Investigate missing user account, and incidence of multiple user accounts for other users

[ij-cope]

Dear Carl

my password for the database is not functioning any longer, would you please be able to reinstate?

Thanks

[marshalc]

Was: Reassign access to database

Dear Ina,

I would be able to, apart from the fact that your account appears to have gone "missing". This isn't something that should be possible, however as I've begun investigating this, I've discovered a range of data issues that may be related (e.g. Fenna having registered 30+ accounts for herself and linked an AE to each of them, along with a couple of other users have done similar - again things that shouldn't have occurred by process rules but were permissible with the current system rules). I'm going to hijack this issue as the investigation basis and will update as I go.

[marshalc]

User #108 - ijochmans was in the database up until Mar 30th, 2018, when @mertenssarah replaced that user with Lissa Pipeleers, and then overwrote that user with Tom Darius on Apr 3rd, 2018.

How @mertenssarah was able to do this, I can not yet fathom - can you please explain what you did Sarah?

@ij-cope - your last login shows as Mar 20th, 2018 and any attempts to login after the 30th would have failed (hence why your password isn't working).

[marshalc]

Two activities have contributed to the confusion here.

1. The Staff Management tool has been misused to replace one user's details with another.
2. The Adverse Event reporting process has been subverted so that rather than choosing from the list of valid Local Investigators who are responsible for each AE, the Add Person action has been used (a function that I believed had been disabled to stop this happening). Typically the person writing the AE has credited the Further Information to themselves, and in doing so have generated 50+ user accounts that are mostly duplicates, and AFAIK shouldn't be valid contacts for AEs.

When Lucy joins the repository as a collaborator (see #335) I'll tag her to ask if data validity needs this to be amended. If not, then we leave the bad data as is; if yes, then I'll be spending some of my remaining time trying to unknot this problem.

[ij-cope]

Thanks, Carl.

Think Lucy already sent you her username a few weeks ago. Might be worth to check with her.

Ina

Van: Carl Marshall notifications@github.com Verzonden: donderdag 21 maart 2019 18:23 Aan: ouh-churchill/COPE COPE@noreply.github.com CC: ij-cope ina.jochmans@uzleuven.be; Mention mention@noreply.github.com Onderwerp: Re: [ouh-churchill/COPE] Investigate missing user account, and incidence of multiple user accounts for other users (#337)

Two activities have contributed to the confusion here.

1. The Staff Management tool has been misused to replace one user's details with another.
2. The Adverse Event reporting process has been subverted so that rather than choosing from the list of valid Local Investigators who are responsible for each AE, the Add Person action has been used (a function that I believed had been disabled to stop this happening). Typically the person writing the AE has credited the Further Information to themselves, and in doing so have generated 50+ user accounts that are mostly duplicates, and AFAIK shouldn't be valid contacts for AEs.

When Lucy joins the repository as a collaborator (see #335https://github.com/ouh-churchill/COPE/issues/335) I'll tag her to ask if data validity needs this to be amended. If not, then we leave the bad data as is; if yes, then I'll be spending some of my remaining time trying to unknot this problem.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/ouh-churchill/COPE/issues/337#issuecomment-475325512, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AXZW1dSsATt_g38pGT1Z2PTVviRjjAoAks5vY7_xgaJpZM4bQeVc. {"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/ouh-churchill/COPE","title":"ouh-churchill/COPE","subtitle":"GitHub repository","main_image_url":"https://github.githubassets.com/images/email/message_cards/header.png","avatar_image_url":"https://github.githubassets.com/images/email/message_cards/avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/ouh-churchill/COPE"}},"updates":{"snippets":[{"icon":"PERSON","message":"@marshalc in #337: Two activities have contributed to the confusion here.\r\n\r\n1. The Staff Management tool has been misused to replace one user's details with another.\r\n2. The Adverse Event reporting process has been subverted so that rather than choosing from the list of valid Local Investigators who are responsible for each AE, the Add Person action has been used (a function that I believed had been disabled to stop this happening). Typically the person writing the AE has credited the Further Information to themselves, and in doing so have generated 50+ user accounts that are mostly duplicates, and AFAIK shouldn't be valid contacts for AEs.\r\n\r\nWhen Lucy joins the repository as a collaborator (see #335) I'll tag her to ask if data validity needs this to be amended. If not, then we leave the bad data as is; if yes, then I'll be spending some of my remaining time trying to unknot this problem."}],"action":{"name":"View Issue","url":"https://github.com/ouh-churchill/COPE/issues/337#issuecomment-475325512"}}} [ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/ouh-churchill/COPE/issues/337#issuecomment-475325512", "url": "https://github.com/ouh-churchill/COPE/issues/337#issuecomment-475325512", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

[marshalc]

Thanks Ina, yes Tim and Lucy both registered and I received their usernames, however there was a second stage to the joining that Tim has done but Lucy is yet to. I'm following it up with her on email.

I still need some clarity from @mertenssarah as to why she overwrote your user account, as that will enable me to understand how I am to grant you access to the DB again.

[marshalc]

@ldaviesnds - quick recap:

Ina's user account has been overwritten by Sarah in the past year and now shows as Tom Darius in any data extracts. This has had the added side-effect of removing Ina's access to the DB.

There are 50+ S/AE's that have been registered with their Local Investigator record pointing to the person doing data entry (and typically with a new user account created). This means records pointing at Fenna, Jeron, and V Huuren, amongst others.

Whilst these changes affect the ability to audit the records, do they also affect any analysis for you?

My thoughts are that if they're not affecting the analysis then I'm going to leave it as is as the cleanup and untangling process will likely eat up all my remaining time on this project. If they are affecting analysis, then it needs dealing with and other requests will have to wait.

[ij-cope]

Hi Carl and Lucy

I doubt this affects data analysis. We can also retrace who we can contact for auditing purposes as we have local investigators lists for each hospital and can retracte via trial ID which AE / SAE belongs to which hospital.

Ina

@ldaviesndshttps://github.com/ldaviesnds

Van: Carl Marshall notifications@github.com Verzonden: vrijdag 22 maart 2019 12:55 Aan: ouh-churchill/COPE COPE@noreply.github.com CC: ij-cope ina.jochmans@uzleuven.be; Mention mention@noreply.github.com Onderwerp: Re: [ouh-churchill/COPE] Investigate missing user account, and incidence of multiple user accounts for other users (#337)

@ldaviesndshttps://github.com/ldaviesnds - quick recap:

Ina's user account has been overwritten by Sarah in the past year and now shows as Tom Darius in any data extracts. This has had the added side-effect of removing Ina's access to the DB.

There are 50+ S/AE's that have been registered with their Local Investigator record pointing to the person doing data entry (and typically with a new user account created). This means records pointing at Fenna, Jeron, and V Huuren, amongst others.

Whilst these changes affect the ability to audit the records, do they also affect any analysis for you?

My thoughts are that if they're not affecting the analysis then I'm going to leave it as is as the cleanup and untangling process will likely eat up all my remaining time on this project. If they are affecting analysis, then it needs dealing with and other requests will have to wait.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/ouh-churchill/COPE/issues/337#issuecomment-475593108, or mute the threadhttps://github.com/notifications/unsubscribe-auth/AXZW1SvTkxcQmoLT9ET6UiRawAj4mjcYks5vZMSggaJpZM4bQeVc. {"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/ouh-churchill/COPE","title":"ouh-churchill/COPE","subtitle":"GitHub repository","main_image_url":"https://github.githubassets.com/images/email/message_cards/header.png","avatar_image_url":"https://github.githubassets.com/images/email/message_cards/avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/ouh-churchill/COPE"}},"updates":{"snippets":[{"icon":"PERSON","message":"@marshalc in #337: @ldaviesnds - quick recap:\r\n\r\nIna's user account has been overwritten by Sarah in the past year and now shows as Tom Darius in any data extracts. This has had the added side-effect of removing Ina's access to the DB.\r\n\r\nThere are 50+ S/AE's that have been registered with their Local Investigator record pointing to the person doing data entry (and typically with a new user account created). This means records pointing at Fenna, Jeron, and V Huuren, amongst others. \r\n\r\nWhilst these changes affect the ability to audit the records, do they also affect any analysis for you?\r\n\r\nMy thoughts are that if they're not affecting the analysis then I'm going to leave it as is as the cleanup and untangling process will likely eat up all my remaining time on this project. If they are affecting analysis, then it needs dealing with and other requests will have to wait. "}],"action":{"name":"View Issue","url":"https://github.com/ouh-churchill/COPE/issues/337#issuecomment-475593108"}}} [ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/ouh-churchill/COPE/issues/337#issuecomment-475593108", "url": "https://github.com/ouh-churchill/COPE/issues/337#issuecomment-475593108", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

[mertenssarah]

Carl,

I am as flabbergasted as you are regarding the useraccount of Ina. I have no idea what has happened with this useraccount. I'm sorry that I can't give any clarity.

Sarah

---

Van: Carl Marshall notifications@github.com Verzonden: vrijdag 22 maart 2019 12:15 Aan: ouh-churchill/COPE CC: mertenssarah; Mention Onderwerp: Re: [ouh-churchill/COPE] Investigate missing user account, and incidence of multiple user accounts for other users (#337)

Thanks Ina, yes Tim and Lucy both registered and I received their usernames, however there was a second stage to the joining that Tim has done but Lucy is yet to. I'm following it up with her on email.

I still need some clarity from @mertenssarahhttps://github.com/mertenssarah as to why she overwrote your user account, as that will enable me to understand how I am to grant you access to the DB again.

— You are receiving this because you were mentioned. Reply to this email directly, view it on GitHubhttps://github.com/ouh-churchill/COPE/issues/337#issuecomment-475581769, or mute the threadhttps://github.com/notifications/unsubscribe-auth/ALb2LbUBVOHEHETK8sNcsCdgjvy7G14cks5vZLtSgaJpZM4bQeVc.

{"api_version":"1.0","publisher":{"api_key":"05dde50f1d1a384dd78767c55493e4bb","name":"GitHub"},"entity":{"external_key":"github/ouh-churchill/COPE","title":"ouh-churchill/COPE","subtitle":"GitHub repository","main_image_url":"https://github.githubassets.com/images/email/message_cards/header.png","avatar_image_url":"https://github.githubassets.com/images/email/message_cards/avatar.png","action":{"name":"Open in GitHub","url":"https://github.com/ouh-churchill/COPE"}},"updates":{"snippets":[{"icon":"PERSON","message":"@marshalc in #337: Thanks Ina, yes Tim and Lucy both registered and I received their usernames, however there was a second stage to the joining that Tim has done but Lucy is yet to. I'm following it up with her on email.\r\n\r\nI still need some clarity from @mertenssarah as to why she overwrote your user account, as that will enable me to understand how I am to grant you access to the DB again."}],"action":{"name":"View Issue","url":"https://github.com/ouh-churchill/COPE/issues/337#issuecomment-475581769"}}} [ { "@context": "http://schema.org", "@type": "EmailMessage", "potentialAction": { "@type": "ViewAction", "target": "https://github.com/ouh-churchill/COPE/issues/337#issuecomment-475581769", "url": "https://github.com/ouh-churchill/COPE/issues/337#issuecomment-475581769", "name": "View Issue" }, "description": "View this Issue on GitHub", "publisher": { "@type": "Organization", "name": "GitHub", "url": "https://github.com" } } ]

[marshalc]

We're going to attempt to ignore this data corruption on the basis that the PI doesn't believe it will impact anything and no other responses have been received. In the meantime I'll register a new account for Ina and close this issue.