department-of-veterans-affairs / va.gov-team

Public resources for building on and in support of VA.gov. Visit complete Knowledge Hub:
https://depo-platform-documentation.scrollhelp.site/index.html
281 stars 197 forks source link

Document how to map between ICNs and UUIDs in the rails console #88957

Open JonathanKamensDVA opened 1 month ago

JonathanKamensDVA commented 1 month ago

Description

We have recently updated our PII guidelines to explain to people how they're allowed to use ICNs, specifically that they shouldn't be logging them to Datadog and should be logging the account UUID instead. We're now getting questions from people about how they can map back and forth between ICNs and UUIDs when they need to do that.

The answer appears to have come from the Identity team:

use UserAccount.find_by(icn: <icn>) or UserAccount.find_by(id: <uuid>)

@jperk51 and @timwright12 suggested that it would be a good idea to document this somewhere in the platform docs. I agree with them. ;-) They suggested putting it on the page that talks about other techniques for interacting with the rails console. I think we should then add a reference to that from the recently added ICN guidelines.

Relevant URLs

Rails console page: https://depo-platform-documentation.scrollhelp.site/developer-docs/vets-api-on-eks

ICN guidelines page: https://depo-platform-documentation.scrollhelp.site/developer-docs/personal-identifiable-information-pii-guidelines

Which type of team are you on? (Platform team, VFS team, or Leadership)

I'm the OCTO information security lead. Jayson and TIm are on the mobile team.

jknipes commented 1 month ago

Hi @JonathanKamensDVA, thanks for your content suggestions. The Platform Content team will review your request and put it in our backlog to refine for next step