Some clients with expired consent can receive services
When adding services via the Front Desk options, consent validation does not appear, but when adding services via Client Management, it does. So it's possible to add services for clients who have expired consent.
"We are writing to inform you of an issue identified in HIFIS version 4.0.60.5 and above that affects consent validation when attestation is turned off.
In the affected versions, HIFIS correctly checks for active consent when users create records from a client’s profile (Client Management). However, when you attempt to create a new record through the Front Desk version of these modules, the consent validation does not appear. As a result, users are able to create records even when the client does not have an active consent on file.
As a temporary safeguard, communities using HIFIS 4.0.60.5 and above are encouraged to enable Attestation in their cluster settings. This will prompt users to confirm that they have the client’s consent before creating new records.
To enable Attestation:
Go to Administration
Select Application Settings
Open the Clusters tab
Click Edit for your cluster
Turn Enforce Attestation to Yes
If your community does not normally use the Attestation feature, you can set the “Number of days before attestation expires” field to the maximum value of 32767 days. This reduces how often users are asked to re‑attest while still adding an extra layer of protection.
We are actively investigating this issue and working with our development team to implement a fix as quickly as possible. Once the solution is ready, it will be deployed without waiting for the next scheduled release.
If you have any questions or need help enabling this setting, please contact the HIFIS Client Support Centre.
Thank you for your patience and continued collaboration."
HICC: "We've identified a code issue from Case Management and Group Activities when accessed from the Front Desk that prevents the Consent check from activating."
Sherri: "I recently found 2 files that staff have added an admission without a consent. It appears that the staff choose to "book in Family" which allowed the 2 family members without consent to have an admission. I am able to replicate the issue in our version 59.6.4. I have tried it in the demo site and it did not allow the admission so hopefully it was a fix. thought I would pass along in case this issue was similar to what anyone else had experienced."
Ryan: "We are also on 4.0.59.7.1 and have similar issues when accessing the Admissions, Calls & Visits Log or Turnaways modules from the Front Desk Menu.
Consent length did not have any impact the ability to do this as we were able to book in a client that had valid consent for only 1 day in February 2023.
When attempting these same actions from the Client Vitals > Client Management menu, a pop-up indicating the client does not have an active consent is shown."
Also from Lindsey: "We're using version 4.0.59.7.1. and I have discovered this week that our users are able to admit people to shelter, document turnaways, add a call and visit log, and add people to group activities when the consent has expired. aka inactive consent status."
Lindsey: "Users are able to admit someone to shelter who has and expired consent. But when they go to discharge the client THEN HIFIS alerts the user that the consent is expired, and they are unable to discharge the individual without completing a new consent (note: the consent didn't expire while the person was admitted to shelter, it had expired months prior). Sometimes the user is alerted when an individuals consent has expired upon admission so it's not an all the time thing."
From HICC:
"We are writing to inform you of an issue identified in HIFIS version 4.0.60.5 and above that affects consent validation when attestation is turned off.
In the affected versions, HIFIS correctly checks for active consent when users create records from a client’s profile (Client Management). However, when you attempt to create a new record through the Front Desk version of these modules, the consent validation does not appear. As a result, users are able to create records even when the client does not have an active consent on file.
As a temporary safeguard, communities using HIFIS 4.0.60.5 and above are encouraged to enable Attestation in their cluster settings. This will prompt users to confirm that they have the client’s consent before creating new records.
To enable Attestation:
Go to Administration
Select Application Settings
Open the Clusters tab
Click Edit for your cluster
Turn Enforce Attestation to Yes
If your community does not normally use the Attestation feature, you can set the “Number of days before attestation expires” field to the maximum value of 32767 days. This reduces how often users are asked to re‑attest while still adding an extra layer of protection.
We are actively investigating this issue and working with our development team to implement a fix as quickly as possible. Once the solution is ready, it will be deployed without waiting for the next scheduled release.
If you have any questions or need help enabling this setting, please contact the HIFIS Client Support Centre.
Thank you for your patience and continued collaboration."
HICC: "We've identified a code issue from Case Management and Group Activities when accessed from the Front Desk that prevents the Consent check from activating."
Sherri: "I recently found 2 files that staff have added an admission without a consent. It appears that the staff choose to "book in Family" which allowed the 2 family members without consent to have an admission. I am able to replicate the issue in our version 59.6.4. I have tried it in the demo site and it did not allow the admission so hopefully it was a fix. thought I would pass along in case this issue was similar to what anyone else had experienced."
Ryan: "We are also on 4.0.59.7.1 and have similar issues when accessing the Admissions, Calls & Visits Log or Turnaways modules from the Front Desk Menu.
Consent length did not have any impact the ability to do this as we were able to book in a client that had valid consent for only 1 day in February 2023.
When attempting these same actions from the Client Vitals > Client Management menu, a pop-up indicating the client does not have an active consent is shown."
Also from Lindsey: "We're using version 4.0.59.7.1. and I have discovered this week that our users are able to admit people to shelter, document turnaways, add a call and visit log, and add people to group activities when the consent has expired. aka inactive consent status."
Lindsey: "Users are able to admit someone to shelter who has and expired consent. But when they go to discharge the client THEN HIFIS alerts the user that the consent is expired, and they are unable to discharge the individual without completing a new consent (note: the consent didn't expire while the person was admitted to shelter, it had expired months prior). Sometimes the user is alerted when an individuals consent has expired upon admission so it's not an all the time thing."