CHANGELOG.md

Changelog

All notable changes to this project will be documented in this file. Pull requests should add lines under the Unreleased heading if they have notable changes.

Unreleased

Changes since v2.38

Fixes

• Resolved issue where workflow voting could not be removed, which caused UI to display raw translation keys due to nil voting values. (#3357)

v2.38 "Välimerenkatu" 2024-11-28

This release contains major changes to the REMS internal architecture regarding the caching of information. We have improved the caching behavior previously during the year, but now we drop the requirement for REMS to reload the application cache every hour or so. This was problematic, if the reload was slow, because it would stop REMS for a while and could lead to running out of memory. REMS got slower with more data, handlers and so on which made the problem worse.

The fundamental idea is that most information in REMS is cached, and can be served from the cache. We have tried to make this the fastest REMS release by going through all the previously sluggish actions. While this does not change the UI, the API or functionality, it is large enough to warrant this note. The release passes all our tests and has also been manually tested. Before deploying this release, consider doing some additional manual testing for your use cases.

About the REMS performance and test data. We have tested REMS performance using 1000+ catalogue items, 3000+ applications with 20+ largeish events each. The workflow contains 100 handlers each. We also test the forms with 200 fields. With these numbers, REMS performance is fine with any modern server with around 4 GB of memory.

Additions

• Catalogue tree now supports keyboard interactions for ARIA role="tree". Navigation works with arrow keys and Home/End, tree nodes can be opened/closed with Enter key, and default action (like add to cart) works with Enter key. (#3336)

Changes

• The logging of the simultaneous request count (rqc:) is now done for the request and response log lines only, and separately. Previously the same value was used for all logging in a request, which could be confusing as the actual request count can change between the lines.
• The performance has been improved when there are many handlers. (#3283)
• The error message "shake" animation has been removed. (#3298)
• The collapsible component no longer animates on open/close.
• If REMS is trying to send email, and if the address has an obvious problem, REMS will not try sending it again, but gives up immediately. This should avoid having many hopeless retries, if there is a typo in an email address.
• Form editor performance has been significantly improved. To give rough numbers, the editor now works smoothly with 200 form fields in test data. (#3105)
• The wording about experimental is removed from GA4GH API. It is already used in production. (#3299)
• Licenses are ordered consistently (alphabetically) wherever they appear. (#3302)

Fixes

• Empty the license attachment field if the upload fails. (#3292)
• Hooks set in extra scripts were overridden by initialization. The new place for them is rems_hooks. See docs/hooks.md for details. (#3351)

v2.37 "Laivapojankatu" 2024-05-16

Additions

• The "Change Form" function in administration has been expanded to be able to change both forms and workflows. From now on it is called "Update catalogue item". The old change-form API still exists but has been deprecated. (#3271)

Changes

• Invitation links work multiple times. Previously, they were single-use. The invitation token is spent on the first use and it grants the rights then. However, the user may still use the link later for navigating into the application or workflow in question. (#3275)
• Invitation gives a more informative error when handling user tries to join application. (#3291)

v2.36 "Laivapojankuja" 2024-03-13

Additions

• (Experimental) Voting options are expanded to have types, i.e. reviewer and handler voting. Use :enable-voting. (#3257)
• Email templates (:t.email/...) and event translations (:t.applications.events/...) now support named format parameters, and default english localizations have been updated for reference. While REMS moves towards fully supporting named parameters, all translations with index parameters should continue to work. Localizations with many parameters (like emails) have been burdensome to maintain with index parameters, so transitioning into named parameters is highly encouraged. (#3241)
• Processing states have been added. Now, in addition to the main states (draft, submitted, returned, approved, ...), the application tracks new "processing states" (i.e, "sub-states"). They can be added to facilitate for example standard bookkeeping of an application or technical integrations. The handler can change an application's processing state, when at least one has been configured in the application's workflow by the owner. Use :enable-processing-states. (#3259)

Changes

• Form fields in workflow admin pages are re-structured to show most often needed fields first.

v2.35.1 "Selkämerenkatu +1" 2024-01-16

NB: This release contains migrations!

Changes

• The EGA implementation has been removed as unnecessary. It's not used and the plugins supersede this feature. (#3239).
• The word experimental has been dropped from the catalogue tree API as it is a standard feature already. (#3251)

Fixes

• Fix issue with user roles after deletion. This was introduced in the previous release that optimizes cache updates. (#3243)
• Mark form as optional in catalogue item creation. Also consider categories optional unless the catalogue tree is enabled. (#3244)

v2.35 "Selkämerenkatu" 2023-12-13

NB: This release removes the experimental application PDF export API. The non-experimental PDF export API is preferred instead. (#3098)

Additions

• By default administration pages show only "own organization" items. (#2046)
• The command-line use of REMS has been sped up. There are new commands dev-setup and perf-setup that dev_db.sh uses to start faster (a combination of migrate and data).
• Application expiration can be configured with :application-expiration-process-limit to process a subset of applications instead of everything at once. (#3225)
• Show organization in create workflow Forms dropdown (#3230)
• When copying an item, reset the organization, if it's not owned by the user. (#2880)
• Added malware scanning support. When :malware-scanner-path is set REMS will scan uploaded attachments and licenses with the executable at the provided path. Enabling :enable-malware-scanner-logging will pass the scanner executables output on STDERR to the REMS application log. (#2905)

Changes

• Application expiration now logs more, and more often. (#3225)
• Catalogue page has been sped up with optimizations. The API supports not joining organization data if not required (join-organization=false).
• Adding a user to blacklist does not reload the full cache anymore. This should make it faster. Also the user is directed to Applications page after delete, not to Catalogue.
• Deleting a (draft) application is now faster because it does not reload the full cache, only update it.
• Editing workflows (e.g. handlers) should now be faster because it does not reload the full cache, only update it.

Fixes

• Big improvements in performance from small improvements in how applications and events are processed and cached. REMS should be able to handle a 100k event DB without breaking a sweat. (#2783)
• Administration dropdown buttons should now respond to clicks more widely, and not only by directly clicking text. (#3167)
• Catalogue item unarchive should no longer fail when form does not exist. (#3217)
• Current page updates correctly. (#3218)
• Fixed faulty check in application expiration that prevents sending expiration notifications for applications, and expiring those applications. (#3225)

v2.34.2 "Santakatu +2" 2023-11-03

Fixes

• DUO codes in draft saved event no longer cause schema validation error when :enable-duo config is false.

v2.34.1 "Santakatu +1" 2023-11-03

NB: This release contains migrations!

Fixes

• A bug in event selection prevented migration (introduced in v2.34) from applying properly. This release contains a fixed version of that migration.

v2.34 "Santakatu" 2023-10-31

NB: This release contains migrations! NB: :application/public is renamed to :event/public (in application_event table eventdata column). NB: :expires-on is renamed to :application/expires-on (in application_event table eventdata column). NB: :last-activity is redundant and removed from the event (in application_event table eventdata column).

Changes

• "Show related events" has been removed from events. (#3156)
• Handler can now redact other handlers attachments. (#3190)
• The tables take advantage of a new paging feature. Especially, the handler Actions page and its handled applications table uses paging and only fetches handled applications when so requested. The first 50 rows are only fetched by default. Paging can be also configured per table, if the default is not good (page size 50 rows). (#3191)
• If reminder email is configured for the, expirer bot, it will delete an old draft application if and only if the reminder email is sent and the specified amount of time has passed. Previously it would just delete if the application was very old (esp. when enabling expiry for the first time).
• Allow leaving :form field away from catalogue item creation API calls. Previously the value was optional but now the key too.
• Application action buttons now wait until request has completed. This should prevent duplicate concurrent requests caused by repeated clicking. (#3204)

Additions

• (Experimental) Workflow can be configured to enable voting for the approval. Currently all handlers can vote (including bots). Use :enable-voting. (#3174)
• There is now a Danish language translation (#3176). We are considering supporting a limited set of languages officially, and improving support for community maintained translations (see #3179).
• Added experimental support for named format parameters in translations. (#3183)
• Added extended logging option (:enable-extended-logging), for additionally logging the content of mutating operations. (#3184)
• Cache reloading can be configured using the new :buzy-hours config. REMS will then try to avoid reloading during the specified time spans. (#3194)
• Application expiration respects :buzy hours config too.
• The handling users can now see whether an event is shown to the applicant from a small eye icon in the event history. (#3156)
• Event now shows which attachments were redacted when viewing as handling user. (#3190)
• Workflow has new option to anonymize handling users. When enabled, applying users may only see "Handler" in events where handling user's name would appear. Event emails to applying users similarly show only anonymized name where handling user's name would appear. Application API also returns only anonymized name to applying users. Anonymized name is customizable with translation key :t.roles/anonymous-handler, which defaults to :t.roles/handler.

Fixes

• Email template parameters for :application-expiration-notification event are now documented. The parameters are different from standard event email parameters, which may have caused confusion.

v2.33 "Santakuja" 2023-06-19

Additions

• PDF output can be customized a little. This enables changing the font, which should fix missing diacritics. (#3158)
• Workflows can now disable commands dynamically by application state, user role, or both. Rules can be set in workflow administration page under disable commands field. (#3131)
• Plugins can be written to extend REMS functionality in select extension points. So far there is support for plugins written in Clojure embedded in Markdown files. See docs/plugins.md for details. (#3133)

Fixes

• Label and header fields have URLs made into links. (#3155)

v2.32 "Itämerenkatu" 2023-04-26

NB: GET /entitlements.csv is deprecated and will be removed in a future release. Please use GET /api/entitlements/export-csv instead. NB: Experimental application PDF export API is deprecated, and will be removed in a future release. The non-experimental PDF export API is preferred instead. (#3098)

Changes

• Application editing performance is improved. (#3106)
• Show form errors column only when some form has errors. (#3107)
• Latest event is now shown in the minimized application state. (#3119)
• Administration menu has been fine-tuned. Reports also shows only if the user can access it.
• The administration pages can now scale wider than before.
• The administration tables use a dropdown button for the modification actions. This allows more space for the table contents as there will be less buttons visible. Some of the buttons are only visible if the user has the permission. (#2814)
• The catalogue items page (in administration) is now sorted by the item creation time by default. Newly created items will now appear at the top instead of somewhere in the alphabetical order. The sort can still be changed by clicking on the column headers.
• The catalogue page margins have been adjusted to be more consistent. Also some of the default texts have been removed. They can still be added by extra translations.
• Catalogue "more info" is now styled as a link instead of a button.
• Actions page columns have been tuned, e.g. description, resource and applicant, so that they wrap nicely. (#3121, #3122)
• Accessibility tooling has been upgraded, the report improved, and serious issues fixed.
• Prefer and set language cookie so a db request is spared. (#3136)
• Logging has been adjusted:
  • Don't add static resources to audit log. (#3136)
  • Provide entry logging earlier (req >), even before user or roles are fetched.
  • Log a short request id for every request.
  • Log the simultaneous request count (rqc:).
  • Reduce duplicate logging from each line (user, request method).
  • Print the time it took to serve the request (ms).

Additions

• User attributes can now be retrieved from ID token and user_info endpoint. (#3028)
• User attributes are now formatted better (a boolean becomes a checkbox, etc.) (#3103)
• Most handler, reviewer, decider emails can be disabled with :enable-handler-emails false. (#3116) This does not include the invitation emails, which will always be sent, to be able to invite users. This also does not include any reminder emails that you can separately enable if you wish.
• Any individual email can be disabled by setting its translation to empty string "" (#3117).
• Handler, reviewer and decider can now redact application attachments. (#2491)
  • Redacted attachment exists in REMS like any other attachment, but it's file contents are permanently removed, and filename is shown to other non-handler users as redacted.
  • Attachments in field answers cannot be redacted, but the applicant can edit them as usual when application is draft or returned.
  • Handler can redact attachments also from other users.
  • Non-handler users can redact only their own attachments.
  • In decider workflow handler is not allowed to redact decider attachments.
• Database connection pool can be configured, see :hikaricp-extra-params in config-defaults.edn.
• The debug log level prints details of when the scheduled pollers run, e.g. email and event notification.
• Search bar automatically trims the whitespace form the left side, which is useful for copied values.
• The event notification can be configured to not send the application data with :send-application? false

Fixes

• Autosaving does not cause the focus to jump anymore (#3112)
• Fix form table default sort order to be internal name (was title). (#3107)
• Editing form of a catalogue item could fail due to categories.
• While clicking a button, link or menu item, a wrong color was sometimes displayed.
• Heading focus outline uses the correct blue color.

v2.31 "Harmajankatu" 2022-11-29

Changes

• The location of the success message of a submit has been changed from the top of the page to the Actions block. (#2836) This is more consistent with the other actions that provide feedback in the same location. (#2836)
• The application Applicants block has a simple version for the case of a single applicant. (#2836)
• The Decide action button has been changed to primary action, as it usually is for a person in the :decider role. (#2836)

Additions

• Visibility of the PDF and ZIP download actions can now be configured with :show-pdf-action and :show-attachment-zip-action (#3001)
• The Resources block can be hidden from the application view with :show-resources-section. This can be useful if there are few catalogue items. (#3000)
• The application title field, in the application state block is now shown only if the application description is not blank. (#2836)
• Orphan attachments could sometimes be saved, though not in use. They are now removed when an application is submitted. (#3041)
• Extra pages have been enhanced: (#2983, #2589, #3069)
  • They can be shown in top menu, footer, both or not at all with :show-menu and :show-footer
  • You can decide if you want the standard heading or not with :heading.
  • If localization of the file or link is not required, you can define the attributes at top level.
  • Who can see which extras can be tuned with :roles such as :logged-in, :applicant or :handler.
  • See config-defaults.edn for more details.

Fixes

• The previous applications block is now shown only if there are some. (#2836)
• The application Actions block is now successfully hidden, if there are no actions available (#2836)
• The component guide page had accumulated some small errors that are now fixed. (#2836)
• The component guide links to component source code works again. (#3080)
• Saving application no longer crashes when a resource requires DUO:0000024 (MOR) code. This could occur when applicant had not entered a value for the date restriction field. (#3086)

v2.30 "Kellosaarenranta" 2022-10-13

Changes

• Some API methods have been unified with the rest by using the command pattern: (#3036)
  • Categories have a new POST /create and a PUT /edit endpoint like the others.
  • User settings have a new PUT /edit endpoint.
  • User has a PUT /edit endpoint, /create remains "create or update".
  • The changes should be backwards-compatible as the old endpoints remain.
  • The non-standard endpoints have been been deprecated and will be removed later.
• The text for saving has been changed "Alice saved a draft." -> "Alice updated the application.". This will be clearer in the future when autosave is enabled (#3045)
• When continuing an old application, the applicant will be shown a warning about problematic fields. (#3045)
• Data Use Ontology (DUO) is no longer shown in application UI if none of the resources contain DUO codes. (#3048)
• Mondo codes have been updated to version v2022-09-06. (#3031)

Additions

• There is an experimental autosave mode that can be enabled. The application is automatically saved soon after the applicant makes a change.
  • Enable it with :enable-autosave true.
  • You may also want to turn on save compaction at the same time with :enable-save-compaction true to show less save events in the event history.
  • In the future, autosave may become the default mode. (#2767)
  • Applications don't yet automatically get reloaded, should another person be viewing the same application. This is a potential future feature. (see #2622, #2244)
• Data Use Ontology (DUO) codes are now rendered in application pdf. Rendered pdf styles have also been tuned for more consistent look. (#2857)
• Organization owners are now allowed to edit their own organizations owners. (#2828)
• Updated Mondo-code definitions to v2022-09-06. (#3031)

Fixes

• License, create/edit license and create/edit catalogue item administrator views have been updated to display localized fields the same way other administrator views do. (#1334)
• Don't needlessly complain about the config keys that are passed automatically from system properties and the environment. (#2935)
• Application warning and error links were not functioning correctly for attachment fields. This is now fixed. (#2955)
• DUO fields are no longer editable in the UI when application is not in editable state. (#2997)
• Organization edit now requires user to be either owner or organization owner of the organization. (#2828)
• Organization owner is no longer allowed to toggle enable/disable and archive organization actions. These are available only to owner user. (#2828)
• Test/demo data creation now uses configured languages. Mismatch between configured languages and data localizations may cause issues in certain UI components. (#2334)
• Multiselect field is now correctly rendered in application pdf again. More than one selected value resulted in empty field value. (#3059)

v2.29 "Länsisatamankatu" 2022-09-12

NB: This release contains migrations! NB: workflow_licenses table has been removed and the data is migrated to workflow table.

Additions

• Application list in UI can now be configured to hide certain columns using config option :application-list-hidden-columns. (#2861)
• Mondo codes have been updated to version v2022-08-01. (#3031)
• Licenses can now be added to workflows through user interface and API. Workflow licenses are included in applications, similar to resource licenses. (#2158)

Fixes

• License, create/edit license and create/edit catalogue item administrator views have been updated to display localized fields the same way other administrator views do. (#1334)
• Don't needlessly complain about the config keys that are passed automatically from system properties and the environment. (#2935)

v2.28 "Porkkalankatu" 2022-08-24

NB: This release contains migrations! NB: One of the migrations fixes organizations, that could be broken by previous features.

Additions

• Application UI view is now visually more compact for non-handler users. State and members blocks are collapsed initially, and can be expanded to show more details. (#2871)
• The packaged fonts are now only in WOFF and WOFF2 formats, as is required for extensive support these days. (#2592)
• Various improvements should improve performance:
  • Gzip compression has been enabled for the server, so it is more feasible to use REMS as a standalone server without a reverse-proxy / load-balancer.
  • Logo images are preloaded automatically as they are almost always required.
  • Initial data is injected to the initial HTML instead of separate requests afterwards. (#2958)
  • Some dependencies have been dropped resulting in a smaller bundle.
• Default metadata for the HTML index has been added under description and keywords tags. These can be overridden using extra translations (:t.meta/description, :t.meta/keywords) (#2679)
• Default robots.txt has been included that indexes everything but the /api. NB: the bots are not able to index most pages as they are behind the login. (#2680)
• HTTP/2 (and others) can be configured, see :jetty-extra-params in config-defaults.edn.
• Validate organization when adding or editing it. (#2964)
• Consecutive save events are compacted into one. This does not affect old save events. This is turned off by default, until the whole autosave feature is finished. (#2767)
• Application licenses are now rendered alphabetically in UI and PDF render. (#2979)
• Custom stylesheets can now be added using :extra-stylesheets configuration option. This can be used to include custom fonts, for example. Example stylesheet is included in config-defaults.edn and is located in example-theme/extra-styles.css. (#2869)
• Example custom stylesheet example-theme/extra-styles.css is included in Docker images built using Dockerfile and docker-compose-config.yml, so that default REMS fonts are automatically included when running REMS for the first time, for example. (#2869)

Fixes

• Add missing migration to remove organization modifier and last modified from the data. (#2964)
• Read-only checkbox should look different from editable checkbox yet again. (#2974)
• Applicant member details now always have border in application user interface, even when there are no other members. (#2975)
• Version number is shown again in browser console instead of message "Version information not available". This was due to change in build logic introduced by Shadow-CLJS. (#2984)

v2.27 "Lauttasaaren silta" 2022-06-06

NB: This is the first release with a new build tool – Shadow-CLJS.

Additions

• Shopping cart can now be enabled or disabled in user interface with configuration option :enable-cart, which defaults to true. (#2720)

v2.26 "Lauttasaarentie" 2022-05-25

NB: This release contains migrations!

NB: The login has changed to allow more configurable user identity and other attributes. Consider this a big change worth some manual testing to see that everything works.

NB: New feature, reminder email for application expiration uses new email template. If you enable the feature and you use customized email templates, please check :t.email.application-expiration-notification/subject-to-member and :t.email.application-expiration-notification/message-to-member.

Breaking changes

• The actor of the command API (for applications) is now always validated. Previously, there was a chance that a non-existent user could be sent (used mostly by our internal tests). (#2771, #2824, #2772, #2821)
• User attributes are not saved on every request, only when logging in. (#2829)
• The :oidc-userid-attribute config has been renamed to :oidc-userid-attributes and has new options to allow internally renaming an attribute from IdP to REMS db. (#2771, #2821)
• Users are required a name, and optionally an email from the IdP to be allowed in. These can be configured, see docs/configuration.md. (#2889, #2929)
• User attributes have been renamed internally. If you directly accessed the database, please note that eppn -> userid, commonName -> name and mail -> email. (#2377)
• Application expiration notification can now be configured to send reminder email to applicant and members before expiration. This requires a change to the configuration option :application-expiration. Please read docs/bots.md section on Expirer bot. (#2906)

Additions

• You can configure the OIDC attributes for name and email (see configuration.md)
• User in the API can be an internal REMS id or any of the :oidc-userid-attributes (provided that the user has logged in once and we have stored the identity. (#2821 #2772)
• Fake login page has been improved to include descriptions of the different users. (#2896)
• Errors are now handled in oidc-callback by redirecting to an error page. (#2856)
• Mail settings can be configured with the :smtp config including authentication. (#2895)
• More configurable logout. You can now override the redirect with :oidc-logout-redirect-url, as well as unset :oidc-perform-revoke-on-logout. See configuration.md. (#2916)

Fixes

• API-key validity is not checked unless it is actually sent. (#2785)
• API-Keys are cached for a minute for a slight performance improvement. (#2785)
• Resources can be filtered in the API by resid (#2852)
• Hide applicant column and reduce font size to avoid previous applications to become too wide (#2855)
• Duplicated forms have been removed. Previously, if a workflow form was the same as a catalogue item form, that form would be duplicated. (#2853)
• An owner that is also an organization owner can now properly edit organization ownerships. (#2850)
• An owner could sometimes see a disabled catalogue item in the catalogue tree. (#2800)
• The column names in the tables and the field names in create/edit pages of the administration now match.
• Improve the accessibility of the small navbar. (#2907)
• Load config overrides from system properties and env (#2917)
• Application draft can now be saved even if there are validation warnings. (#2766)
• New application page no longer displays "Application: Success" message. (#2838)
• Blacklist API now returns HTTP 422 status if user or resource does not exist when adding or removing blacklist entry. (#2835)
• Add missing migration that slims down organization owners in the DB to just the id. (#2939)
• Only fetch the catalogue tree (or table) if it is shown (or otherwise needed). (#2930)
• Fix the catalogue tree nodes sometimes being empty when fetching it from the API (#2931)

v2.25 "Meripuistotie" 2022-02-15

NB: This release contains migrations! NB: Trying to roll back by migrating down will likely not work as dropped column data can't be restored.

Breaking changes

• The columns owneruserid and modifieruserid have been removed as the audit_log effectively serves the same purpose. They were not consistently used. For the attachments the column has been renamed to userid. This is a breaking change for the API as some of these were exposed, but likely not used or useful. (#2823)

Additions

• Bona fide pusher script for pushing bona fide status to Elixir. (#2513)
• Validate GA4GH claims by the public key from trusted issuer jku (instead of OIDC configuration). Configure :ga4gh-visa-trusted-issuers if needed. (#2798)
• Pollers have been made more robust, including timeouts for email sending (#2841)
• SSL certificate can now be configured and SSL enabled. HTTP port can be disabled. (#2844)
• rename-user will not bother reloading the application cache anymore (since it is usually run in a separate process from the server).

v2.24 "Heikkiläntie" 2022-01-17

Fixes

• Workflow forms persist even if changing resources.

v2.23 "Melkonkatu" 2022-01-12

Additions

• The change applicant command is now possible for the handler even for returned applications.
• There is a new experimental CLI command rename-user to handle the case where a single user's identity has changed. After running this command, one should also refresh the caches of the application server by restart.

v2.22 "Vattuniemenkuja" 2021-12-21

Additions

• (Experimental) Catalogue items can be assigned one or more categories and the catalogue shown as a tree grouped by category. There is an admin UI where categories can be created. See (#2768, #2764, #2770, #2769)

Breaking changes

• The API used to return disabled items for all users, but in the future only for administrative users. The disabled items were never visible to normal users in our UI. This may technically break the usage of the catalogue API if a regular user or public catalogue is used.

v2.21.1 "Veneentekijän(tie|kuja|kaari) +1" 2021-11-23

Fixes

• Attachment uploading resulted in broken or empty files due to improper stream handling, this behaviour is now fixed. (#2786)

v2.21 "Veneentekijän(tie|kuja|kaari)" 2021-10-04

NB: This release contains migrations!

Breaking changes

• Application attachment file size can now be limited with configuration option :attachment-max-size. Configuration default size per attachment is 10MB. (#2715)
• REMS standalone CLI no longer starts the server if unrecognized command is passed, and will print help instead. (#2518 #2738)

Additions

• "More info" support for DOI style resources (when :enable-doi flag is set) (#2701)
• There is a new v2 push API to sync entitlements outside of REMS. So far the only supported type is :ega. See configuration.md for more details. (#2466)
• Handlers can be invited to a workflow by email using the API (#2650)
• Entitlement expiration field in application actions will now accept only future dates (#2674)
• Applications can now be removed automatically after an expiration threshold is exceeded, using configuration option :application-expiration. This feature is disabled by default. (#2665)

Changes

• Reviewers are no longer able to see private field questions in generated application pdf. Forms are also no longer rendered in application page if they contain only private fields (#2161)

v2.20 "Vattuniemenkatu" 2021-08-24

Fixes

• Show the selected but disabled resources in Change resources autocomplete (#2702, #2693)

v2.19 "Nahkahousuntie" 2021-06-28

Fixes

• Pdf generation failed for applications that had table fields with no rows. Now fixed.
• Fix for missing notification-email from user settings

Additions

• Pdf applications now contain license text (for inline licenses), url (for link licenses) or attachment name (for attachment licenses), and license acceptance status for applicant and members. (#2688)

v2.18 "Särkiniemientie" 2021-05-18

Changes

• The "Attachments (zip)" button in the UI now only downloads the current application attachments. Event attachments and previous versions of application attachments are left out. The full zip is still available via the API. (#2453)
• Changes to theming: (#2588)
  • Theme variables are now documented in resources/config-defaults.edn.
  • The :nav-color now simply defaults to :link-color. Previously, it defaulted to :color3 if :link-color is unset.
  • The theme variables :danger-color (didn't really affect anything) and :phase-background-active (wasn't used, overlaps with :phase-bgcolor-active) have been removed.
  • The default theme has minor visual changes:
    • color2 is lighter
    • table hover highlight is now dark-on-light instead of light-on-dark
    • link color used in nav bar
  • Some theme-related code was rewritten. There should be no changes to appearance, but bugs are possible.
• Setting :log-authentication-details now prints out details for failed OIDC HTTP requests.
• More validations in the API:
  • the values of multiselect fields (/api/applications/save-draft)
  • option and column keys (/api/forms/create, /api/forms/edit)

Fixes

• Errors for invalid inputs (field values that are too long, invalid email addresses, etc.) are now rendered nicely. Previously the applicant just saw a "Save draft: Failed" message. (#2611)
• The application page no longer jumps to the top after adding an attachment. (#2616)
• Deleting drafts with attachments now works.
• A handler is now considered a handler even before first application comes in.

Additions

• REMS now supports PostgreSQL version 13. (#2642)
• Experimental GA4GH Permissions API now allows users to query their own permissions via /api/permissions/:user. (#2631)
• The handler can now change the applicant of a submitted application. (#2581)
  • This feature can be disabled by adding :application.command/change-applicant to :disable-commands.
• Multiselect fields can now be used to control visibility of other fields. (#1947)

v2.17 "Isokaari" 2021-04-12

NB: This release contains migrations!

Breaking changes

• A new form field type "table" is now available. A table has a predefined set of columns, and applicants can fill in as many rows as they wish. You can not roll back to an earlier release once your database contains applications with filled-in table fields. You will need to fix the database manually. (#2551)

Changes

• Forms now have both an internal name as well as a localized title instead of the non-localized title. (#2066)
  • The old style form titles are now deprecated in the API and a migration copies the title to the internal name. Please, check and optionally change the form titles after the migration!
  • Prefer the new internal-name or external-title fields instead.
  • The external title is shown to applicants in the application and internal name used throughout the administration.
  • The API supports the old style for now.
• Answers to conditional fields that are not visible are no longer stored by REMS. The API accepts answers for invisible fields but drops them. The UI does not send answers to invisible fields. (#2574)
• The "Assign external id" action now shows the previous assigned external id. (#2530)
• The form editor UI was reworked to look less cluttered. Many inputs are now hidden behind "Show" buttons by default. (#1899)
• It is now possible to create catalogue items without a form via both the API and the UI. (#2603)

Fixes

• Searching for applications by the original REMS generated id works, even if another id has been assigned. (#2564)
• GA4GH Visa (output by the experimental /api/permissions API) timestamps are now in seconds, instead of milliseconds. (#2554)
• The REMS reset command line command now works even when you have duplicate resource ids in the database. (#2557)
  • In practice, this means that REMS will not recreate the unique constraint on resource ids, even when rolling back to old database schema versions.
• The form editor now checks that table, option and multiselect fields are created with at least one column/option. (#2564)
• The multiselect field label wasn't being bolded.
• Info text icon could appear even though the field description was empty.
• Changes to the default translation for the required form field: does not include an asterisk sign anymore.
• Fixed occasional "Invalid path whitelist entry" error when adding/updating api keys.

Additions

• The example-theme now uses the Lato font.
• The field id can now be changed in the form editor. (#1804)
• "More info" support for EGA style resources (when :enable-ega flag is set) (#2466)
• Add phone number to field types in the form. (#2552)

v2.16 "Länsiväylä" 2021-02-04

Changes

• REMS no longer sends the Server: HTTP header to avoid leaking version information. (#2216)
• Text descriptions of some events in the log were phrased better. The created event also shows the original external id. (#2614)
• REMS now consistently uses the application server clock when creating timestamps. Previously, database time was used in some situations, leading to minor inconsistencies. Requires migration, but does not change visible behaviour. (#2540)

Fixes

• CSS files are now marked as cacheable by browsers. In v2.15 they were mistakenly marked as uncacheable. (#2484)
• OIDC signing keys are now always fetched on login, fixing issues with OIDC key rotation requiring a REMS restart. (#2497)
• /api/resource/, /api/license/ and /api/organization/ now return HTTP 404 responses if id is not found.

Additions

• The browser tests will now fail if there are any accessibility violations. (#2463)
• The OIDC configuration is now validated, and REMS refuses to start without a valid OIDC configuration. See the :oidc-metadata-url configuration variable and configuration.md. (#2519)
• The handler can be shown both the assigned external id and the original REMS generated external id. This behavior can be enabled by changing the :application-id-column config to :generated-and-assigned-external-id. These have also been added as new values to the data model and the original :application/external-id kept as it is. (#2614)
• The navbar can be configured to show a logo image. When the :navbar-logo-name config is provided, the logo is shown in the navbar (top navigation menu). This logo also can be customized per language like the regular logo. (#2363)

v2.15 "Tapiolantie" 2021-01-08

Changes

• The actions area has been adjusted to work better on small screens. (#2501)
• Copying a draft application will now create a new draft but without a link to the previous (draft) application. (#2496)

Fixes

• Various HTTP caching issues resolved. Users should no longer get an old app.js from their browser cache. (#2484)
• Fixed link in the "You will need to add an email address to your settings" notification. (#2503)
• Previous application history shown to the handler is now correctly limited to the members of the application. (#2470)

Additions

• Workflow organization can now be edited. (#2333)

v2.14.1 "Itätuulentie 2" 2020-12-15

This is a bugfix release for v2.14.

Change since v2.14

Fixes

• Fixed small issues in the form editor regarding validating empty values and field description (#2399)
• Reading of :oidc-domain config option was broken in v2.14, now fixed. (#2489)
• Hide decider/reviewer invitation events from applicant. (#2485)

v2.14 "Itätuulentie" 2020-12-09

Changes since v2.13

Breaking changes

• Dropped support for shibboleth authentication. (#1235)
• Dropped support for running REMS under tomcat. Dropped support for building the rems.war uberwar. (#1235)

Changes

• The development login page now uses the actual app styles.
• Changed the translations of the request recipients (now accounts for the singular or plural depending on the request type).
• Drafts can now be submitted for disabled catalogue items. A warning is shown for handlers when viewing an application for a disabled catalogue item. (#2436)
• New drafts can no longer be created for disabled catalogue items. (#2436)
• Empty reviews and remarks can't be sent via the UI anymore. Either a comment or an attachment must be provided. (#2433)
• Application members are sorted by name
• New :oidc-metadata-url config option replaces :oidc-domain. The old :oidc-domain option is still supported for now but will emit a warning. See docs/configuration.md. (#2462)

Fixes

• New organizations can be immediately used for creating resources etc. Previously a reload of the page was needed. (#2359)
• Catalogue item editor didn't properly show forms, resources or workflows if they were disabled or archived (#2335)
• Add vertical margins around search field for better readability (#2330)
• Workflow editor didn't properly show forms that were disabled or archived (#2335)
• Check file extensions ignoring case (#2392)
• Fixed java -jar rems.jar help. See docs/installing-upgrading.md
• Inconsistencies organization owner logic. (#2441)
• Fix accessibility problems with aria-required attribute placement and increase default link contrast (#2431)
• Small navbar is now properly closed after a link is clicked (#1194)
• Fixed an issue where changing field type to label after entering field description crashes form editor (#2399)
• Catalogue item organization can be edited (#2333)
• Catalogue item editor now starts empty when creating a new item after editing. (#2333)
• Hide organization creation button from non-owners who don't have the right to create organizations
• Fixed exporting an application to PDF when there are multiple attachments in one field. (#2469)

Additions

• All fields can have an info text, shown if the small icon is clicked. (#1863)
• Experimental permissions API that produces GA4GH Visas is now documented in docs/ga4gh-visas.md
• OIDC scopes are configurable via :oidc-scopes. See docs/configuration.md.
• REMS now reads GA4GH Passports on login and stores the ResearcherStatus of the user. See docs/ga4gh-visas.md. (#2124)
• Automated accessibility test report using axe (#2263)
• Settings page renamed to Profile, now also contains info about user attributes.
• In docker-entrypoint script CMD environment variable may be used instead of COMMANDS. CMD allows REMS commands with arguments to be used. See docs/installing-upgrading.md.
• Deciders and reviewers can now be invited via email. (#2040)
  • New invite-decider and invite-reviewer commands in the API & UI
  • Commands are available to the handler on submitted applications. See permission table.
• The first version of REMS user manual
• Experimental bona fide bot for granting peer-verified ResearcherStatus visas. See docs/bots.md.
• Assign external id button can now be shown for handlers with the :enable-assign-external-ui config flag (defaults to false). See resources/config-defaults.edn. (#2476)
• The :oidc-userid-attribute configuration option can now contain a list of attributes to try in order. See docs/configuration.md. (#2366)

v2.13 "Etelätuulentie" 2020-09-17

Note! This is the last release that supports the :shibboleth authentication method.

Breaking changes

• Organizations are maintained in the database and not config. (#2039)
  • See docs/organizations.md for more info
• Multiple organization support for users #2035

Changes

• Returned applications can now be resubmitted even if some catalogue items have been disabled. (#2145)
• Automated browser testing has been improved in implementation and also in the coverage of the administration side
• Form API create & edit requests are validated (#2098). This was meant to be added in 2.7 but the validation wasn't active by mistake.
• Validate application via api on save-draft and validate option list values (#2117)
• Remove assign external id -button from UI
• Clearer help message for close action
• Preserve the white-space in an event comment (#2232)
• Application events are now presented in chronological order instead of grouping requests and responses together. In addition there is now a possibility to highlight related events. (#2233)
• Rejecter-bot now rejects existing open applications when a user gets added to a blacklist either manually or via the revoke command. (#2015)
• Reporter can't see draft applications (#2268)
• Better error message for missing organization in admin UI (#2039)
• Improvements to swedish translations

Fixes

• Various fixes in workflow editor UI
• Form field placeholders now fulfil accessibility contrast ratio requirements (#2229)
• UI for the close action erroneously claimed the comment is not shown to the applicant. (#2212)
• Description of the Decider workflow erroneously claimed that application can not be closed.
• Redirecting the user back to the page they landed on after login now works even with OIDC authentication. (#2247)
• Fixed enabling a catalogue item after changing its form. (#2283)
• Added missing decision text to pdf event list.
• More compatible CSV reports. Line returns are removed from field values and CSV lines are separated with CRLF. (#2311)
• Fixed editing a catalogue item. (#2321)

Additions

• The form administration pages now flag forms that have missing localizations. REMS also logs a warning on startup for these forms. (#2098)
• There is now an API for querying and creating organizations. (#2039)
• Possibility to access /catalogue without logging in. Configurable by :catalogue-is-public. (#2120)
• Workflows can now have forms. Workflow forms apply to all catalogue items that use the workflow. (#2052)
• Applicants now get emails when a public remark is added to an application. (#2190)
• All emails sent by REMS now have the Auto-Submitted header set. (#2175)
• OIDC access tokens are now revoked on logout if the OIDC server provides a revocation_endpoint. (#2176)
• Application attachment fields now accept multiple attachments. (#2122)
• It's now possible to add a text to the login page after the login button using extra translations (:t.login/intro2) (#2214)
• Indicate which items are in shopping cart by changing add button to remove (#2228)
• Applicants now receive an email when submitting an application. (#2234)
• Organisations can be created and edited in the UI. (#2039, #2332)
• The /apply-for redirect supports multiple resources. See docs/linking.md. (#2245)
• REMS can now store and show additional user attributes from OIDC. These attributes are only shown to handlers, owners etc. and not applicants. See docs/configuration.md. (#2130)
• The OIDC attribute to use as the rems userid is now configurable via the :oidc-userid-attribute. See docs/configuration.md. (#2281)
• The :oidc-additional-authorization-parameters config option. See config-defaults.edn
• Applicants can now permanently delete drafts. (#2219)
• When approving an application, the handler can optionally pick an end date for the entitlement. There is also a :entitlement-default-length-days configuration variable that is used to compute a default value for the end date. (#2123)
• Better documentation related to organizations. (#2039)
• The reporter role now has read-only access to administration APIs and pages. (#2313)

v2.12 "Merituulentie" 2020-05-04

Breaking changes

• API key authorization has been reworked. API keys no longer have a set of roles associated with them, instead each API key can have an optional user and API path whitelists. See docs/using-the-api.md. (#2127)

Changes

• Login component and its texts have changed to a more simplified look. Please, remember to update your extra translations to match.
• Development login configuration is changed from :fake-shibboleth to :fake and styled like OIDC login
• Improvements to PDFs (#2114)
  • show attachment file names
  • list instead of table for events
  • hide draft-saved events
  • vertical space around form fields
  • PDF button moved to Actions pane

Fixes

• Long attachment filenames are now truncated in the UI (#2118)
• /api/applications/export now doesn't blow up when an application has multiple forms. Instead only answers for the requested form are returned. (#2153)
• Sort applications based on the application external id by sequence (#2183)

Additions

• Downloading all attachments as a zip file (API /api/applications/:id/attachments, button in UI) (#2075)
• Event notifications over HTTP. See docs/event-notification.md for details. (#2095)
• Audit log for all API calls in the database. Can be queried via /api/audit-log by the reporter role. (#2057)
• /api/applications/export is now allowed for the reporter role (previously only owner)

v2.11 "Kotitontuntie" 2020-04-07

Additions

• REMS sessions now stay alive while the user is active in the browser (#2107).
• The /api/users/active API lists which users have active sessions at the moment.

v2.10 "Riihitontuntie" 2020-04-06

Additions

• Swedish localizations. They can be enabled by adding :sv to the :languages config option. (#1892)

Fixes

• REMS now exits with status 0 on SIGINT and SIGTERM
• REMS now sets PostgreSQL lock_timeout (configurable, defaults to 10s) and idle_in_transaction_session_timeout (configurable, defaults to 20s) to avoid deadlocks (#2101)

v2.9 "Olarinluoma" 2020-03-26

Breaking changes

• Multiple form support #2043
  • Catalogue items that share a workflow but have different forms can now be bundled into one application.
  • Migrations will update the data. API changes are listed here.
  • Applications used to contain the key application/form but now will contain application/forms where there is a sequence of forms.
  • Commands with field-values will have a form in addition to field and value.
  • Events with form/id will have a application/forms where each has a form/id.

Changes

• Removed requirement for organizations to match when creating catalogue item or resource (#1893). This reverts the only breaking change in 2.8.
• Allow organization owners to edit resources, forms, licenses and workflows in their own organization (#1893)
• Show resources, forms, licenses and workflows from all organizations to organization owners (#1893)
• API: comments are now optional for commands

Additions

• Generating bare-bones PDFs from applications. This is a non-experimental feature. Fancier PDF generation is still experimental and can be enabled with a flag. (#2053)
• It is possible to add attachments to most actions that have a comment field (#1928)
• Added list-users and grant-role commands for rems.jar. For details see <docs/installing_upgrading.md> (#2073)
• A warning is now logged when the config file contains unrecognized keys.

Fixes

• Excel and OpenOffice files are now really allowed as attachments. Also, .csv and .tsv are allowed. Allowed file extensions are documented in the UI. (#2023)
• Attachments now get copied when copying an application (#2056)

v2.8 "Mankkaanlaaksontie" 2020-03-03

Breaking changes

• Betters support for organizations (#1893)
  • Backend checks that organizations of license, resource, workflow and form match when creating a catalogue item or resource

Changes

• Duplicate resource external ids are now allowed (#1988)

Additions

• Applicant/member notification email address is now shown to handler (#1983)
• Allow Excel and OpenOffice files as attachments (#2023)

Fixes

• Filenames are now retained when downloading attachments (#2019)

v2.7 "Koivuviidantie" 2020-02-03

Breaking changes

• Removed support for LDAP authentication
• /api/workflows/create API: the type parameter's allowed value was changed from dynamic to workflow/dynamic
• /api/applications/comment API renamed to /api/applications/review
• :application.event/commented event renamed to :application.event/reviewed
• /api/applications/request-comment API renamed to /api/applications/request-review and its commenters parameter renamed to reviewers
• :application.event/comment-requested event renamed to :application.event/review-requested and its :application/commenters field renamed to :application/reviewers
• /api/applications/commenters API renamed to /api/applications/reviewers
• field/id is now a string. This considers creating forms and the form API, but also form users may have the assumption of integers.
• Better support for organizations (#1893). This is still work in progress. Implemented so far:
  • Tracking of user organizations via the :organization attribute from the identity provider
  • List of possible organizations configured with :organizations config option
  • When creating a new resource/license/form/workflow/catalogue item there is an organization dropdown instead of a text field
  • Organizations of catalogue item, resource, license, form workflow and catalogue item must match
  • Additional organization-owner role that can only edit things belonging to their own organization

Additions

• Catalogue item form can be changed for one or more items at a time. New items will be created that use the new form while the old items are disabled and archived. The name of the new item will be exactly the same as before. See #837
• Applications can be exported as CSV in admin menu (#1857)
• Added a configuration option for setting a maximum number of days for handling a new application (#1861)
  • Applications that are close to or past the deadline are highlighted on the Actions page
• Added reminder emails. The emails can be sent by calling one of the following APIs on a cron schedule or similar. The APIs require an API key. (#1611, #1860)
  • /api/email/send-handler-reminder sends email about open applications to all handlers.
  • /api/email/send-reviewer-reminder sends email about applications with open review requests to reviewers.
  • /api/email/send-reminders sends all of the above emails.
• Allow users to change their email address, in case the identity provider doesn't provide an email address or the users want to use a different one (#1884)
• Healthcheck api /api/health (#1902)
• Add form field of type 'email', which is validated as an email address (#1894)
• Support www links in form field titles (#1864)
• Have a set of permitted roles for API keys (#1662)
• A user-owner role that can only create and edit users
• Fields can be defined public or private. The latter won't be shown to reviewers.
• More columns for blacklist table, blacklist visible on resource administration page (#1724)
• New "header" form field type (#1805)
• Scrollbar and focus now track moved and created form fields in form editor (#1802 #1803)
• Users can be added and removed from the blacklist in the resource admin page (#1706)
• POSTing entitlements to entitlement-target is now retried (#1784)
• Rejecter bot, which rejects applications where a member is blacklisted for a resource (#1771)
• "Assign external id" command for setting the id of an application (#1858)
• Configuration :disable-commands for disabling commands (#1891)
• Display on the actions page the handlers who are handling an application (#1795)

Enhancements

• Application search tips hidden behind question mark icon (#1767)
• Redirect to login page when accessing an attachment link when logged out (#1590)
• Form editor: add new field between fields (#1812)
• Entitlements appear immediately instead of after a delay (#1784)
• Show version information in console instead of the page footer (#1785)
• Searching applications by resource external id now possible (#1919)
• Handler can now close applications in the decider workflow (#1938)
• Create form API requests are validated
• Applicant can now close drafts in the decider workflow (#1938)

Fixes

• More robust email resending (#1750)
• Changes in workflow, catalogue item and blacklist now take effect without a delay (#1851)

v2.6 "Kalevalantie" 2019-11-12

Breaking changes

• :application/external-id has been made a non-optional field in the API and event schemas. All applications should already have an external ID since the previous release, so no database migration should be needed.
• The pdf button and API have been removed. We recommend using "print to pdf" in your browser.
• The start, end and expired fields have been removed from licenses, workflows, resources, and forms.
• API for creating catalogue item and its localizations has been changed. There is now a single API call that is used to create both a catalogue item and the localizations, namely, /api/catalogue-items/create.
• APIs for editing workflow, catalogue item, form, resource, or license have been changed:
  • The API endpoint for editing content (the name and handlers) of a workflow is now /api/workflows/edit.
  • The endpoint for archiving or unarchiving a workflow, a catalogue item, a form, a resource, or a license is /archived, prefixed with /api/workflows, /api/catalogue-item, /api/forms, /api/resources, or /api/licenses, respectively.
  • The endpoint for enabling or disabling a workflow, a catalogue item, a form, a resource, or a license is /enabled, prefixed with /api/workflows, /api/catalogue-items, /api/forms, /api/resources, or /api/licenses, respectively.
• API endpoint for editing forms has been changed from /api/forms/[form-id]/edit to /api/forms/edit.
• The page addresses are no more prefixed with /#/, so for example the address of the catalogue page was changed from /#/catalogue to /catalogue (#1258)
• More consistent user attributes in APIs (e.g. /api/application/:id, /api/users/create) (#1726)

Additions

• New field types: description, option, multiselect
• Setting maximum length for a form field
• Showing changes between two versions of an application
• Show last modified time for applications
• Many improvements in admininistration pages
  • Archiving forms, workflows, licenses and catalogue items
  • Preview for forms
  • Editing workflows
  • "Copy as new" button for forms
  • Form validation error summary (#1461)
• Upload an attachment file for a license (#808)
• Adding and removing members to/from an application (#609, #870)
• More configuration options for themes (e.g. alert colour)
• Track license acceptance per member (#653)
• Optional external id for applications (format "2019/123") (#862)
• Reporter role
• Accessibility improvements: screen reader support etc. (#1172)
• Store user language preference, use chosen language for emails
• Upgraded swagger-ui from 2 to 3
• Extra pages (#472)
• Full-text search for all application content (#873)
• Creating a new application as a copy from an older application (#832)
• Re-naming a catalogue item (#1507)
• Add enable/disable and archive/unarchive buttons to 'View' pages (#1438)
• On the Actions page, highlight when the application is waiting for some actions from the user (#1596)
• Optional "More info" link for catalogue items (#1369)
• Show separately for each license if it has been accepted by the member (#1591)
• Show all errors preventing application submission at the same time (#1594)
• Show applicant's previous applications to handler (#1653)
• Support OpenID Connect, for example Auth0
• Handler can close an application whenever after initial submission (#1669)
• Documentation about user permissions by application state
• Revoking already approved applications (#1661)
  • The applicant and all members will be added to a blacklist
• Userid field in /api/entitlements response
• Approver bot which approves applications automatically, unless the user+resource is blacklisted (#1660)
• Administration view for blacklist
• Read-only access to administration pages for handlers (#1705)
• New "decider workflow" where the handler cannot approve/reject the application, but only the decider can (#1830)

Enhancements

• Improved version information in footer
• More systematic use of db transactions
• Improved table widget
• Hide language switcher when only one language configured
• Improved table performance: added a "show all rows" button for long tables
• Modal popups have been replaced with flash messages (#1469)
• Email messages now use the application title and full names of users
• Email message texts improved
• Show three latest events as a default on the application page (#1632)
• A change of language persists now after login thanks to a new language setting cookie.
• A returning user will see the login screen in the correct language if he or she has the cookie.
• Event descriptions on application page now use full name and are more thorough (#1634)

Fixes

• Entitlement API
• Search on the catalogue and admin pages did not support multiple search terms (#1541)
• Hide flash message when changing language so mixed language content is not shown
• Printing application pages now works (except for drafts) (#1643)
• Applicant and administrator can now view attachment licenses (#1676)

v2.5 "Maarintie" 2019-07-18

Breaking changes

• Removed support for old round-based workflows
• Removed support for transferring REMS 1 data
• Replace applications API with new one (for dynamic applications)

Additions

• Dynamic workflows

This is the last release that still supports round based workflows. Please use this version to convert to dynamic workflows. There are also many changes and fixes since last version, which will be listed in the next release.

WARNING! The migration has problems with databases where licenses have been revoked, if the related entitlements are still active. See #1372.

1. Run lein run migrate in rems/ repository. NOTE! If you can't run lein on target server, use an SSH tunnel. Make sure you have no previous tunnels running! ssh -L 5432:remsdbserver:5432 remsappserver AND then run on your local machine: DATABASE_URL="postgresql://user:pw@localhost/db_name" lein run migrate

2. Create a dynamic workflow

3. Check new, dynamic workflow id from database: select * from workflow order by start desc;

4. Run on your own machine lein run convert-to-dynamic <dynamic_workflow_id> NOTE! If you can't run lein on target server, see step 1 for tunneling.

5. Verify from database that all applications have the new, dynamic workflow id in column wfid: select * from catalogue_item_application;

6. Go to administration page in UI and archive all non-dynamic workflows. If you do not have admin privileges, add them by adding owner role for yourself into the database: insert into roles (userid, role) = ('[userid]', 'owner') where [userid] is the eppn of your account (email address).

7. Verify from ui that different kind of applications still work.

v2.4 "Tietotie" 2018-10-24

Starting from this milestone releases will also include pre-built war and jar packages.

Additions

• support for attachment fields on forms
• API endpoint for adding users

Enhancements

• entitlements API can now be used to fetch applicant's own entitlements
• support for linking to catalogue items by their external resource ids (https://my-rems-instance.org/apply-for?resource=my-resource)

Changes

• resource api now also returns owner attribute
• configuration and localization has now been externalized from the deployed application (read more at https://rems2docs.rahtiapp.fi/configuration/)

Breaking Changes

• prefix attribute renamed to organization in API
• backwards compatibility with legacy applications related data has been dropped. Legacy workflows, forms etc. can still be migrated from REMS1 to REMS2

Fixes

• issue where review buttons weren't rendered correctly
• content created by editor wasn't sometimes shown immediately

v2.3 "Tekniikantie" 2018-08-29

Additions

• support for date fields on forms
• filtering functionality for tables
• workflow editor to administration page
• resource editor to administration page
• license editor to administration page
• pdf view for applications

Enhancements

• support for extra script files with hooks
• enable multiple login saml2 endpoints by providing a link to eds
• Changes
• minor cosmetic changes to status field on application page
• workflows and applications forms now also have an organization prefix field

Fixes

• current page highlighting

v2.2 "Vuorimiehentie" 2018-07-13

Enhancements

• page transitions now have loading animations
• configurable default language
• configurable csv import separation symbol
• header title added to localization
• catalogue item creation from existing form, workflow and resource

Changes

• catalogue now has a separate "more info" button instead of having items as links
• handled applications are only loaded when "show more" has been clicked
• updates to documentation

Fixes

• nondeterministic redirect problems for authenticated users

v2.1 "Otaniementie" 2018-06-25

Changes

• dependencies updated, the project is now using stable bootstrap 4 and font awesome 5
• changed format of urns and made prefix configurable
• updated demo-data target to be more aligned with test-data
• review request list now ignores users with missing attributes
• namespace cleanup according to coding conventions

Fixes

• unauthenticated users are redirected to requested url after login
• comments for review request are shown to 3rd party reviewers
• fixed erroneous localization in status change notification
• date to show user time

v2.0 "Keilaranta" 2018-05-29

First production release with the following major features:

• catalogue with shopping cart
• application sending
• approval process
• 3rd party review
• 3rd party review request
• email notifications
• application bundling
• Saml2 & LDAP login
• API with Swagger
• configurable themes
• configurable localizations
• documentation server