[Gnumed-devel] important bug warning

[Karsten Hilbert]

This is a warning about a bug potentially affecting clinical data.


RISK

        User-entered SOAP data can become misattributed
        to a wrong clinical episode of the same patient.

        Note: There will NOT be any data *loss* or
              *corruption*.


AUDIENCE AT RISK

        Users of the SOAP plugin shown in the attached
        screenshot.


SCENARIO

        - user enters SOAP into editor for new problem
        - user opens SOAP editor for an existing problem
          of type *health issue* (not episode)
        - user enters SOAP into said editor
        - user presses [Save all] button
        - user enters the *same* string as working
          title for both the entirely new problem as
          well as the to-be-newly-created episode
          of the existing health issue (say "bug test",
          as per screenshot)


RESULT

        GNUmed will save *both* SOAP entries under
        one and the same episode rather than under
        separate episodes of the same name (one
        unassociated and one under the health issue).
        Whether the one episode will be under the
        existing health issue or not depends on the
        order of editors in the SOAP plugin
        ("new / existing" or "existing / new").


WORKAROUNDS

        1) do not use [Save all]

        2) make sure to enter different working
           titles for each new problem

        3) do not open several editors for new
           episodes at once


CLEANUP

        There is no sure-fire way to identify whether
        this bug has affected any of your data.

        The attached SQL will uncover candidate rows
        potentially produced from this bug. Note, however,
        that there are also any number of legitimate ways
        for producing rows matching this query.

        You can run this query from your GNUmed client SQL
        analyzer plugin or from the command line:

        $> psql -d gnumed_v19 -U gm-dbo -f 
find-potentially_misappropriated_soap.sql


FIX

        GNUmed version 1.4.8 will be released shortly.

Karsten
-- 
GPG key ID E4071346 @ gpg-keyserver.de
E167 67FD A291 2BEA 73BD  4537 78B9 A9F9 E407 1346

screenshot_001.png
Description: PNG image

find-potentially_misappropriated_soap.sql
Description: application/sql