Skip to content

Application configuration

ClaimBillEntry keeps its framework settings in Web.config and reads runtime environment settings (database pool, API addresses) through the SAIF IEnvironmentService rather than from connectionStrings or appSettings. Web.config declares two custom configuration sections, glimpse and oracle.manageddataaccess.client (ClaimBillEntry/Web.config:3-6). No settings classes or secure settings were identified.

Web.config settings

Setting Value Effect Source
customErrors Off Detailed errors are shown to all callers ClaimBillEntry/Web.config:31
compilation debug true in the base file; removed by the Release transform Debug builds in non-release deployments ClaimBillEntry/Web.config:30, ClaimBillEntry/Web.Release.config:18
Glimpse On in the base file; Release sets defaultRuntimePolicy to Off Diagnostics tool enabled unless transformed ClaimBillEntry/Web.config:45-62, :381-385, ClaimBillEntry/Web.Release.config:31
httpRuntime requestValidationMode 2.0 Legacy request validation ClaimBillEntry/Web.config:32
pages validateRequest false Request validation disabled for views ClaimBillEntry/Views/Web.config:29
aspnet:MaxJsonDeserializerMembers 150000 Raises the JSON member limit ClaimBillEntry/Web.config
aspnet:MaxHttpCollectionKeys 10000 Raises the form key limit ClaimBillEntry/Views/Web.config:16
webpages:Enabled and webpages:Version false and 3.0.0.0 Web Pages handler disabled ClaimBillEntry/Web.config
ClientValidationEnabled, UnobtrusiveJavaScriptEnabled true Client-side validation in views ClaimBillEntry/Web.config
nhibernate-logger NHibernate.Glimpse with NHibernate.Glimpse.Loggers command NHibernate command logging to Glimpse ClaimBillEntry/Web.config
DbProviderFactories Oracle.ManagedDataAccess Oracle provider registration ClaimBillEntry/Web.config:392-397
ApplicationHost np17 Application setting whose consumer and meaning were not resolved; it may name a host** ClaimBillEntry/Web.config:15
glimpse section Declared with Glimpse.Core.Configuration.Section; configured at defaultRuntimePolicy="On" Custom configuration section for Glimpse ClaimBillEntry/Web.config:4, :381-391
oracle.manageddataaccess.client section Declared with OracleInternal.Common.ODPMSectionHandler Custom configuration section for the Oracle managed driver ClaimBillEntry/Web.config:5

The security effect of these settings is recorded in Tech debt.

Environment settings

The application has no connectionStrings section. The composition root reads environment settings through IEnvironmentService.GetConfigSetting backed by WindowsEnvironmentService, and builds the Oracle connection through DbConnectionManager.GetOracleConnectionString (SAIF.DependencyMaps.Web.ClaimBillEntry/DependencyMap.cs:65-70).

Key Used for Notes Source
EnvironmentConfigKeys.OracleDatabase Oracle database selection Connection pool CLM; unit of work named ClaimBillEntry SAIF.DependencyMaps.Web.ClaimBillEntry/DependencyMap.cs:43-44, :64-72
imagingapiurl Imaging API base address Used by IImagingClient SAIF.DependencyMaps.Web.ClaimBillEntry/DependencyMap.cs:160-161
cc.ccclaimdataapiurl Claim data API address Read into an HttpClient that is never registered SAIF.DependencyMaps.Web.ClaimBillEntry/DependencyMap.cs:47-49

Values for these keys are supplied per environment at deployment and are not stored in the repository.**

Deployment configuration

Setting Value Source
IIS Windows authentication (internal and external) On Pipelines/build-vars.yml:20-27
IIS anonymous authentication (internal and external) Off Pipelines/build-vars.yml:20-27
Application pool .NET version v4.0 Pipelines/build-vars.yml:30-35
Application pool pipeline mode Classic Pipelines/build-vars.yml:30-35
Environment settings file \EnvironmentSettings\settings.yml, applied by the shared release template Pipelines/release.yml:59-68
Build configuration Release, for both the internal and external artifacts Pipelines/build-vars.yml

Framework versions

  • The project targets .NET Framework 4.6.2 while Web.config declares 4.6.1, and the declared MVC package version is 5.2.7 (ClaimBillEntry/packages.config:21) while the project references an assembly version of 5.2.6.0 (ClaimBillEntry/ClaimBillEntry.csproj:320, whose HintPath points at the 5.2.7 package); see Tech debt.

Note: Statements marked with ** could not be confirmed; treat as unknown until verified.

Sources

  • ClaimBillEntry/Web.config
  • ClaimBillEntry/Web.Release.config
  • ClaimBillEntry/Views/Web.config
  • ClaimBillEntry/ClaimBillEntry.csproj
  • SAIF.DependencyMaps.Web.ClaimBillEntry/DependencyMap.cs
  • Pipelines/build-vars.yml
  • Pipelines/release.yml