Skip to content

3.8.0 Release

Compare
Choose a tag to compare
@iksheth iksheth released this 27 Sep 15:46
· 674 commits to master since this release
27d4a08

Release notes- Bento Version 3.8.0 🍱

Features

Authentication Service

  • Supported Identity Providers include NIH, Login.gov, and Google
  • NginX reverse proxy to support authN

Authorization Service

  • API to support authorization
  • Role Based Access Control (RBAC)
  • Authenticated members can view all metadata
  • Metadata is not visible to unauthenticated users
  • API is protected from unauthenticated users
  • 2 configurations available for public accessibility of data

Data Access Request (DAR) Service

  • Designated page in web application
  • Automated emails to support approval process

Global Search

  • public API created

Data Loader

  • Warning for missing parent nodes or mapping columns

Data Model

  • "ACL" field added to File node

System Upgrades

  • Migrated to ECS/Fargate
  • Automated deployment pipeline

Bug Fixes

  • The login page shakes when user clicks on EXPLORE Tab or LOGIN/REGISTER
  • Error (Please wait communication with server!) is thrown when user logs in with NIH account
  • Error (Please wait communication with server!) is thrown when user logs in with Login.gov
  • The response header returned by NIH Login.gov should not include the domain name
  • The Admin user should not be presented with a Data Access Request page
  • DAR form auto-populates info from a previous user
  • User logging in to bento QA for the first time via google is not directed to the DAR page (directed back to login page).
  • Submit button should be disabled when all required fields are not supplied in the DAR form
  • Incorrect message displayed when user submits DAR
  • Above the DAR form "Membership Status" should not be empty
  • Login.gov not returning first and last name of users
  • Incorrect status for pending requests column in user profile page for members and non-members
  • Users with a revoked or rejected DAR should not have access to protected data
  • Bento member users don't see lock icons for arm-level files they don't have access to
  • End User does not receive an email upon submission of Data Access Request
  • Admin does not receive an email upon submission of Data Access Request
  • End User does not receive an email upon approval of Data Access Request
  • End User does not receive an email upon rejection of Data Access Request (DAR)
  • Home page throws 404 error when user logs out
  • A member who has all access removed should not see membership status as Active
  • When user submits a DAR, it doesn't appear on "Pending Request" page for Admin
  • Arm names are not displaying in any table or dropdown
  • The comment entered for approval or rejection is not including in the body of the email
  • A member who's all access is removed should not be removed from "Manage Access" page
  • "Request Date" column is missing from "Pending Requests" page
  • For Admin users total numbers of arms doesn't display
  • Full text doesn't display on "User Profile" page fields
  • Admin Portal->Pending data access requests->Admin user is able to see the same arm request twice.
  • Arms approved / rejected is not listed in the email
  • [Revoked and Rejected] status should not be listed on User Profile page.
  • Versions in deployment.yaml are not matching with versions in sysinfo
  • Unexpected message displays when a member or a non-member user navigates to DAR page
  • When Admin approves a DAR, it doesn't appear on "Manage Access" page
  • Clicking on categories (Programs, and Data Model) does not redirects users to either the Login page or the DAR page
  • Wrong message displays to unauthorized (non-member users)
  • Public Access: Default for the Bento reference implementation should be configured "Metadata Only"
  • File download-> Unable to download the files as expected from Access column.
  • As a member user when I click on "Files" tab, I see a blank page
  • Unauthorized users (non-member) that have not submitted a DAR appear on "Pending Request" page
  • Clicking "Explore and Programs" tabs do not redirect Inactive user to DAR page
  • Submit button should be disabled if user has submitted DAR(s) for all available arms
  • Admin Portal->PENDING REQUEST Individual Review-> Multiple DAR Submissions are being aggregated
  • Wrong tooltip displays upon hover of files users are not authorized to access
  • Admin Portal->PENDING REQUESTS -> multiple DAR Submissions not listed separately
  • Approved or rejected DARs reappear when admin navigates back to "Review Data Access Requests" page
  • Global Search: Clicking on any categories (Cases, Samples, Files or others) should not redirect users to either the Login/DAR page
  • Clicking on any categories (Cases, Samples, Files or others) should not redirect Admin user to DAR page
  • The focus stays on "Manage Access" or "Pending Requests" page after admin logs out
  • Admin Accounts ->Admin user ->Unable to logout for the first time
  • Admin portal->Page Reload->Page crashes after approve/reject request
  • Admin Portal->Membership Status column displays as empty after changing member account to admin role.
  • Admin Portal->Edit Non-member->Role field (default value)displays as empty.
  • Admin Portal->Received " An error has occurred in loading component: Error: undefined"
  • A non-member converted to an Admin cannot access Admin Portal
  • Functionality of the background slider in donut section reverses after a forced refresh in black background