Create Redline for OIPC Review

[liseandtea]

• As an IAO analyst
• I want to create a redline package for OIPC review that has any section 14 information redacted
• so that I can download a redlined copy and send records to the Office of the Information and Privacy Commissioner (OIPC)
• and be in compliance with government policy

Assumptions & Scope This ticket reflects a new type of response package that can be created when an OIPC review layer has been added. the user must be on the OIPC review layer to have this option.

Other types of response packages will remain the same, and follow existing rules (Eg - Redline for Ministry Sign-Off and Response package for applicant.

What is IN scope? New Option for Creating a Type of Response Package - Redline for OIPC

What is NOT in scope? OIPC complaints such as:

• A failure to make a reasonable effort to assist.
• A failure to respond on time (deemed refusal).
• An inadequate search for records in response to a request for records.
• An inappropriate fee assessment.
• A refusal to waive an assessed fee.
• An unauthorised extension of the public body's time to respond to an access request.

Acceptance Criteria

Scenario 1: Creating an OIPC Review Layer

• GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
• AND the request is Closed
• AND the request has an OIPC flag
• AND the response package has been created
• WHEN They select the review layer drop-down option from the left hand menu
• THEN there will be an option named "OIPC".

*Scenario 2: Creating an OIPC Review Layer**

• GIVEN An IAO analyst is on a request
• AND the request is NOT Closed
• AND the request has an NOT OIPC flag
• AND the response package has NOT been created
• WHEN They select the review layer drop-down option from the left hand menu
• THEN there will be NO option named "OIPC".

Scenario 3: Adding an OIPC Review Layer

• GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
• WHEN They select the review layer "OIPC" from the drop-down option
• THEN a new review layer will be applied called "OIPC".

Scenario 4: Not adding an OIPC Review Layer

• GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
• WHEN They select the review layer "OIPC" from the drop-down option
• AND then click out of the menu option
• THEN the review layer menu options will close
• AND no review layer will have been applied.

Scenario 5: Copying severing from Redline to OIPC Review Layer

• GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
• WHEN They select the review layer "OIPC" from the drop-down option
• AND choose to apply the "OIPC" layer
• THEN the "OIPC" layer will show
• AND all redaction boxes drawn on the redline, and page flags applied will be available in the new layer.

Scenario 6: Changing severing on OIPC Layer

• GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
• WHEN An "OIPC" layer has been applied
• THEN the redaction boxes from the redline will be active
• AND the redaction boxes can be edited, resized, changed by another user, etc.
• AND the redaction boxes can be deleted
• AND new redaction boxes can be added
• AND the original Redline layer will not be altered.

Scenario 7: Preparing an OIPC Review Layer to send to the OIPC

• GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
• WHEN An "OIPC" layer has been applied
• AND the create records package drop down menu has been activated
• AND the analyst has chosen the "Redline for OIPC" option
• THEN the analyst will be able to download a redline from the OIPC review layer
• AND the options will be Yes or Cancel

Scenario 8: Preparing an OIPC Review Layer to send to the OIPC that contains s.14

• GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
• WHEN An "OIPC" layer has been applied
• AND the option to create "Redline for OIPC" has been selected
• AND the OIPC layer contains information redacted under s. 14
• THEN a modal will be displayed asking the analyst to confirm they want to create the "Redline for OIPC"
• AND the options will be Yes or Cancel

Scenario 9: Creating OIPC Review Package

• GIVEN An IAO analyst is on the create "Redline for OIPC" modal
• WHEN they select yes
• THEN the modal will close
• AND all redaction boxes with s. 14 will appear as redacted
• AND all other previous redaction boxes and FOIPPA sections will appear unredacted.
• AND the OIPC redline will be created and available for download s.14 Redacted.pdf

Scenario 10: Redline locked when OIPC Review Layer created

• GIVEN An IAO analyst has created a OIPC Review Layer
• WHEN They select the review layer "Redline" from the drop-down option
• THEN a the Redline will be view only
• AND no edits can be made to the Redline

Scenario 11: No Redline PDF can be created when OIPC Review Layer created

• GIVEN An IAO analyst has created a OIPC Review Layer
• WHEN they select Create PDF dropdown
• THEN there will no option to create a 'Redline for Signoff'
• AND there will be an option to create a 'OIPC Redline for Signoff'

Scenario 12: Choosing not to prepare an OIPC Review Layer to send to the OIPC

• GIVEN An IAO analyst is on a request where a request for review of severing has been received from the OIPC
• WHEN the option to create records package has been selected
• AND the analyst chooses not to create a "Redline for OIPC"
• THEN the menu option will close
• AND no redline will be produced to download.

Scenario 13: Cancelling OIPC Review Package

• GIVEN An IAO analyst is on the create OIPC Redline modal
• WHEN they select cancel
• THEN the modal will close
• AND No action will occur

Dependencies? What is the impact of this dependency? (If so, link dependency in the ticket, make it visible in a team´s backlog)

Validation Rules? (If yes, list here)

Design @xxx - please link the Design here

Definition of Ready

1. [ ] Is there a well articulated User Story?
2. [ ] Is there Acceptance Criteria that covers all scenarios (happy/sad paths)?
3. [ ] If there is a user interface, is there a design?
4. [ ] Does the user story need user research/validation?
5. [ ] Does this User Story needs stakeholder approval?
6. [ ] Design / Solution accepted by Product Owner
7. [ ] Is this user story small enough to be completed in a Sprint? Should it be split?
8. [ ] Are the dependencies known/ understood? (technical, business, regulatory/policy)
9. [ ] Has the story been estimated?

Definition of Done

1. [ ] Passes developer unit tests
2. [ ] Passes peer code review
3. [ ] If there's a user interface, passes UX assurance
4. [ ] Passes QA of Acceptance Criteria with verification in Dev and Test
5. [ ] Confirm Test cases built and succeeding
6. [ ] No regression test failures
7. [ ] Test coverage acceptable by Product Owner
8. [ ] Ticket ready to be merged to master or story branch
9. [ ] Developer to list Config changes/ Update documents and designs
10. [ ] Can be demoed in Sprint Review
11. [ ] Tagged as part of a Release
12. [ ] Feature flagged if required
13. [ ] Change Management activities done?

[liseandtea]

Developing the AC

[liseandtea]

@m-prodan @KyEggleston Feedback please lads! Starting to go down the rabbit hole on this one... Some of the language will need changing/updating depending on designs and how FOI Mod App will trigger OIPC review layers in the redaction app (once we get to that stage). Also, I am wondering if we need the OIPC layer at all? Thinking in more simple terms, not all requests have an OIPC review, and an analyst will be required to download a what was sent to the applicant anyway. Could that record of decision not be saved and the analyst can use the same redline layer? If that was the case then we would really only need the section 14 stories - an option that could be triggered once the file was flagged as "OIC" in Mod.

[m-prodan]

After giving this a quick review - I think scenarios 1-5 are captured in #4191 - currently in progress. Really all we need for this story is to focus specifically on creating a redline to send to the OIPC, which unlike Ministry sign-off, needs an option (defaulted to yes) where any redlines that have s. 14 will be redacted. Scenarios 6-10 should cover this for the most part.

cc @lmullane

[Aman-Hundal]

Refinement Questions for 4169 and 4170

• Request to Business -> Clarification and revision of tickets 4169 and 4170. Based on current behavior of docreviewer the ACS were a bit confusing (ie. both tickets seem very similar, ACS use old lingo/features etc)
• Confirm with business whether the OIPC redline is one document or one document for each division

FE and BE changes needed. Dev team will come up with better estimates and refinement after the above.

[Aman-Hundal]

Follow up notes:

• Business to revise and refine ticket and ACS...
• Workflow: OIPC selected as layer (shows all annotations/redactions and s.14) -> A new option under Create Response PDF is added to download this layer (with redactions to s.14) -> Once option selected, Download for OIPC Layer Excluding S.14 is availalbe for users in records tab. See link below for output: https://bcgov-my.sharepoint.com/personal/lise_mino_gov_bc_ca/_layouts/15/onedrive.aspx?id=%2Fpersonal%2Flise%5Fmino%5Fgov%5Fbc%5Fca%2FDocuments%2FMicrosoft%20Teams%20Chat%20Files%2Fs%2E14%20Redacted%2Epdf&parent=%2Fpersonal%2Flise%5Fmino%5Fgov%5Fbc%5Fca%2FDocuments%2FMicrosoft%20Teams%20Chat%20Files&ga=1

[liseandtea]

@JHarrietha-AOT Hey! Do these updates match your new flow/language?

[JHarrietha-AOT]

No designs - this is validations for what should and should not happen appear for Redline - UI will be the same as precious redline processes

[divyav-aot]

Refinement Comments: when can IAO download the redline? is there any extra validation needed? - Not needed. Default validation is enough. New dropdown value for the stitching - Redline for OIPC Review

[sumathi-thirumani-aot]

This has an open question on when to copy the redactions from redline to OIPC. Listed are the options

1. Click on the button component "+ oipc"
2. When the reopened request has OIPC Review flag added with review type as "Review".
3. When the reopened request has been moved to state "Records Review".

In correspondence to discussion on 04 Dec with @JHarrietha-AOT

[sumathi-thirumani-aot]

Suggestion : Can we make this option font color little darker. It looks like disabled; whereas it is not. @JHarrietha-AOT @KyEggleston

[sumathi-thirumani-aot]

2. System allows changing of page flags for "Redline" after moving to "OIPC redactions". This should not be allowed.

[sumathi-thirumani-aot]

3. System does not allow selection on sections at the top of modal due to UX issues. I believe this is introduced as part of OIPC.

[KyEggleston]

Suggestion : Can we make this option font color little darker. It looks like disabled; whereas it is not. @JHarrietha-AOT @KyEggleston

I don't see why this couldn't be darker font. Provided all the conditions are met to produce an OIPC redline, it can share the colour/HEX as other active options (e.g., same as the active 'Redline for Sign Off' option in the image below):

[nimya-aot]

Scenario 10 is failing . Able to edit when we switch to 'Redline' layer after OIPC layer is created. Also scenario 11 failing, "Redline for sign off" button is enabled. @sumathi-thirumani-aot could you please check?