Emergency contacts endpoint returns inactive emergency contacts

Eric Eskildsen

@Todd DeSchuiteneer / Team -

The emergency contacts by student ID endpoint is returning both active and inactive emergency contacts. This is causing issues as schools don't want inactive emergency contacts in their data.

Steps to Reproduce

GET https://api.sky.blackbaud.com/school/v1/users/1234567/emergencycontacts

Where 1234567 is the ID of a student with some active and some inactive emergency contacts.

Expected Result

• 5 phone contacts as shown in the UI.
• 2 email contacts as shown in the UI.

Names, phone numbers, and email addresses have been anonymized in the screenshot below.

Actual Result

• 13 phone contacts.
• 9 email contacts.

Attached: emergency-contacts-anonymized.json

Note: Anonymization is internally consistent. Example: If an ID was originally 9876543 and its anonymized replacement is 1234567, then 9876543 was replaced globally with 1234567 in the JSON. The same goes for names.

Todd DeSchuiteneer

@Eric Eskildsen thanks for reporting. I will take a look at this and get back to you soon.

Todd DeSchuiteneer

@Eric Eskildsen I have completed my investigation. It seems the endpoint is returning all emergency contacts, including the ones set to “Not in use” through the UI and setting their call_dialer field to “Never” which is not accurate. I have reported the issue to my development team to address. I'll let you know when that is resolved through our existing ticket.