartz system jobs
- Update Swagger documentation regarding API security
- Change InfoGard's name to UL LLC
- Allow newly added ACBs and ATLs to have users added to them
- Remove duplicate G1/G2 macra measures and warn the user for criteria that are not attested to
28 January 2019
- Added ROLE_ONC user role. ROLE_ONC replaces the existing ROLE_ADMIN and all relevant accounts were converted to the new role
- Removed references to ROLE_ONC_STAFF
- Add upload errors for test task id and participant id being too long
14 January 2019
- Change surveillance and sed report filenames to include timestamp when the file was last generated
- Update edit and confirm of criteria to remove phantom data
- Update certain warnings to errors for uploading, editing, and confirming certified products
- When validating pending listings, check for duplicate values, remove the duplicate value, and provide a warning message that the duplicate was removed
- Show better error message when user uploads Test Tasks with IDs that are too long
- Add definition file for the Surveillance - Basic download file
- Save "Developer identified targeted users" on upload/confirm
- Update invalid error and warning messages for upload file
17 December 2018
- Removed all previously deprecated API endpoints
- Removed the following endpoints:
- /atls/{id}/delete
- /atls/{id}/undelete
- /acbs/{id}/delete
- /acbs/{id}/undelete
- Remove showDeleted parameter from the following endpoints:
- /activity/acbs
- /activity/acbs/{id}
- /activity/atls
- /activity/atls/{id}
- /data/search_options
- /atls
- /acbs
- Removed space following the colon in the /cache_status response. {"status": "OK"} becomes {"status":"OK"}
- Removed space following the colon in the /status response. {"status": "OK"} becomes {"status":"OK"}
- Removed /notifications endpoints
- Add retired flag to ACBs and ATLs to replace the functionality that previously used the deleted flag
- Add Quartz job to require all users to change password on next login
- Update email notification about potential Developer ban to include:
- Reason for status change
- Reason for listing change
- Prevent users from using the following macra measures which are under review: RT13 EH/CAH Stage 3, RT14 EH/CAH Stage 3, RT15 EH/CAH Stage 3
- Do not show error for 2014 listings on upload or edit if they attest to g3, have ICS = true, and do not have any criteria marked as SED
- Fix issue with determining whether there is additional software associated with the certified product
3 December 2018
- 2015 Functionality testing is restricted by criteria
- Save 'reason' for developer's status change in questionable activivty
- Output 'reason' for developer's status change on questionable activity report
- When uploading a listing, remove duplicate G1 and G2 macra measures and provide a warning
- Implement user ability to reset their password using a unique link
- Change /cache_status endpoint to report "OK" status only when all pre-loaded caches have completed
- Add "user must reset password on next login" workflow
- Gives error when user tries to log in and needs to change password
- Adds end point to change_expired_password
- Update User edit to allow admins to require password change
- Add API Documentation file upload and download endpoints
19 November 2018
- Update ONC contact information for CHPL API and on user invitation emails
- Check various site counts in surveillance to make sure they are reasonable
- Refresh the listing collection cache on demand when data has changed vs at timed intervals
- Fix dependency injection problem that prevented implementing security in the chpl-service classes
5 November 2018
- Changed PUT /products call to not accept a productID
- Updated DELETE of api key to not use body
- Add developer and product contact information to 2014/2015 download file
- Add Quartz job to allow interruption of other jobs
- Enhanced "Certified Product Download File generation job" to be interruptable
- Add validation for submitted user information when creating a new user
- Properly handle invalid test tools entered into upload files by removing them and informing the user
- Make sure test tools are optional for 2014 ambulatory listings on g1, g2, and f3
- Remove required productID in /products PUT call that isn't used by the back end
- Insert listing update activity during meaningful use user uploads
- Update the description of the /certified_products endpoint to indicate that 'versionId' is a required parameter
- Fixed issue where adding ROLE via POST required body, even though no data was needed
22 October 2018
- Removed deprecated /certified_products/meaningful_use/upload. Use /meaningful_use/upload instead
- Added "last modified date" for surveillance and non-conformities to download files
- Move generate chart data app to quartz
- Fix creation of public announcement ignoring 'public' checkbox
- Fix incorrect errors for changing sed to false for a criteria
- Modified the Summary Statistics Report email
- Re-arranged the order of some headings
- Added totals for Total # of Developers with Suspended by ONC-ACB/Suspended by ONC 2014 Listings
- Added totals for Total # of Developers with Suspended by ONC-ACB/Suspended by ONC 2015 Listings
- Added active ACBs (when broken out) where the total for the ACB is 0
- Allow editing of meaningful use user count and history of muu counts for individual listings
- Fix creation of public announcement ignoring 'public' checkbox
- Fix incorrect error messages when editing SED = false for a criteria
8 October 2018
- When retrieving Pending Surveillances, the listing details will no longer be populated
- Move surveillance download file generation into quartz job to allow for better job management
- Move SED G3 download file generation into quartz job for allow for better job management
- Added scheduled job to send warning to users who have not used thier API key in the last X days
- Added scheduled job to delete api keys that have not been used in X days
- Added LastUsedDate and DeleteWarningSentDate to the ./key endpoint return value(s)
- Add password strength checker implementing a java fork of zxcvbn when anyone:
- creates a new User
- updates a password
- Add Developer Status to search results view
- Catch any unexpected error that occurs during a listing upload. Allow the error to be emailed to CHPL team if desired
- Invalid test functionality names are removed and an error is given to the user for 2014 and 2015 uploads
- Fix questionable activity report end of the month date rollover
24 September 2018
- Validate URLs on upload / confirm / edit
- Transparency Attestation
- SED Report File
- Other report file
- API Documentation (at criteria level)
- Developer website
- Add info messages for 2014 cms id widget
- Add info messages for 2014/2015 id widget
- Move questionable activity email code into quartz job to allow user scheduling
10 September 2018
- Add required reason business logic for developer bans
- Add API throttling
- Moved the Quartz scheduler to run in the Tomcat context
- Each Quartz job writes to a separate log file
- Add Open Surveillance Activities by ACB in the Statistics Report
- Add Open Nonconformities by ACB in the Statistics Report
- Return info messages for CMS ID missing criteria
- Extra test data/test procedure/test functionality/etc. no longer appears after attesting to a criteria with previously entered phantom data
- Fixed the "basic" certified product service to return the correct additional software code in the CHPL Product Number
- Fixed XML generation process to properly output
<tasks></tasks>tag - was previously outputing as<></> - Use "full name" and "friendly name" for users/contacts
- Fix reason required error to show again for certain listing updates
- Fix possibility of multiple developer status edits happening at the same time
27 August 2018
- Migrate "ICS errors report" to Quartz
- Added new Quartz job to gather and store ICS error data
- Added new user schedulable job that sends the Summary Statistics Email
- Updated manager to support ACB specific Jobs
- Migrate "Broken Surveillance Rules" report to Quartz
- Added new Quart job to gather and store surveillance error data
- Added new user schedulable job to send the error email
- Fix 2015 listing XML file creation process
16 August 2018
- Add nonconformity charts statistics endpoint
- Identify questionable activity based on the confirmed date of a listing rather than the certification date
- Add "Trigger Developer Ban" notification
- Migrate "Summary Statistics" to Quartz
- Added new Quartz job to gather and store Summary Statistics
- Added new user schedulable job that sends the Summary Statistics Email
- Added new endpoint for retrieving all jobs that user has permission to schedule
- Download XML file changes
- In the node
- AllVersions will now be structured:
<allVersions><version/><version/> ... </allVersions> - SuccessVersions will now be structured:
<successVersions><version/><version/> ... </successVersions>
- AllVersions will now be structured:
- In the node
- CertificationStatusEvents will now be structured:
<certificationEvents><certificationEvent><eventDate/><id/><reason/></status></certificationEvent> ... </certificationEvents> - TestingLabs will now be structured:
<testingLabs><testingLabs/><testingLab/> ... </testingLabs>
- CertificationStatusEvents will now be structured:
- In the node
- Criteria will now be structured:
<criteriaList><criteria/><criteria/> ... </criteriaList>
- Criteria will now be structured:
- In the node
7 August 2018
- Require start and end data parameters on all /activity API calls that are not for a single item
- Added JavaMelody to provide Tomcat performance monitoring page
- Restrict certain /activity data to admin, acb, atl, or cms users as appropriate
- Update text describing /download endpoint
18 July 2018
- Legacy 2014 listings (those with product numbers like "CHP-") are allowed to have attested to 170.314 (g)(3) but not required to have a criteria with SED and vice versa
16 July 2018
- Fixed bug where user erroneously receives a Duplicate CHPL Product Number error when editing a product
5 July 2018
- Fix display of 2015 products due to problems with getting test functionalities
5 July 2018
- Converted "Downloadable Resource File" generation application to Quartz Job
- Updated API endpoints to not return "System jobs" in regular GET call
- Logs for individually run apps will now show up in separate files under the logs directory
- Validate 2014 test functionalities to ensure they are valid based on practice type and certification criterion
- Modified certified product details to return the allowable test functionalities for each criteria
- Save and display test tool name and test tool version for criteria 170.314 (c)(1)
- Save and display privacy and security framework for 170.315 (a)(7)
18 June 2018
- Updated the XML and CSV file creation batch process to retrieve data asynchronously
- Added check for 2015 listings to ensure if they have attested to G1 or G2 that they also have listed G1 or G2 macra measures for at least one criteria
- Added Quartz Scheduler component
- Includes API endpoints for GET/PUT/POST/DELETE of schedule Triggers
- Converted Cache Status Age app to Cache Status Age Quartz Job
- Updated validation to ensure (g)(3) certification is valid iff at least one criteria attests to SED
- Fix a bug that allows ROLE_ADMIN to see pending certified products and surveillances
6 June 2018
- Handle blank or null test tool version in listing updates
4 June 2018
- Added new service /activity/corrective_action_plans to return just legacy corrective action plan activities
- Add new chart: New vs. Incumbent Developer chart
- Update chart data generation application
- Add API endpoint to retrieve chart data
- Refactored other Chart data generation to increase speed
- Updated URLs and verbs for several REST endpoints
- Old endpoints have been deprecated
- Add new chart: Count of Developers & Products by Edition & Status
- Update chart data generation application
- Add API endpoint to retrieve chart data
- Handle SED boolean parsing and UCD Process existence mistmatch for 2014 upload
21 May 2018
- Add endpoint /certified_product/{chpl_product_number} to return basic information about a certified product
- Add endpoint /certified_product/{chpl_product_number}/cqm_results to return CQM results information about a certified product based on a CHPL Product Number
- Add endpoint /certified_product/{chpl_product_number}certificationtion_results to return certification results information about a certified product based on a CHPL Product Number
- Add endpoint /certified_product/{chpl_product_number}/certificationtion_results to return certification results information about a certified product based on a CHPL Product Number
- Add endpoint /certified_product/{chpl_product_number}/ics_relationships to return relationship tree information about a certified product based on a CHPL Product Number
- Add endpoint /activity/certified_product/{chpl_product_number} to return activity information about a certified product based on a CHPL Product Number
- Add new chart: Criterion / Product statistics
- Update chart data generation application
- Add API endpoint to retrieve chart data
- Fix Summary Statistics Report missing ISCA count under the Total # of Unique Products with Active 2015 Listings section
- Respect configured questionable activity window to allow a user to make edits that do not get logged as questionable activity for a short amount of time after a listing's certification date
- Fix bug restricting add/edit of Versions of Test Data
7 May 2018
- Added error on upload for qms to be true but have empty standards and vice versa
- Restrict CMS IDs from using deleted Listings for /search or /create
- Added endpoint /certified_product/{certified_product} to return basic information about a certified product
- Added endpoint /certified_product/{certified_product}/cqm_results to return CQM results information about a certified product
- Added endpoint /certified_product/{certified_product}/certification_results to return certification results information about a certified product
- Fixed bug with searching for Listings with lower case CHPL ID values
- Fix bug where uploaded Listings file with bad B1 cell isn't treated correctly
23 April 2018
- Add support for Multiple ATLs
- Upload / confirm workflow
- Edit Listing validation & questionable activity
- Add counts of 2015 Listings with Alternate Test methods to Summary email
- Wide variety of linting changes
- Enhanced performance when retrieving Certified Product Details
- Fixed counts for Total # of Active (Including Suspended by ONC/ONC-ACB 2014 Listings) in the Summary email
9 April 2018
- Add ability to add G1/G2 measures for non-attested criteria
- Fixed bug that allowed duplicate Chpl Product Numbers during upload
26 March 2018
- Charting endpoints
- Participant/Age counts
- Participant/Education counts
- Participant/Ender counts
- Participant/Professional Experience
- Participant/Product Experience
- Participant/Computer Experience
- Charting application updates
- Participant/Age counts
- Participant/Education counts
- Participant/Gender counts
- Participant/Professional Experience
- Participant/Product Experience
- Participant/Computer Experience
12 March 2018
- Add endpoint for retrieving SED/Participant counts to be used for charting
- Add application to generate SED/Participant counts to support charting
- No longer show errant error messages for missing g1/g2 values if criteria not attested to
26 February 2018
- Enhanced certification status change questionable activity abilities to support
- Change of current status date
- Any modification of certification status history
- Enabled questionable activity window
18 February 2018
- Add fuzzy match functionality for uploading of UCD Process, QMS Standard and Accessibility Standard names
- Add warning messages that name values have changed for certain Processes or Standard names
- Add /data/fuzzy_choices controller for getting and updating fuzzy match choices
- Look for required reason for certain questionable activities; error on those actions if a reason is not found
- Add reason to questionable activity report
- Add reference of pending listing to confirmed listings to enable tracking between pending and confirmed
- Add certification status change reason to listing activity entities and to questionable activity report
- Use most recently generated CMS ID if multiple exist with same product list set
1 February 2018
- Do not require UCD Processes for 2014 criteria with SED true if the listing ICS is false
- Do not require a reason for listing certification status change
25 January 2018
- Do not allow users to update listings certification status history if they remove the original Active status
19 January 2018
- Save g1 and g2 success values for new 2014 listings with 170.314 (a)(4) criteria
17 January 2018
- Add new surveillance upload job type; process large upload files as background jobs
- Allow reason for certification status change for any listing. Require reason for certification status change if new status is Withdrawn by ONC-ACB
- Stop using 'certificationStatus' field; instead use "latest" of the certificationEvents array for current status
- Statistics correctly account for deleted listings/unique products
2 January 2018
- Made ICS Source required for 2015 w/ICS on upload/confirm/edit
- Test tools are required for 170.315 (b)(8)
- GAP is required for 170.314 (b)(5)(B)
- Add warning messages to uploaded listings and surveillance regarding invalid characters found
- Do not include 'deleted' field in listing update generated sql
- Allow Listings to have CHPL IDs that match "deleted" Listings
- Allow ROLE_ADMIN to edit listings
- Allow ROLE_ADMIN to create and edit surveillance
18 December 2017
- Update ROLES
- Change ROLE_ACB_ADMIN to ROLE_ACB
- Change ROLE_ATL_ADMIN to ROLE_ATL
- Remove ROLE_ACB_STAFF
- Remove ROLE_ATL_STAFF
- Do not allow duplicate QMS Standards or UCD Processes to be added
- If GAP is not specified for 170.314 (b)(5)(B) a warning will be returned instead of an error
5 December 2017
- Added /data/test_data service to get all criteria with allowable test data
- Added /data/test_procedure service to get all criteria with allowable test procedure
- Use new test data values for upload and validation of listings
- Use new test procedure values for upload and validation of listings
- Support 2015 upload template v12
- Surveillance upload fixed to match on criteria number without space between number and letters
20 November 2017
- Re-wrote API search code. See documentation for the HTTP GET /search call for information
- Fix 60 day date range check for activity when date range overlaps daylight savings
07 November 2017
- 170.315 (b)(8) is not required to have test procedures or test tools. Will become required on the Nov 20 push
06 November 2017
- Add certified_products/sed_details endpoint that returns the latest SED all Details document
- Add new version of 2014 upload template that adds a GAP column for 170.314 (b)(5)(B)
- Change warning message for transparency attestation saving
- Re-work handling of questionable activities. Do not send an email each time questionable activity appears, but save it all and send as a weekly report to subscribers instead
- Fix bug where uploaded SED Test Participants with identical demographics are not recognized correctly
- Improve handling for upload files that have blank columns at the end
23 October 2017
- Support multiple upload file templates for 2015 listings. The current template continues to be supported and also one that includes ICS family information, removes g1/g2 information for 170.315(g)(7), adds test tool and test data fields for 170.315 (b)(8), and removes test tool and test data fields for 170.315 (f)(5)
- Fix issue preventing the creation of new users
12 October 2017
- Do not allow g1 and g2 booleans for 2015 criteria
11 October 2017
- Do not support /certified_products call without a ?versionId parameter
10 October 2017
- Remove /certified_product_details?productId= call
- Create separate standalone applications for creating surveillance downloads vs each listing. Will need to make the following cron changes:
- Remove
15 5 * * * cd /opt/chpl && ./generateXml.sh && ./cleanupXml.sh -dn 15 >> cleanupXml.log 2>&1 - Add
0 1 1 1,4,7,10 * cd /opt/chpl && ./generateListingResources.sh 2011 - Add
0 1 * * * cd /opt/chpl && ./generateListingResources.sh 2014 - Add
0 1 * * * cd /opt/chpl && ./generateListingResources.sh 2015 - Add
0 1 * * * cd /opt/chpl && ./generateSurveillanceResources.sh - Add lines as well for the cleanup script (may have been done by andlar already)
- Remove
- Return HTTP 404 for /certified_products/{id}/details if listing has never existed or has been deleted
- Change any URL with an ID in the path to return 404 if that ID is not found
- Allow all URLs to be accessed with or without a trailing slash ('/')
- Do not show macra measures for 2014 listings
25 September 2017
- Speed up API call to retrieve a Listing's entire ICS family
- Add /data/job_types call to get list of possible background job types that can be run
- Add background job processing and apply it to meaningful use user upload
- Update 'cleanupXml' script to allow for some parameters
- Save ICS family data when going through pending listing confirm workflow
11 September 2017
Backwards compatibility breaking changes
- Reorganize SED data within the listing details request and response. UCD and Test tasks/participants are now located under a "sed" field. Listing update code has changed significantly as a result
- Add warnings for 'phantom' criteria data where criteria is not attested to but has associated data from the upload
- Added SED Task/Participant required fields
- Added errors on edit/upload/confirm
- Allowed uploads to complete with missing age range/education
- Added API call to retrieve a Listing's entire ICS family
- Show all errors when editing a listing and a criteria that requires SED does not have it (was previously stopping at the first criteria in error)
14 August 2017
- Enforce ICS codes with 2 numbers (00-99) instead of just 1 number
- Improve error messages returned for unknown user-entered values for SED age and education levels
- Use subscriptions for weekly statistics email and questionable activity emails
- Summary statistics CSV should show same day of week that script was run
- Fixed summary statistics incorrect email counts
31 July 2017
- Improve capturing of database errors on listing upload or update
- Improve error handling for invalid length/format codes in the CHPL unique product id
- Send a cache-cleared header when the search cache has been evicted
- Eliminate on-demand listing search cache eviction
- Add timed refresh of listings search
17 July 2017
- Added /collections/developers API call to return a list of all developers, attestations, urls, and counts of their listings
- Completed bulk reject of pending surveillance
- Pulling pending surveillance validation out of a db table instead of calculating on the fly to speed up large uploads
- Fixed incorrect contact name displayed if pending surveillance or listing had already been confirmed/rejected
- Only evict basic search cache if listing create/update methods return successfully
3 July 2017
- Improve /update API call speed. Selectively update only items that have changed rather than doing a replace on the entire listing
- Allow mass reject of pending surveillances
3 July 2017
Backwards compatibility breaking changes
- Changed ICS field in certified product details object (used on get and update calls) from a boolean to a more complex object to include whether something was inherited and a list of parents and children
- Changed ICS code from a string to an integer
- Added validation to warn on missing parents if ICS is indicated
- Added an additional app that runs to send out notifications of ICS inconsistencies (need to add cron for that)
- Added description of surveillance triggers to emails
- Added developer and listing statistics for ACBs to ONC summary email
19 June 2017
Backwards compatibility breaking changes
- Removed /decertifications/certified_products and /decertifications/inactive_certificates API calls. This same data can now be accessed through the /certified_products API method
- Add decertification date, numMeaningfulUse, transparency attestation url, and api documentation url fields to the flat search results
- Fill in blank cells for subelements in nonconformtiy and surveillance downloads
5 June 2017
- Add schemagen xsd generation to the build. Updated JAXB XML annotations on relevant Java classes. Requires an extra step of copying the XSD to the downloads folder after the build. CHANGES XML FILE FORMAT
- Allow corrective action plan resolution to be blank even when the end date is filled in
- Added surveillance trigger for Open Nonconformity with closed CAP > 45 days prior
22 May 2017
- Return exception with last modified user's contact info when deleting or confirming a pending Certified Product that has already been deleted or confirmed
- Add surveillance rule when a Listing has an open Non-conformity and status of "Withdrawn by..."
- Add daily/weekly surveillance trigger emails that use notification subscriptions and are specific to ACB
- Update /data/test_standards to include certification edition
- Disallow duplicate test standards per certification criterion
- Check for exisitng test standard in the listing's edition before adding a new one (eliminates repeated entries in the database and keeps the selection dropdowns manageable)
- Update all test standard entities, dtos, and domain objects to include certification edition
- Use error message file for error messages and support internationalization
8 May 2017
Backwards compatibility breaking changes
- Allow users to specify a condition in the listing update request whether or not the developer status should be changed. Only applicable if listing status is changing to Withdrawn Under Surveillance by ONC-ACB
- Limit activity searches to a configurable max date range (currently set to 60 days)
- Validate the privacy and security framework users enter for listing criteria
- Add notifications service to allow registration, getting, and deleting of email subscriptions
- Add /data/notification_types service to send back the types of notifications a logged-in user may work with
- Add certification edition to test functionality and check that the right edition of test functionality is used during listing edit and upload
24 April 2017
- Update parameters for HTTP GET /search call. All the same options that were previously available only to POST exist for the GET. Updated related API documentation
- Add /cache_status endpoint. Returns a status of OK or INITIALIZING based on whether the basic search cache has been loaded
- Add statistics to ONC weekly email body and csv file
- Add endpoint /{productId}/split to allow splitting of products and moving versions to the old or new product
- Add optional contact information for a product that can be changed by ONC or ACB Admins
- Add optional showDeleted flag to the /data/search_options call. Defaults to false but setting to true will include deleted ACBs in the response
- Fix error saving developer with updated contact information
10 April 2017
- Show error to ONC-ACB during upload and edit when Surveillance Activity has a nonconformity with an entry for "Date Corrective Action Plan Was Approved" but no entry for "Date Corrective Action Plan Must Be Completed"
- Show error to ONC-ACB during upload and edit for a Surveillance Activity nonconformity that violates business rules for "Corrective Action Plan End Date"
- Add statusEvents field to developers to track past status changes (Active, Suspended by Onc, etc) and the date on which each status change occurred. Provide create, read, update, and delete API functionality for developer status changes
- Add decertificationDate to the data returned in the banned developers API call
- Updated basic search objects that get returned:
- remove has open surveillance, has closed surveillance, has open nonconformities, has closed nonconformities
- add surveillanceCount, openNonconformityCount, closedNonconformityCount fields
- Cache results of /certified_products/pending to improve view time by ~683%
- Add Surveillance Friendly ID to Surveillance (Basic) CSV file download
- Add optional "fields" parameter to /certified_products call to allow only sending back a custom list of fields
- Add nonconformity status to daily and weekly surveillance broken rules reports. Only include values in the reports with Open nonconformities
- Fix misaligned cells in nonconformity download file
27 March 2017
- Add authority to surveillance to allow end user to tell whether ONC or ACB created a surveillance activity
- Disallow saving of Surveillance without close date but with no open Non-Conformities
- Improve performance of /surveillance/pending by ~643%
- Fix an Internal Server Error when obtaining user activities and there exists a deleted user
13 March 2017
- No longer use ACLs that were getting added to each pending product x ACB Admin
27 February 2017
- Add basic search API endpoint to return all certified products
- Add surveillance statistics to weekly email
- Protect basic surveillance report and only allow download by ONC ADMIN and ONC STAFF
- Add functionality to allow a "rolling cache" that refreshes the cache asynchronously while allowing the user to view currently available cached data
- Make caches eternal so the user gets cached data more often
- Add columns to surveillance reports (ACB Name, certification status, hyperlink to CHPL listing) and reformat dates (yyyy/mm/dd)
- Add daily and weekly surveillance oversight reports to calculate which surveillance items have broken a given set of rules
- Environment properties have been added:
#oversight email properties
oversightEmailDailyTo=sample@email.com
oversightEmailDailySubject=Daily Surveillance Broken Rules Alert
oversightEmailDailyNoContent=<p>No surveillance oversight rules were newly broken in the last day.</p>
oversightEmailWeeklyTo=sample@email.com
oversightEmailWeeklySubject=Weekly Surveillance Broken Rules Alert
oversightEmailWeeklyNoContent=<p>No surveillance oversight rules are broken.</p>
suspendedDaysAllowed=30
capApprovalDaysAllowed=75
capStartDaysAllowed=10
- To run the weekly report at 00:05 on Wednesdays, add a line like the below to crontab
5 0 * * 3 cd /chpl/chpl-api/chpl/chpl-service && ./generateWeeklySurveillanceOversightReport.sh
- To run the daily report at 00:05 every day, add a line like the below to crontab
5 0 * * * cd /chpl/chpl-api/chpl/chpl-service && ./generateDailySurveillanceOversightReport.sh
7 February 2017
- Add G1 and G2 macra measures to certified product upload, edit and detail display BREAKS BACKWARDS COMPATIBILITY
- Add functionality to get Meaningful Use User Accurate As Of Date and update it
- Check certification date and additional software code vs supplied data for CP edit and update code if necessary
- Add API call for decertified certified products with inactive certificates
- Update API call for decertified certified products to not include products with certification status 'Withdrawn by Developer'
- When a Certified Product is marked as "Withdrawn by Developer under Surveillance/Review" by an ONC_ADMIN or ACB_ADMIN, update Developer Status to "Under Certification Ban by ONC"
- Exclude Developers with status "Suspended by ONC" from the /decertifications/developers API call
- Selectively evict caches in order to improve website performance
- Update 2014 validator retired test tool logic to handle CHPL-XXXXXX products that will not have an icsCode
23 January 2017
- Improve website performance:
- Initialize cache stores asynchronously at server startup
- Increase cache timeout to 1 hour
- Add caching for /certification_ids API call
- Add caching for /pending API call
- Add caching for /search API call
- Add caching for /decertifications/developers
- Add caching for /decertifications/certified_products
- Update caching for /search_options API call
- Cache underlying data that improves call speed for many other API calls
- Added properties to environment.properties related to cache timeout
enableCacheInitialization=truecacheClearTimeoutSecs=15cacheInitializeTimeoutSecs=300
- /authenticate now returns 403 Forbidden for bad credentials instead of 500 Internal Server Error
- Add new certification status for products
- Allow 0 for number of randomized sites and total sites for surveillance
- Remove products marked Suspended By ONC from Decertified Product search
- Allow retired test tools where certified product ICS=true
- Fixes exception when getting back activity performed by a user that has since been deleted
- Fixes innaccurate error message if a user tries to add surveillance to a product under an ACB they are not associated with
6 January 2017
- Add API methods for surveillance-related acivities. This includes upload, confirm, and reject for the bulk upload of surveillance data. It also includes create, update, and delete for singular changes to surveillance. Surveillance and associated non-conformities are returned with certified product details
- Add API call to support updating certified_product meaningful_use_user counts with a CSV upload in CMS Management
- Change behavior if certified product is marked as suspended or terminated by ONC. These statuses also result in a developer status change and require ROLE_ADMIN
- Add API call to get decertified developers with developer name, the developer's associated ONC_ACBs, the developer status, and the sum of the developer's estimated number of meaningful use users for all certified products associated with the developer
- Add API call to get decertified certified products with pageCount set to the total number of decertified products
- Add certificationDateStart and certificationDateEnd as advanced search parameters
- Change corrective action plan search parameters to new surveillance search parameters - NOT BACKWARDS COMPATIBLE
- Send questionable activity email when product owner changes (not during a merge)
- Add /surveillance/download[?type=all|basic|nonconformities] endpoint to allow download of CSV file with all surveillance and download of CSV file with surveillance that resulted in nonconformities
- Add lookup to new tables for certification status event history
- Add date of last certification status change to certified product details
- Add script cleanupXml.sh to remove download files older than 30 days except for the first of each month. Needs to be given executable permission and have a cron job set up
- Add decertification date to certified product details CHANGES XML DOWNLOAD FORMAT
- Changed transition of care calculations for the EHR Certification ID to more closely match the rule
17 November 2016
- Mark all DAO methods that return certified product details as transactional so they can retrieve the product owner history. Fixes issue with summary email being sent and with xml download not being generated
15 November 2016
- Add ability to retrieve and edit product ownership history (which developers a product has previously been owned by). BREAKS BACKWARDS COMPATIBILITY when retrieving certified product details
- Add "showDeleted" parameter to /developers call. Defaults to false
- Make it impossible to confirm duplicate pending certified products
- Ability to edit a certified product without security authorization
21 October 2016
- Added caching to searchOptions API call to speed up search page
- Temporailly turned off due to transaction/caching issues
- Updated the algorithm for calculating weekly aggregate counts in order to take into account deleted developers/products
- Generating simple CSV files for quicker download and viewing than the large XML files
- Added "format" parameter to the download API endpoint which can be blank and will default to xml. Either xml or csv may be specified
- Added Developer status view / edit
- Cleaned up persistence.xml resource files
- Added role 'ROLE_ONC_STAFF'
- Allowed ROLE_ONC_STAFF access to all report areas, including those previously restricted to ROLE_ADMIN only
- Trim spaces from splittable fields in CSV upload
7 October 2016
- Allowed searching by CQM or Criteria again
5 October 2016
- Addressed issue with rejecting or overwriting pending products. Re-uploading and rejecting should be functional again. Pending products will only be marked as deleted and will no longer have their status changed from 'Pending'
4 October 2016
- Changed certification status names previously known as Suspended, Terminated, and Withdrawn
- Created Java program to send weekly email with aggregate counts for developers, products, certified products, and 2014 + 2015 CPs
- weekly email will be sent to weekly addresses defined in summary email
- [TEMPLATE] for deployment, update the properties.environment to add summaryEmail property
- Updated /certification_ids/ call. Still returns the list of certification_ids and the date each was created. If user is ROLE_ADMIN, also returns a semi-colon separated list of CHPL product numbers with each certification_id
- Remove terms of use and api documentation from certified products
- Check product code, version code, and ICS code against specific sets of characters to make sure no special characters are used
- Add retired flag for test tools. Do not allow products to change associations with retired test tools
- Add script to generate weekly summary email that is run as scheduled cron job
19 September 2016
- Add optional argument 'edition' to /download call
- Generate the chpl-all file as well as a chpl-{edition} file for each edition present in the database for download
- Downloads chpl-all by default
- Allowed c3/c4 to be connected to CQMs
- Added error messages for c1/2/3/4-CQM mismatch
- Re-factored Certification Id web services to improve performance
- Added statuses object that shows aggregate number of certified products associated with each developer and product. These objects will allow the website search page to filter on a developer/product's number of certified products that are active/retired/withdrawn/suspended/terminated
- Updated /developers call to be faster
- Changed /developers/update to update transparency attestation based on acb name, not acb ID
- Re-factored Certification Id API controller to support new operations ("create", "search", "verify(GET)")
- Changed /certification_ids/all operation to just /certification_ids
- Pending 2015 products can now have CQM versions modified
- API Documentation Link is now correctly validated on upload and edit
- Added new style product number to CAP Activity Report descriptions
30 August 2016
- Added a new service certification_ids/all to generate JSON with two fields - the certification ID and the date created. This includes all certification IDS ever and could be large
- Change all /activity calls that used to accept a lastNDays parameter to accept start and end parameters instead. Start and end are longs and treated as timestamps. (Not backwards compatible)
- Set up log4j2 and set hopefully appropriate log levels
- Updated /activity API endpoint to incorporate new parameters to filter by API-Key, sort dateAscending, and filter by start & end date
- Do not allow 170.315 (d)(3) to mark GAP as true
- Added 'responsibleUser' field with all user data for /activity reports
- Removed CORSFilter in web.xml; this was preventing some ajax calls from other domains
- Add developer object to /activity/product calls using the developer present in "newData"
- Upload field values for SED parsed as integers but entered as floats were not saved. Fixed
- Task success avg was getting mixed up with Task errors avg
- Task time deviation optimal avg was getting mixed up with task path deviation optimal avg
- Test Task Participant Product & Professional experience was getting mixed up
10 August 2016
- By default do not return retired products. Still allow searching for retired products
- Remove visibleOnChpl filter from queries (not backwards compatible)
- Adjust developer merge code to automatically select transparency attestations for each ACB/Developer, throwing an error if an ACB has inconsistent attestations already defined for the developers being merged
- Add descriptions to CQMs in /details results
- Add descriptions to test standards and test functionality in /data/test_functionality
- For criteria that are eligible for and meet GAP, test tools, test procedure, and test data are not required
- ICS is no longer required when editing 2014 products
- Added optional inclusion of criteria met for Certification ID details through the API
2 August 2016
- The searchTerm parameter of a certified product search may now be a CHP- id or a 9-part unique ID or an ACB certification ID number. Wildcards are not supported
- Allow updating of accessibility standards list
- Added /data/test_standards
- Added /data/qms_standards
- Added /data/ucd_processes
- Added /data/accessibility_standards
- Modified /data/education_types (breaks backwards compatibility)
- Modified /data/age_ranges (breaks backwards compatibility)
- Modified /data/test_functionality (breaks backwards compatibility)
- Modified /data/test_tools (breaks backwards compatibility)
25 july 2016
- Add validation to CHPL product update so that it matches validation done on CHPL product confirm
- Pass errors in test tools and test functionality back to the UI
- Add task rating standard deviation to upload, confirm, and api get/update
- Check test functionality for invalid values on product confirm and edit
- Check test tools for invalid values on product confirm and edit
1 July 2016
- Added product id to Cert ID lookup results
16 June 2016
- Allow searching by certification status name
- Completed Lookup Certification ID API function
- Fixed chplProductNumber was null for 2015 products, now builds number from parts
13 June 2016
- Make test functionality optional for all certifications
- Return vendor contact and address information with certified product details
- Remove URL validation via regex
24 May 2016
- Change participant age to a range from a selectable list of ranges
- Changed 2015 and 2014/2015 Certification ID validation to no longer check CQMs
- Added more product details to Certification ID results
- Changed Additional Software in Certification ID results to be URL encoded
- Added feature to Certification ID generation to prevent formation of words in IDs
- Changed encodeCollectionKey to implement key values of base 36 and padded to 8 digits
- 170.314 (f)(3) does not require test tools for ambulatory products but does for inpatient
- Editing a product was requiring g1 and g2 when it should not have
- Trim spaces from the ends of all fields in the upload file
- Properly save test functionality and test tools if an invalid one was in the upload file but was edited to be a valid one during confirm
- Fix logging bug when invalid column header is in upload file
16 May 2016
- Added EHR Certification ID rest service
- Rearranged data for the corrective action plan reports/activity so there is just one activity event per CAP change
- Added EHR Certification ID rest service verify operation
- Fix parsing error when spreadsheet has only a single row
- Only return last N days of activity as requested
- Fix 2015 upload file validation to catch missing UCD Process, test tasks, and test participants
- Fix met calculation for Certification ID 2015 Ambulatory CQM validation
- Save sed testing end date and sed intended users on confirm
2 May 2016
- Increased 2015 column count to handle (a)(10) G2
27 April 2016
- Added fields to the corrective action plans
- Changed search parameter values for searching by corrective action plan (open, closed, none)
20 April 2016
- Moved developer information around into the standard object when returning product or pending product details
- Fix 'null' in developer report when transparency attestation is changed
- Standards tested against are now saved
- Functionality tested against is now saved
- Fix error related to merging of products
- Product ownership change shows up correctly in activity report.`
- Do not allow duplicate chpl ids in the same file unless they have XXXX (new developers)
12 April 2016
- Test tools are not required for 2014 g1 and g2
- Test data is optional in 2015 for everything except g1 and g2
- Improved education level name matching and error messages for education levels that are not in the database
- Allow portions of CHPL Product Number to be changed
- Allow ACB_ADMIN role to change the name of their own ACB
- Add service for version activity
- Trigger emails on version name change, product name change, developer name change, or certified product status change
- Test tool version is now saved
- Fix activity report link email
- Allow certification date to be changed
30 March 2016
- Check for questionable certified product updates and trigger email if found
- Return list of applicable transparency attestations for each developer
- Allow for empty transparency attestation and url values
25 March 2016
- API call added to check 'system is up'
- 2015 Upload process
- 2014 validation improved
- Email sending updated to conform with deployment
- Searching on criteria alone gives error
14 March 2016
- Add validation to 2014 products
- Update Download file generation
- Made Transparency Attestation an ENUM, URL per product
- Added "targeted users" to Certified Product
- Restrict uploads to CSV only
- Added CQM mappings to Certified Product
- Generate ATL/ACB codes if ATL/ACB is created
- Fix null value in announcement activity
29 February 2016
- Added ability to do new 2014 upload files
22 February 2016
- Added missing product number to CP manange select box
18 February 2016
- Changed Corrective Action Plan/Surveillance API parameters
- Added descriptions to API methods
- Changed API for certified products and certification results to match 2014 data requirements
- Allow multiple values for the 'hasCap' field in search
3 February 2016
- Set up swagger API and endpoint annotations
- Added code to create the XML download file
- Added code to allow a currently logged in user to get additional permissions if invited (/users/authorize)
- Adjust what happens when an ACB gets deleted. The ACB is marked as deleted and any users who were ONLY associated with that ACB (no other ACBs, no ATLs, no ADMIN role) will have their account disabled
- Add service to undelete ACBs and ATLs accessed by /acbs/3/undelete or /atls/3/undelete
- Added service for announcements
- Allow certified products with errors to be edited and remove those errors
- Fix email content typos
12 January 2016
- Integrated Swagger API generation
- Search on certifications / cqms
- Allow editing of products with errors
- Fixed various email content issues
5 January 2016
Features added or Updated
- Added terms of use and api documentation to the certified product apis
- Added ability to update transparencyAttestation field per vendor and ACB combination. ADMINs can update the transparencyAttestation for all vendor/ACB combinations and anyone else can only update that field for the ACBs to which they have access
- Added transparencyAttestation to the fields that come back with certified product details and search results. It is inferred from the vendor/ACB mapping
- Added APIs for testing labs, found under /atls urls
- Complete CHPL Product Number for 2015 products with testing lab code
Bugs Fixed
- Correct CHPL number is inserted in corrective action plan documentation activity
- Authorizing existing users for new roles or ACBs/ATLs is fixed
7 December 2015
Features added or Updated
- Updated the format activity streams for users are returned
- Updated search options to remove references to 2011 edition data in UI
- Added Api key requirement and Api key activity logging
- Updated search to allow search by "hasCAP" (search by Corrective Action Plan)
Bugs fixed
- ETL inserts to correct 170.314 (b)(5)(A) or (b)(5)(B) depending on Ambulatory/Inpatient
- ETL correctly inserts CMS9 and CMS26 CQMs
13 November 2015
First release