Hi,

In a customer project we started enforcing the "Inactivity Limit" as defined in System-Wide Security Parameters. The customer would expect accounts to become Disabled after they have been inactive for the specified amount of days. However, that doesn't happen; it seems the Inactivity Limit is only established after logging in.

Furthermore, the account inactivity only starts being applied after the first login. Can you confirm that?

Lastly, for accounts that have been manually Disabled, and have an expired password, we see the following weird behavior:

https://www.youtube.com/embed/C0Zjf_UYeT8
[This is an embedded link, but you cannot view embedded content directly on the site because you have declined the cookies necessary to access it. To view embedded content, you would need to accept all cookies in your Cookies Settings]

It's not clear to me, when using the InterSystems Container Repository, which version is the best / most recent non-preview Community Edition version to use.

I see lots of 2023.2.x versions, a single 2023.3 and 2024.1 version, but also a latest-cd and latest-em (with no explanation as to what cd and em mean).

I assume the trick is to use one of the latest-xx ones? If so, which?

Unfortunately I haven't been able to find any explanatory information anywhere about the nomenclature conventions used.

Many thanks

I am trying to work with Epic on FHIR. Epic's documentation stated, your application makes a HTTP POST request to the authorization server's OAuth 2.0 token endpoint to obtain access token.

Set tSC = ##class(%SYS.OAuth2.Authorization).GetAccessTokenClient(pClient,pScopes,.prop,.err) returns

ERROR #9761: No key in provided JWKS for alg ES512 and kid

I check this /csp/sys/oauth2/OAuth2.JWTServer.cls?client_name=medbank and I see this:

Hi Community,

Enjoy the new video on InterSystems Developers YouTube:

⏯ Security In the Cloud - Assuring a Secure InterSystems IRIS Cloud Overlay @ Global Summit 2024

https://www.youtube.com/embed/BGQG7gwBxZc
[This is an embedded link, but you cannot view embedded content directly on the site because you have declined the cookies necessary to access it. To view embedded content, you would need to accept all cookies in your Cookies Settings]

Hello,

I'm looking for an example or documentation on how to implement MS/Google authenticators within my CSP applications.

Has anyone done this before?

Thank you!

The latest "Bringing Ideas to Reality" InterSystems competition saw me trawling through the ideas portal for UI problems to have a go at.

https://www.youtube.com/embed/zw51X1JQhQ0
[This is an embedded link, but you cannot view embedded content directly on the site because you have declined the cookies necessary to access it. To view embedded content, you would need to accept all cookies in your Cookies Settings]

Hello,

We noticed from the integrity logs that some of the namespaces in our integration engine are using large amount of space ( ~380GB ) for the global ^EnsHL7.Segment.

We have culling implemented for large globals like MessageHeader and MessageBody.

Is it a standard process to implement culling for ^EnsHL7.Segment global and any idea about what will be the impact of adding culling to this global?

Hey Community,

Enjoy the new video on InterSystems Developers YouTube:

⏯ Copilot for Flask FHIR SQL Builder

https://www.youtube.com/embed/1QsLDaUQ4sw
[This is an embedded link, but you cannot view embedded content directly on the site because you have declined the cookies necessary to access it. To view embedded content, you would need to accept all cookies in your Cookies Settings]

I need to do an audit of Linked tables which are using a specific SQL Gateway connection, and there are many.

This is defined by the parameter CONNECTION contained within the table class which extends Extends %Library.Persistent

Is parameter exposed within a table somewhere?

I installed IRIS 2024.3 on Oracle Linux 9, but I have a problem accessing HTTP://myip/csp/sys/UtilHome.csp. I received the FORBIDEN from Apache.

I tried to configure a Directory block on httpd.conf, the login page was opened but images didn't show and the login doesn't work

In principle I'm looking in forward direction.
Though from time to time it makes sense to turn back and see the full path taken.

• I started reporting my reviews almost 4 years ago.
• I just reviewed packages that I could reproduce in my environment.
• Skipping items beyond my physical or mental capacities.
• So some great packages might not be present here
• But I added also 139 contributions of other reviewers
• It was anyhow a total of 769 reviews published
• Meeting over this time 191 different authors

Is there any mechanism already implemented in IRIS to prevent XSS exploits ?

This case happen when user input html/javascript content into fields and submit the page. If saved content is rendered as is, it's going to be executed by anyone visiting the page.

What I am looking for :

First time trying to use Foreign Tables/Servers instead of Linked Tables...

Within the SQL Editor inside of the Managment Portal, or connecting through DBeaver JDBC how we can see what Foreign Servers have been defined? Is there a way to query and verify structure of the Foreign Server connection to know that we are building the correct Foreign Tables?

I attempted to create my first Foreign table but it failed when I tried to query the tables because it said the table could not be found. But when I sign into the Database via SQL Management Studio, I can see the table.