KamoCRM

Every clinical audit row names its patient; pick up the shared-lib audit and updated_at fixes (SITP TP23FU)

FixSecurityService
Shipped
October 18, 2026 at 11:11 PM UTC
Author
Kamo
Commit
4c40751

Production phi_access_log rows from the clinical audit methods carried no purpose, basis or patient: the shared PhiAccessRecorder dropped them while stamping the time (fixed in kamo-shared-library@d461c332, which this build picks up). Separately, three readers that span patients wrote their rows with NO patient at all: PatientService.search, SchedulingService.day and the revenue-cycle worklists (ClinicalBillingController; claim lines looked up the claim's patient within the practice). They now go through **************** one row per record in that record's own patient's compartment. Tests: **************** drives every clinical audit method through the REAL recorder; ClinicalUpdatedAtFlushTest executes persist + second save + later update against H2 on this service's Hibernate 6.2.13 (fails on the unfixed library with NULL not allowed for UPDATED_AT). H2 is test scope.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing