New in InterSystems IRIS 2025.2

Upgrading to InterSystems IRIS 2025.2 will move security data from the IRISSYS database into the IRISSECURITY database. New installations also store their security data in IRISSECURITY.

Among other things, this change removes direct access to security globals, updates privileges for security APIs (these now require %DB_IRISSYS:R and %Admin_Secure:U), and restricts SQL queries on security data. Customers should thoroughly test their applications prior to upgrade.

You can use the new %SecurityAdministrator role for general security administration tasks.

InterSystems recommends encrypting IRISSECURITY.

For a detailed overview of these changes, see https://community.intersystems.com/post/advisory-irissecurity-intersystems-iris-20252Opens in a new tab or IRISSECURITY Upgrade ImpactOpens in a new tab.

This release introduces several features to improve the user experience of configuring OAuth2.

• OAuth2 is now a native authentication type that can easily be enabled for web applications.

• You can now create resource servers with the new OAuth2.ResourceServer class, which simplifies resource server configuration significantly. Previously, resource servers were configured as an instance of OAuth2.Client.

• The OAuth2.ResourceServer class provides a sample authenticator for determining user permissions which, for simple configurations, requires no custom code (this previously required a custom ZAUTHENTICATE implementation). This simple authenticator can be extended and customized to suit your environment.

• You can now use JDBC and ODBC to authenticate to InterSystems IRIS with access tokens.

InterSystems IRIS now supports ECC (ECDSA) certificates for TLS configurations. ECC certificates are smaller and more computationally efficient than RSA and DSA certificates.

The Cube Manager was designed to assist customers with managing cube updates, synchronization, and build. In this release, InterSystems has made several improvements in functionality and in the user interface to more easily manage cube updates. The improvements include:

• Reworking the cube build/sync functions so that they perform dependency analysis and automatically rebuild dependent cubes when called, providing guardrails and preventing situations where dependent cubes are not built.

• Updating the Cube Manager user interface to focus on a schedule group. The user identifies the frequency with which the cube is to be updated and the schedule is kicked off to sync (if possible) or build (is sync is not possible). Power users can continue to manage builds and syncs from the APIs, command line, or the Architect user interface.

• Logging cube update events in %DeepSee_CubeManager.CubeEvent.

• Including additional information to help customers identify what is happening with the cube updates in this user interface, such as previous update time, status, and next schedule time as shown below.

When using multivolume databases, you can now truncate up to any size small enough to hold the remaining data. Previously, you could only truncate the last volume for a database, but now truncation will delete empty volumes as needed.

This release introduces a new CHUI (character user interface) for the integrity check utility (^Integrity), significantly enhancing the usability of this important maintenance task. The new interface uses multiple background processes and offers better progress information, including tallies of globals checked and errors found while the process is running, and a number of minor quality-of-life enhancements.

With this release, InterSystems also deprecates a number of legacy subroutines in favor of this new entry point.

• Pool size quantities are now displayed on each production configuration host.

• You can now create a new category by directly entering the naming convention in the category field of the host.

• There is now support for browser-level control find in Production Configuration.

• Production Host items now feature the Test Host function.

• In the new Settings Panel the X cancel icon also appears on panels to cancel an action.

• Longer class tooltip descriptions are formatted per the class documentation.

• Display of configuration item descriptions is enhanced to honor markup for longer, structured descriptions.

• Action Items are grayed out when not in the context of a host item or production.

• Creating a host enabled the automatic creation of a router and role.

• You now have the option to Update and Recover a production, where supported.

• Productions may not be created through the UI.

• The Data Transformation Function drop-down menu is now searchable and limited to functions defined in the subclass.

• The DTL Graphical Editor now includes a button to copy an HL7 field path when hovering over a segment.

• Setting the Ordinal Number or Path Expressions or both will input the same expression setting when setting the DTL statement target and source fields.

• It is no longer possible to rename rules. Previously, that behavior cause confusion about changes to active rules. To create a new rule, use Save As instead.

• There is now support for browser-level control find in Rule Editor.

This release discontinues support for running InterSystems IRIS on Red Hat Enterprise Linux 8 for x86–64 or ARM64.