============================================================================= Run Date: JUN 27, 2024 Designation: WEBP*1*39 Package : WEBP - PATIENT CENTERED MANAGEMENT Priority: Mandatory Version : 1 SEQ #38 Status: Released Compliance Date: JUL 28, 2024 ============================================================================= Subject: PCMM WEB DEFECT AND SECURITY SCAN REMEDIATION III Category: - Informational - Other Description: ============ The purpose of the patch is to remediate defects, security scan findings and add tools for troubleshooting. There are a total of 6 items, 3 of which are defects. Defects: -------- 1. CMMW-1568 - Three Providers with TEAM ROLE Wh Primary Care Provider not showing on Canned report 2. PCMMW-1518 - Cannot Pull Up Teams (Infinite Spinning) 3. PCMMW-1579 - Station drop-down is not shown when user pulls up a team first time even if team has no assignments. Adaptive Maintenance: --------------------- 1. PCMMW-1530 - Remediate CORS vulnerability flagged by WASA Scan in PCMM and UM 2. PCMMW-1514 - Prevent aborting VistaSync job on error when saving job result item - ignore error, it's not important enough to abort whole job 3. PCMMW-1527 - Create JMX call to get patient encounters through JMX for encounters troubleshooting Patch Components: ----------------- Files & Fields Associated: File Name (Number) Field Name (Number) New/Modified/Deleted ------------------ ------------------- -------------------- N/A Forms Associated: Form Name File Number New/Modified/Deleted --------- ----------- -------------------- N/A Mail Groups Associated: Mail Group Name New/Modified/Deleted --------------- -------------------- N/A Options Associated: Option Name Type New/Modified/Deleted ----------- ---- -------------------- N/A Protocols Associated: Protocol Name New/Modified/Deleted ------------- -------------------- N/A Security Keys Associated: Security Key Name ----------------- N/A Templates Associated: Template Name Type File Name (Number) New/Modified/Deleted ------------- ---- ------------------ -------------------- N/A Remote Procedures Associated: Remote Procedure Name New/Modified/Deleted --------------------- -------------------- N/A Parameter Definitions Associated: Parameter Name New/Modified/Deleted -------------- -------------------- N/A Additional Information: ----------------------- N/A New Service Requests (NSRs): N/A Patient Safety Issues (PSIs): N/A Defect Tracking System Ticket(s) & Overview: -------------------------------------------- 1. CMMW-1568 - Three Providers with TEAM ROLE Wh Primary Care Provider not showing on Canned report. Problem: -------- Staff position assignment canned report shows team role for position as it was when staff was assigned. If role changes, report does not reflect the change. Resolution: ----------- Changed view that is used to generate report to get team role from position instead ot staff assignment. 2. PCMMW-1518 - Cannot Pull Up Teams (Infinite Spinning) Problem: -------- When changing station that team is assigned to, ream refresh hangs up indefinitely Resolution: ----------- The problem was with reference data pull for station that cause nullpointer exception. Fixed pull code. 3. PCMMW-1579 - Station drop-down is not shown when user pulls up a team first time even if team has no assignments. Problem: -------- When team data is pulled, station dropdown is empty. Resolution: ----------- The problem was with reference data pull for dropdown. Fixed pull code. Adaptive Maintenance Tracking System Ticket(s) & Overview: ---------------------------------------------------------- 1. PCMMW-1530 - Remediate CORS vulnerability flagged by WASA Scan in PCMM and UM Problem: -------- CORS security vulnarability was flagges by security scan Resolution: ----------- Reenable CORS filtering in configuration file 2. PCMMW-1514 - Prevent aborting VistaSync job on error when saving job result item - ignore error, it's not important enough to abort whole job Problem: -------- Sometimes when vistasync job tries to save job result item for job log, it gets database error and it causes whole job to be aborted needlessly Resolution: ----------- Added try/catch around code that causes error to prevent job aborting 3. PCMMW-1527 - Create JMX call to get patient encounters through JMX for encounters troubleshooting Problem: -------- When users claim that qualifying encounter did not flip assignment, there is no easy way to verify their claim, developer has to debug code and intercept raw data on encounters Resolution: ----------- Added code to JMX Console to perform encounter fetch so that they can be inspected without debugger. Test Sites: ----------- Memphis VA Medical Center (Memphis, TN) VA Montana Health Care System (Ft. Harrison, Miles City) SNOW Change Order #:--------------------CHG0494772 - Centralized Servers - Austin Information Technology Center, Austin, TX Software and Documentation Retrieval Instructions: -------------------------------------------------- PCMM Web patch, WEBP*1*39, is a centrally managed web-based application and will be implemented and deployed to a central web server. Sites do not need to download any file for the patch installation. Documentation describing the new functionality is included in this release. Documentation can be found on the VA Software Documentation Library at: https://www.domain.ext/vdl/. Documentation can also be obtained at https://download.vista.domain.ext/index.html/SOFTWARE. Documentation Title File Name --------------------------------------------------------------------- Deployment, Installation Back-Out, WEBP_1.0_39_DIBRG.DOCX and Rollback Guide WEBP_1.0_39_DIBRG.PDF PCMM User Guide PCMM_WEB_UG.DOCX PCMM_WEB_UG.PDF Other Software Files: --------------------- This release also includes other software files. Other software files can be obtained by accessing the URL: https://download.vista.domain.ext/index.html/SOFTWARE File Name Description -------------------------------------------------------- PCMMR_EAR-1.39.04.EAR Installation file PCMMR_UNATTENDED_EAR-1.39.04.EAR Installation file Patch Installation: =================== PCMM Web patch, WEBP*1*39, is a centrally managed web-based application and will be implemented and deployed to a central web server. No installation is required by sites. Pre/Post Installation overview: --------------------------------------- N/A. Pre-Installation Instructions: ------------------------------ Installation Instructions: ------------------------- ****************************************************************** ** PLEASE NOTE: THERE IS NO INSTALLATION FOR THIS PATCH. ** ****************************************************************** This informational patch, WEBP*1.0*39, is for PCMM Web. Installation is done on a centralized server. Please refer to the WEBP_1.0_39_DIBRG.PDF for more details. Post-Installation Instructions: ----------------------------- N/A Back-Out Plan: -------------------------- Backout plan is provided as part of deployment guide detailed in the Deployment, Installation Back-Out, and Rollback Guide (WEBP_1.0_39_DIBRG.PDF). Routine Information: ==================== No routines included. ============================================================================= User Information: Entered By : Date Entered : JUN 04, 2024 Completed By: Date Completed: JUN 26, 2024 Released By : Date Released : JUN 27, 2024 ============================================================================= Packman Mail Message: ===================== No routines included