Smartstaff, administrator
3,321
edits
Changes
→Updated TLS to Enforce 1.2 for Added Security
==General Details==
===Upgrade Dates===
Public Cloud Production release date: '''July 21 November 10 2022'''<br />Public Cloud Backup release date: '''June 30 October 27 2022'''
Private Cloud Production (Managed Upgrades) release date: '''July 28 November 24 2022'''<br />Private Cloud Backup (Managed Upgrades) release date: '''July 21 November 10 2022'''
==Overview==
Watch this video to get a general overview of the new features in this release.
{{#ev:youtube|SeqIGYtM9bYbABdVKpzxHg}}
===Major Updates===
====Enforcing Deny Permissions for Portal Pages on Common Role====
Changed the behavior of the '''Deny Access''' permission setting for pages on the '''Common''' portal. This setting will now deny access to the portal page for any roles selected. Previously, the '''Deny Access''' permission hid the link from view in the main header menu but the page was still accessible via a portal shortcut. If you want to hide a portal page but still allow people to access the portal page via a shortcut, toggle off '''Display As Header Link'''. To see the affected setting go to '''Global Settings''' > '''Users''' tab > '''Portals''' > '''Common''' > Edit a '''Portal Page''' > '''Permissions''' tab.
[[File:2022-11-ticket-142111-1.png|thumb|none|800px|The <strong>Deny Access</strong> permission settings will be enforced on the common role.]]
[[File:2022-11-ticket-142111-2.png|thumb|none|800px|The setting that controls visibility of portal pages in the header.]]
<!-- 142111 - Still access portal sections using link if role based permissions applied -->
===Minor Updates=======TitleDeprecated Password Variables====TextWe will be deprecating several password variables for security reasons in 2023. For example, sending passwords as plain text via emails is not a secure practice. If your system contains any of these deprecated variables, they will display as plain text. Deprecated variables include: <code>@password@</code>, <code>@checkportalpassword@</code>, <code>@checkactivatedpassword@</code>, <code>@randompassword@</code> and <code>@passwordresetlink@</code>. System Administrators must change existing email templates to use password activation links that will send the user to a page where the user can set their password. The syntax for password links is https://<code>@url@@activationlink@</code>. Emails that need to be updated are located at '''Menu Icon''' > '''Global Settings''' > '''Security''' tab > '''Password and Activation Policies''' > Click the''' Activation Emails''' tab in the left navigation. Another location where these variables may be present is on user signup pages. To find user signup email templates go to '''Menu Icon''' > '''Global Settings''' > '''Communications''' > '''System Email Templates''' > Search for “New User”.[[File:2022-11-ticket-139473-1.png|thumb|none|800px|Deprecated password variables need to be replaced or removed. For example, this email template was updated to use the activation link variable.]]<!--Comment139473 - Remove ability to retrieve password on request password/new user email templates using variable syntax -->
==On==Enhanced Multi-Demand System UpgradesFactor Authentication====The following features are available immediately with Moved multi-factor authentication (MFA) settings from the application of the upgradeuser roles to '''Global Settings''' > '''Security''' tab > '''Password and Activation Policies'''. In this new location, but must first be enabled you can enable MFA and assign MFA options to some or configured by all roles from a single central location. Additionally, there is also a new toggle called '''Enable Trusted Device'''. If you enable trusted devices, you can set the time period in which a person who has authenticated into the system can bypass entering the MFA verification code. To learn more on MFA setup, read [[Multi-Factor Authentication|our article on multi-factor authentication]]. '''Global AdministratorNote''':in an effort to enhance everyone’s security we will by default enable multifactor authentication for all roles in 2023.<!-- Ticket ID139210 - MFA remember my computer (trusted device) functionality. -->[[File:2022-11-ticket-139210-1.png|thumb|none|800px|Multi-factor authentication (MFA) settings have moved and are defined globally instead of on the role.]][[File:2022-11-ticket-139210-2.png|thumb|none|800px|Optionally, you can allow users to remember their device for a definable number of days so they don’t need to enter a verification code each time they log in.]]
===Major Updates=======Added New Multi-Factor Authentication OptionEnhancements to the List View====Added an option to send verification codes through SMS messages or email for multi-factor authentication on user roles. To see this option, go system filters to the basic search '''Global SettingsFilter''' > drop down. Previously, system filters were only visible when '''UsersAdvanced Search''' tab > was toggled on. We also added the ability to set system filters as configuration only. Setting a system filter as configuration only will hide the system filter from the '''RolesFilter''' drop down on the search for end users, but still allow system administrators to select the system filter while configuring their system. Additionally, if you have permission to edit a system filter, you will also see an edit button beside the filter name in the dropdown.<!-- 133656 - List views and filter improvements (include system filters in basic search) --> Edit a role [[File:2022-11-ticket-133656-1.png|thumb|none|800px|<strong>System Filters</strong> Under will now appear in the '''Multibasic search drop down.]][[File:2022-11-ticket-133656-Factor Authentication''' dropdown, select '''Verification code via SMS or Email'''2.png|thumb|none|800px|<strong>System Filters</strong> can be flagged as configuration only and then they will not show up in the basic search drop down.]]
===Minor Updates=======Added Invitations Import Wizard to UTA Level 3s====Extended the ability to easily import invitations in bulk using the '''<u>Note:</u>Invitation Import Wizard''' SMS notifications are billable and must be enabled to receive verification codesLevel 3s. Contact us To see this link, go to enable this service on your system'''UTA Settings''' > '''Level 3''' tab > '''Invitation Import Wizard'''.<!-- 134506 124048 - SMS and email for MFA L3 invitation import wizard -->
====Updated the Transaction Type Settings Page====
Added the left navigation to the '''Transaction Type''' settings page. Specifically, the left-hand navigation now contains a tab for '''Template Page''' and '''Verification Mapping'''. Also, the '''Advanced Logic''' setting has been renamed '''UTA Link Button Condition''' and has been moved to the bottom of the '''Main''' tab. To see these changes, go to '''Global Settings''' > '''Transactions''' tab > '''Types''' and edit a type.
<!-- 125402 - Modernize the Transaction Type pages -->
====Added Ability to Specify a Role as External Only====Added the ability to tag a role as exclusively external in order to prevent that role from being assigned to internal users. Specifically, the '''Internal User Role Only''' toggle has been replaced with '''Available to'''. This new setting can be used to restrict roles so they can only be given to an internal or an external users. To see this setting, go to '''Global Settings''' > '''Users''' tab > '''Roles''' > Edit a '''Role'''.<!-- 125839 - Enhancement Request: 'External Role Only' option on roles External -->[[File:2022-0711-ticket-134506125839-1.png|thumb|none|800px|Users set up with the new multi-factor authentication option will Setting to restrict roles so they can only be presented with an option given to receive the verification code via email internal or text message. This option is presented after the user has entered their username and passwordexternal users.]]
====Enhanced Single Sign-On and Added Role MappingAbility to Create Folders from Autoloader/Scheduled Report Settings Pages====Updated the single sign-on (SSO) module with greater role mapping functionality Added ability to better support identity federation. A add a new option for role mapping is available, Smart/Configuration folder directly from the autoloader and scheduled report settings pages if enabledthe user has permission. Previously, users will be provisioned with only if the roles and access as configured within this mapping sectiondesired folder was not yet created, and as described by users would have to go to the SSO assertion received from the Identity Provider system. You may define the list of roles '''SmartFolders''' to be monitored or managed, create a folder and then from this list, a user upon login will have their user roles updated according return to the contents of settings page in order to select the SSO assertionnewly created folder. Any mapped roles that are presented in To see the assertion will be added to the usernew '''Create Folder'''s profilebutton, while any roles not explicitly presented in the assertion will be removed from the userAutoloader, go to '''Autoloaders''' > Edit an autoloader > '''General'''s profiletab. Additionally, updates were made to The new button appears beside the layout of the configuration page including labels, tooltips, and title bars for added clarity'''Processing Folder''' input.<!-- 124791 133982 - SSO to update roles for existing users for a fully federated SSO Autoloader improvements (folder picker) -->
====Updated Breadcrumb Appearance====Updated the look of the breadcrumb navigation to be more compact and mobile-friendly.<!-- 126333 - Breadcrumb (hierarchical record navigation bar) on mobile phone and desktop -->[[File:2022-0711-ticket-124791126333-1.png|thumb|none|800px|Added a new role mapping section to The breadcrumb navigation as it will appear after the single signupgrade.]][[File:2022-on settings page used with federated authentication11-ticket-126333-2.png|thumb|none|800px|The breadcrumb navigation as it appeared before the upgrade.]]
====Added New Hierarchy Permissions Ability to the User and Organization Security MatrixExport System Email Templates====Added a new hierarchy permission of '''Users Under Associated Organizations''' button to the system email templates page to allow for exports. To see the '''User Security Matrix''' and''' Associated OrganizationsExport Email''' button, go to the '''Organization Security MatrixGlobal Settings'''. This adds a new scope of access for associated users and organizations within both the > '''UserCommunications''' and tab > '''Organization Security MatrixSystem Email Templates'''.<!-- 126369 126880 - Request for user-organization-association roles on security matrix Need a way to easily export all system emails -->
====Added Type and Status Filters to Workflow Email Previews====Added the '''Type''' and '''Status''' filter to the workflow email preview for easier record searching and selection. To see this setting, go to '''Workflows''' > Edit a workflow > '''Tasks''' tab > Edit a task of the '''Acknowledgment''' type > '''Message Template''' tab > '''Preview'''.<!-- 126881 - Improve email preview lookup from workflow -->[[File:2022-0711-ticket-126369126881-1.png|thumb|none|800px|A new hierarchy permission was added to the <strong> Organization Security Matrix</strong>Type and Status filter on workflow email preview.]]
====Added Ability to Lookup Email Templates in Group Emails====Added ability to lookup email templates for group emails. Previously, you could select email templates using a drop down but now you can also search for email templates in the dropdown which is helpful if you have many templates. To see this feature, go to '''UTA''' > Select desired records > Click '''Group Email''' > Select users and click '''Next''' > Click the '''Template''' field to see a new lookup field. This feature is also available for group emails sent from the record contacts page.<!-- 138069 - Enhancement - Improve Template Selection in the New Email/Message Centre -->[[File:2022-0711-ticket-128237000-1.png|thumb|none|800px|Invitees can provide feedback about why they accepted or declined an invitationWhen creating a group email, type to filter available email templates making it easier to find that desired email template.]]
====Added Setting to Trigger a Workflow for Incomplete E-signature RequestsInvitation Details Button====In the event that an e-signature status is canceled, expired, failed, or voided, Added a new workflow can be triggered button called '''Details''' to continue the processinvitations page. For exampleThis new button will appear for every invitation and shows '''Invited Date''', you might want to update '''Last Updated''', '''Response Date''' and optionally a reason for why the level 1 record status if user accepted or declined the e-signature request was not completedinvitation. To enable see this settingnew button, go to the desired '''Special - Web Page ViewUTA''' custom field with > Open a record > Click '''Enable E-signatureInvitations''' toggled on to see the new setting called''' Failed to Complete Workflow'''left-hand navigation.<!-- 127705 128627 - Adobe Integration Enhancement Requestto Invitations feature, add date of invite/accept/decline -->[[File:2022-11-ticket-128627-1.png|thumb|none|800px|New Invitation Details button makes it easier to see more information.]]
====Added a Formula Field Search to Advanced Data TablesActivity List Views on Record Pages====On Added search for activity list views within a record. For example, on the '''Advanced Data Table''' custom fieldsLevel 1 record, you can now enter a field formula that will run click on '''Save''' and '''Clear''' of the Level 2 '''Advanced Data TableActivity'''. Fields referenced in the field formula of the '''Advanced Data Table''' custom field will have their field values refreshed. For example, you could use the field formula to update the values on the underlying record pages, and those values would get updated right away so the user would not have to click save tab to see the updated valueslist view with search options. To see this fieldOn level 2 records, go to click on the desired custom field of the type Level 3 '''Special - Advanced Data TableActivity'''.Note: formulas need tab to be based on SQL syntaxsee the list view with search options.<!-- 130741 130906 - Add search to left- Enhancement request for XML (Save hand menu activity list views -->[[File:2022-11-ticket-130906-1.png|thumb|none|800px|Added search to activity list views on XML popup saves the record as well) -->.]]
====Added Color Settings Ability to the Gantt Chart Typeuse Custom Lookup Options with Dynamic Field Visibility Controls====Added new settings the ability to use custom lookup fields as the primary fields in'''GanttDynamic Field Visibility Controls''' chart type to specify color codes by subject, status, type, and more. To see this settingset up custom lookup options, go to the desired custom field of type create a '''Special Select One - ChartDropdown List''' with '''Enable Dynamic Content''' > Set and '''Data TypeUse Custom Lookup Options''' toggled on. To specify a custom lookup options field, go to '''Records related to objectUTA Settings''' > Set '''Chart TypeLevel 1''' to tab > '''GanttDynamic Field Visibility Controls'''. The two > Create a new settings are visibility control > Once saved, set the '''Color Code By Primary Field'''andto be the desired ''' ColorsCustom Lookup Options'''field.<!-- 135525 133369 - Gantt Chart Colors Allow Dynamic Field Visibility to work with Custom Lookup Options -->
====Added Ability Default Page Layout Option to Create Copy Profilesthe Web Page View Custom Field====To see this Added a new feature that allows you to set up predefined profiles setting for copying records, go to '''UTA Configuration SettingsSpecial - Web Page View''' > custom fields to allow for default or custom page layouts. It is recommended that you leave this set to the new '''Level 1/2/3Default''' tab > option whenever possible. This ensures you always have the latest template. There is a'''Copy ProfilesCustom'''option if you want to see and modify the web page view HTML template. AdditionallyTo see this setting, you can also set up go to the settings of any web page view custom field. Under the ability to copy a '''Level 1/2/3General Settings''' object through a workflow on a status change by using a tab, the new setting is called '''Task Type''' of '''Trigger Copy ProfilePage Layout'''.<!-- 120929 134367 - Improved Copy of Level 1sDefault/2s (Phase II) Custom page layout option for web page view fields -->[[File:2022-11-ticket-134367-1.png|thumb|none|800px|New web page view option to always have the latest and greatest template or choose custom to see and modify the template.]]
====Added Ability to Add Attachments from Configuration Folders in Email Templates==On-Demand System Upgrades=='''Global Administrators''' editing email templates can now add default attachment files from a configuration folder. To see this new featureThe following features are available immediately with the application of the upgrade, go to '''Menu Icon''' > '''Email''' > '''Templates''' tab > Edit but must first be enabled or configured by a template > '''Default Attachments''' ''Global Administrator'(Configuration Folder)'''.<!-- 124007 - Select Default Attachment for Email Template from Config Folder -->:
====Added Standard Field for PronounsNew Button Color Classes====Added a new user standard field called '''Pronouns''' where users setting for save, submit and delete buttons which gives you the ability to adjust the visual priority of buttons. Buttons can specify their personal pronounsnow be color-coded using predefined styles. For example, you could make all continuation actions green while negative actions red. A neutral color could be used for secondary buttons. To enable this fieldconfigure default, save and delete buttons go to '''Global Settings''' > '''UsersBranding''' tab > '''Standard FieldsColors and Styles'''. To configure custom save and submit buttons go to the desired '''UTA''', '''Organization''',''' User''', or '''Transaction'' > ' tab and click the '''PronounsSubmit and Save Buttons'''link.<!-- 128683 - Pronouns Field -->
<u>'''Note:'''</u> Button colors will not apply to configuration pages. After applying button colors, it is recommended that you log out and clear your browser cache to see changes.<!-- 127822 - Capability to change button colors -->[[File:2022-0711-ticket-128683127822-1.png|thumb|none|800px|Users can specify their personal pronouns on their profile by using Adjust the new standard fieldvisual priority of buttons with color classes.]][[File:2022-11-ticket-127822-2.png|thumb|none|800px|color class options.]]
====Added the Ability to Use an Email Template as the Message Template in Workflow TasksMake Media Files Publicly Shareable by Default====Previously, you could use an email template Added setting to populate the message template in a workflow email task. Once the message template was populated from the email template, there was no longer a connection between the two. If the email template was updated, the message template in the workflow task did not update.We have added an option enable media library files to use the email template as the message template. This way you can use the same email template in multiple workflows and you can update the template in a single location and all workflows will get updated be publicly available for easier maintenancestreaming by default.To see use this new settingfeature, go to '''Menu Icon''' > '''Workflows''' > '''Tasks''' tab > Edit a task of the '''Type''' of '''Acknowledgement''' > '''Message Template''' tab > Set settings for the desired '''Message TypeUpload - Multiple Files Storage''' to custom field that has '''EmailMedia Library''' enabled and choose toggle on '''Email Template''' for '''Email TypeEnable Media Sharing by Default'''. Previously, video and audio files were not shareable by default and users needed to manually enable sharing on each file one by one after upload.<!-- 126882 133789 - Email templates and workflow email tasks that uses Add a field level setting to the email template should Media library, to default all videos to be connectedpublicly available -->[[File:2022-11-ticket-133789-1.png|thumb|none|800px|New option to make media shareable (publicly available for streaming) by default.]]
====Added Default Settings for Custom Field Translation ServiceAbility to Link a Shortcut to a Page====Added a new translation options for text box single and multiple line custom fields. Users who utilize the translation service feature can now set a default language '''Action Type''' called '''Page''' to portal shortcuts to make it easier to translate from and link toa page. To see the new settingsthis setting, navigate go to '''Global Settings''' >''' Users''' tab > '''Portals''' > Edit a portal > Click '''Shortcuts''' in the top action bar > Edit a shortcut with the desired text box custom field and toggle on '''Enable Translation ServiceStyle'''. set to '''Enable Field Translation ServiceIcon''' must also be toggled on, which is located under '''Global SettingsImage''' or '''Text''' > Set '''Action Type''' to'''SystemPage''' tab.<!-- 61319 126821 - Translation Service feature - Allow configuration of default settings within Make it easy to link a shortcut to a given fieldpage. -->
====Added Ability for Autoloader to Add Discussion Board Threads to SmartCardsand Update Longitude and Latitude====Added the ability to add a discussion board thread to and update''' Longitude''' and '''SmartCardsLatitude'''. To see this feature, go to standard fields for'''Menu IconCompany''' > , '''Discussion BoardPeople''' > Click on a and '''TopicLevel 2'''autoloaders. You will now To see a list view of existing threads within that topic. Beside each threadthis new setting, there is now a button with a star icon called '''Add to SmartCardAutoloaders''' > Edit an autoloader > '''File Layout''' tab > under '''Column Mapping'''.<!-- 122907 141216 - Autoloader - Add Discussion Board thread to SmartCard add sf.longitude and sf.latitude -->
==Beta Previews==
==Notes for Admins==
====Added Export Functionality Version Option for Failed Logins, Locked and Expired AccountsCustom Fields Permissions Quick Edit====Added ability to export target custom fields by version when using the '''Failed Login''', '''Locked Accounts''', and '''Expired AccountsPermissions Quick Edit'''feature. To see thissetting, go to '''Global UTA Settings''' > '''SecurityLevel 1/2/3''' tab > '''Password and Activation PoliciesCustom Fields'''. In the left-hand navigation, click on > Click the desired tab. There will now be an '''ExportPermissions Quick Edit''' button at the top of in the list that will export the logs as an Excel file. You can select specific records to export or export the entire list by not selecting anythingview button bar. <!-- 124468 129133 - Custom Fields - Password and Activation Policies Reports Quick Edit Permissions -->
====Added Export Functionality for Message QueueAbility to Get Translation Details in the API====Added ability to export '''Message Queue''' list. This will export get translations using the following fields[https: '''To''', '''From''', '''Subject''' and''' Dates'''//dev. The export will not include the body of the message or its attachmentssmartsimpleqa.com/devtools/api.html?apiversion=2 SmartSimple API]. To see the new export, go to '''Menu Icon''' > '''Message Queue''' > click the desired tab and then click the '''Export''' button at the top of the list viewResults are returned in an array.<!-- 124563 126424 - Export files in Message Queue Adding of translation details to meta data -->
====Added Indicator Icon Option to Message Queue for Email AttachmentsBypass Secure Session Validation Based on IP Addresses====Added a paperclip icon setting called IP addresses to the list view of emails in the bypass secure session validation. This setting is only visible if '''Message QueueDisable Secure Session Management''' is toggled off. This new setting allows you to indicate whether the email contains an attachmentkeep secure session management active for all users while allowing some users to bypass this security. This setting is located at '''Global Settings''' > '''Security''' tab.<!-- 127638 136789 - Email Attachment indicator on Message queue Whitelisting IP option to use with Secure Session Management -->
====SmartConnect API changesAdded Dynamic Visibility Controls to the Custom Field Search Reference====Modified Added the text options under ability to see '''Dynamic Visibility Controls''' in the custom field '''Action TypesSearch Reference''' for improved clarity. This makes it easier to identify the field that controls the visibility of a custom field.<!-- 128706 - Consumer/provider custom fields update -130177 ->Show related Dynamic Field Visibility Controls in Search Reference
====Updated Autoloader Added Error Message to Apply Multiple Roles/Categories for New RecordsMedia Library====Added ability to add multiple user roles or multiple company categories when importing new records via the autoloader. This eliminates the need to apply multiple roles or categories by using additional workflows. To see this setting, go to '''Menu Icon''' > '''Autoloaders''' > Edit an autoloader > '''Process''' tab. Depending on error message in the '''Create/Update BehaviorMedia Library''' option chosen, you that will see the '''Role/Category''' field now accepts multiple role/category optionsdisplay if a video or audio file fails to be processed.<!-- 132802 132058 - Autoloader - Abilitiy to add more than one role to created/updated user Media library failure message and checking -->
====Added Ability to Link to Profile for Standard Fieldsand Unlink Transactions with API====Added a the ability to link beside and unlink transactions from the '''Created By''' Level 1 and '''Updated By''' standard fields that open up Level 2 using the corresponding user profile in a new modal window[https://dev. This setting is applied to '''UTA Level 1smartsimpleqa.com/devtools/api.html?apiversion=2/3''' records, '''User''' records, and '''Organization''' recordsSmartConnect API version 2]. If This gives you navigate the ability to remove the standard field you can hide this link using relationship without deleting the transaction. Adding transactions to the '''Restrict Profile Link''' settingLevel 2 is also now supported.<!-- 132989 134010 - Created By Link SmartConnect API link and unlink transactions from Objects -->
====Updated Login PagesAppearance of the Data Exchange Summary====Added Updated the look of the ability to specify a classic '''Logout Redirect URLData Exchange Summary''' for alternate login pagesthat shows incoming and outgoing packages on UTA records. Additionally, the ability The new message can be collapsed to include an "origin" URL parameter has been removedtake up less space.<!-- 134351 132293 - Add configurable setting for logout redirect urlHide field -->
====Added Patch for Document Generation ToolsThe Country Formerly Known as Turkey Will Now Appear as Türkiye====Added additional validation Updated the '''Country''' standard field list to document generation tools, such use the label Türkiye for the country formerly known as PDFWriter and DOCXWriterTurkey. Türkiye is the officially requested label for the country.<!-- 135113 141553 - pdfWriter Vulnerability Patch Turkey > Türkiye : Official country change name -->
====Added Security Settings to Autoloader Ad Hoc Upload PageSupport for Copy Profiles in Batch Update Buttons====Added additional role security to autoloader where the ad hoc upload page will check if you are a support for '''Global AdministratorCopy Profiles''' or if you have any of the roles permitted to use the URL. If no roles are configured, only the in custom '''Global AdministratorBatch Update Buttons''' will have access. To see this settingthe new option, go to '''Menu Icon''' edit the desired list view > '''AutoloadersBatch Update Buttons''' tab > Edit an autoloader > '''Process''' tab. There will be a new '''Role''' setting under button of the type '''Ad Hoc UploadCopy''' section.<!-- 136382 141204 - Additional Caixa Security Audit Report Batch update button (Autoloader PermissionsCopy feature) does not store source ID -->
====Updated State/Province Options for Cayman IslandsReport Builder Support====Updated the list of districts (State'''Report Builder''' to support <code>SS_FUNC.ADDBUSDAYS</code>, <code>SS_FUNC.COUNTBUSDAYS</Province standard field) for the Cayman Islandscode>, <code>SS_FUNC.COUNTWEEKDAYS</code> functions to assist with complex date calculations.<!-- 137992 141877 - state/province options for cayman islands are not correct MySQL Function Support -->
====Added Validation Updated TLS to Virtual Folder and Alias Names Enforce 1.2 for Login PagesAdded Security====Added validation Updated "Transport Layer Security (TLS)" references to virtual folder names enforce version 1.2 for improved security. TLS 1.0 and alias names within login pages to prevent illegal characters and duplicate names1.1 are no longer supported.<!-- 135000 140404 - need URI character sanitization of foldername and alias parameter of login page configurations HP Fortify - Insecure Transport: Weak SSL Protocol -->
====Added Role-Based Permission Access the Data Exchange History Log====Added a new role-based permission settings for the exchange history log, for the '''New Data Exchange'''. To see the setting go to '''Global Settings''' >''' Integrations''' tab > (you must be using the '''New Exchange Type''') '''Import Settings''' or '''Export Settings''' > Edit '''Import/Export Setting''' > The new setting is called '''Exchange History Access'''.<!-- 137437 - DEX3 Exchange History Log - Create Role Permission Access--> ====Added SmartField Options for Chart Custom Fields====Added '''SmartField''' settings options to the custom field type '''Special - Chart''' to easily control if charts will be included Invalid Characters in '''SmartFields''' or not .<!E-- 137904 - Special Chart custom field is missing the smartfields options --> ==signature File Names Replaced with Underscores==Security Improvements====Updates to Apache, JavaScript, and Google Maps API. Removed the X-XSS-Protection header from being served by the platform.<!-- 138391 - Netcraft vulnerability finding 20220612 for Apache config --><!-- 137569 - Netcraft Pentest Scan - V1. Outdated JavaScript libraries - Google Maps API--><!-- 137794 - API Update Contact - Org association bug and Sonarqube vulnerabilities --><!-- 137389 - NetCraft Pentest 04-2022 --><!-- 138525 - Home Depot Finding - XSS app_groupemail.jsp --><!-- 138526 - Home Depot Finding - XSS app_appobjlogic.jsp --><!-- 138552 - Home Depot Finding - XSS app_process.jsp --> ====Header Text Template Field Invalid characters for Portals====The header text template in portals was deprecated in a previous upgrade. Any content entered into the '''Header Text Template''' options will no longer be visible after this upgrade.<!-- 136309 - Portal header not displaying -e-><!-- ====Image Compression Exclusion====Images uploaded to the system that have a width or height of greater than 15,000 pixels signature file names will no longer be processed by GORT replaced with underscores to create a smaller compressed thumbnail image. Images that do not get processed because of image dimensions will be noted in ensure the GORT logsigning process completes successfully. --><!-- 138085 142043 - Image compression exceptions for png files --> ====Deprecate Running Associated Workflow after Change Status Workflow Task Executed on Related Objects====On new workflow tasks of the type of "'''Change Status'''" if there is a workflow associated with the target status it will not be triggered. On existing tasks of this type, you will see a toggle '''Run Associated Workflow''' on '''Target Objects''' under the target status drop down when the target object has '''Related Objects''' option selected. This toggle will only appear on existing tasks to avoid disruption. The toggle will not appear for new tasks and if it is toggled off, it will no longer be available.<!-- 134968 - Deprecate running associated workflow after change status workflow task executed on related objects Signed Contract Not Received from Adobe -->
==Service Packs==
===October 27th 2022 February 23th 2023 (202210202302.03)===
====Fixes====
* Fixed an memory issue with status indicators when used with standard field containersfor the service process manager (Gort Automation).<!-- 146147 - Gort locked on image compressing task -->
====Fixes====
* Fixed an issue with the Open button not working on organization contacts and associates when '''Enable Straight JoinAdvanced Data Tables''' was toggled where cells were not populating on for classic reportsinitial load under some circumstances.
<!-- 141663 141737 - Open Button Not working On Organization Contacts & AssociatesADT not show information in calculated columns-->* Fixed an issue where changing a user to a''' Global Administrator''' was not retained.<!-- 145408 - Global Admin toggle not sticking on internal contact -->* Fixed an issue with PDF generation the '''Text Box – Date and Time''' custom field where problematic embedded PDF files did the time was not display a file corruption message in rounding correctly when the combined PDFtime was converted to another time zone.<!-- 145622 - DateTime field incrementing by 30minutes on save -->
====Other Changes====
* Updated the messaging for the '''Upload - Multiple Files Storage''' custom field to include missing Spanish translations for Catalan group emails and French Canadianthe password activation page.<!-- 141827 - Upload field Message -->
<!-- 145670 - The generate password page is not translated -->
<!-- 145286 - Group Email window header translation -->
===February 9th 2023 (202302.01)===
====Fixes====
* Fixed an issue with the delete permissions on the duplicate check user/organization page so users with permission are able to delete an organization/user while merging.
<!-- 141755 145047 - Change pdf generation to use temp files for all operations Issue with negative numbers in the system -->* Fixed an issue with the '''Upload - Single File Storage''' field where its instruction box disappeared when the '''File Upload''' modal window was showncomparing dates for autoloader file processing.
<!-- 140766 144908 - SingleAutoloader appears stuck. Status is 'running 2023-File Upload Field Titles and Instructions disappearing (2273) 01-12 12:25:04' -->* Fixed an issue with dynamic field visibility where instructions configured on fields under a how the'''Layout - Title BarForgot Password''' custom field were not being shown or hidden properlyscreen was rendering on mobile devices.
<!-- 140986 144106 - Title Bar/Field Instructions Bug Forget Password Link - Android and Apple Mobile Browsers -->* Fixed listview sorting to sort on an issue with the type’s '''CaptionMessage Center'''where a file could not be removed from a selected template if it contained a single quote ( ' instead of )in the type’s '''Name'''filename.
<!-- 140456 138660 - Listview is sorting by Type Name instead of Type Caption Cant remove file with Message Centre if it has single quote in the name -->
====Other Changes====
* Added support for Service Provider Updated the user’s personal settings to no longer display the time-based one-time password (SPTOTP) initiated key and QR code that was associated with multi-factor authentication for single sign-on (SSOMFA). Previously, only Identity Provider (IdP) initiated SSO This was availablehidden to enhance security. A new The '''Multiple Environment Support (MES) Group IdentifierTOTP Secret Key''' was also added which may be used to give you a consistent configuration across multiple environments (production, testing, and backup). The system will use the '''Multiple Environment Support Group IdentifierTOTP QR Code''' to detect and render the appropriate SSO link on your login page, based on your environmentare now only visible when you first set up TOTP. To see the You can generate a new settings, go secret key and QR code by going to the desired user profile record and clicking '''Global SettingsActions''' > '''IntegrationsEdit roles and access''' tab > '''Single Sign-On''' > Edit a single sign-on configuration.<!-- 134892 - Service Provider initiated Single Sign On (SP-initiated SSO) --> * Added a new list type of '''Mixed Record Type''' to the '''Special - Linked Record List''' custom field. This new list type can be used to display multiple list views with different types of records. For example, it can show a listview of consumer activity records and a listview provider activity records in the same '''Linked Record ListReset TOTP'''.
<!-- 140832 145592 - Batch update buttons accessible in Emulation Web page view only mode , don’t hide template by default --><!-- 121945 - Update two-factor process -->* Updated the '''Field History''' email behavior on backup servers to show both allow the store value and display value for custom fieldssending of multi-factor authentication (MFA) verification codes as well as password resets. The '''Field History''' window can Other emails on backup servers will not be seen by enabling '''Track Changes''' on dropdown lists, checkboxes, and radio button custom fieldssent.
<!-- 130510 140928 - Enhancement: Show Display Value securing all email sending functions in Field History the system on backup environments (MFA) -->* Set the spellcheck attribute to be false on password input fieldsEnhanced system security by adding additional checks and blocking uploads of files with certain extensions.
<!-- 141302 144430 - Add spellcheck='false' to password fields SmartFolders - File upload security and general issues -->* Updated the text missing translation country names for the '''Report Builder Help'''Danish, Spanish, and Catalan.
<!-- 134051 143763 - Update examples and descriptions in report builder to support allow list of functions Country options not displaying as user's language -->* Added Updated cookie policy to reflect the new cookie used to support for Polish language translationstrusted devices when multi-factor authentication (MFA) is enabled.
<!-- 141272 143518 - Polish not an option in translation languages Update to cookie policy page to reflect fact we no longer just have session-based cookie -->* Update jQuery UI to version 1.13.2Deprecated the '''RSA Disconnected Token''' option from the multi-factor authentication (MFA) dropdown on user roles.
<!-- 140885 139685 - NetCraft Pentest 08-2022 Deprecate the RSA disconnected token option for MFA -->===September 22nd 2022 (202209.03)=======Changes====* Added the ability to enter translations into the message template of workflow tasks using a new button called '''Message Template Translation Settings'''.
====Fixes====
* Fixed an issue with the '''Is Container''' setting where container organizations restricted access query for associated usersfinding custom field ID from the custom field name to improve the speed of validation using SmartCheck.
<!-- 140671 145040 - Contact VS Association SmartCheck Validation Slowness -->* Fixed an issue where reports were error in the '''Archive Scheduler'''.<!-- 141637 - Archive not generating PDFs when using a portal link for encrypted content.placing files on our SFTP -->
===September 8th 2022 January 12th 2023 (202209202301.01)===
====Fixes====
* Fixed an issue where the number of precision values was reports that were not being applied set to the custom field type '''Special - Chart''' be publicly accessible were able to open web page views externally. After this release if the chart had you want a web page view to be publicly available via a '''Number Format''' report you must set the report to be internet enabled and then go to '''None.''' <!-- 135527 - Values on Field Special-Chart -->* Fixed an issue with the “'''Within the last X days”''' clause of the '''Advanced Search''' criteria when the NOT operator was in useweb page view custom field and allow public access.
<!-- 138882 144055 - Listview filter 'Within the last x days' is Searching on Bing returns results that should not working be publicly accessible -->* Fixed an issue with displaying the '''Upload Lookup - Multiple File StorageAutocomplete Options''' field in a list view where only the file limit could be bypassed by enabling''' Keep Version''', uploading a file with the same name as a previously uploaded file, and utilizing the <code>.uploadlink</code> variablefirst of multiple selected options were visible.
<!-- 139097 117079 - More than 2 files can be uploaded to References Lookup - Autocomplete field not showing all data in list view -->* Fixed an issue with the versioning on '''Upload - Single File Storage''' duplicate SmartCheck validation messages displaying under a file upload field where the file type restriction was not being pulled from the desired version.
<!-- 139967 140019 - Single file upload field error Double Validation Message Appearing in Application -->* Fixed an issue with emulating a user the group email wizard where the''' From''' address and attachments were not preserved if you switched the language setting, it was not applying user clicked the '''Preview''' button and then clicked the new language setting everywhere'''Back''' button.
<!-- 139212 141725 - Language Settings Issue When Emulating Users in French Group email from address reverted if you click preview, then back -->* Fixed an issue with email activities the download files feature where Level 2 formulas were not executing when an email the generated file was empty if the field was created from a Level 1 record directly instead of being triggered by a workflowstored to another field.
<!-- 139667 143499 - Simons - Type formulas not executing for email activities Download files feature generating empty zip files -->* Fixed an issue with the aspect ratio of thumbnails in the '''Lookup - Autocomplete OptionsMedia Library''' custom field where records using <code>ssRetiredOptions</code> were appearing in the list of optionsat lower resolutions.
<!-- 140182 142550 - RID Field 1867084 Media Library Images Aspect Ratio Issue in MS Edge on Mac OS --><!-- 142703 - QA Issue: Issues with media files being unplayabale -->* Fixed an issue with portal sections of charts where the type''' List View''' that are using the '''Record Count''' setting. If a user clicks the '''Show More''' link, the results will no longer be restricted to x-axis was displaying the height store value instead of the section on the previous pagedisplay value.
<!-- 139158 142666 - Smart Connect API ConsumerBug on Charts? Showing dropdown 'code/Provider Update Not Creating a Connection number' instead of 'option text' -->* Fixed an Issue with the SmartConnect API when Consumer was a level 2 and the Provider was a level 1.
====Other Changes====
* Added Updated multi-factor authentication to be more secure and easier to set up. Roles using the time-based one-time password (TOTP) will now automatically be brought to a new column instruction screen after being activated. Resetting a user's TOTP MFA must now be done by going to the desired users profile and selecting'''Invitations HistoryActions''' called > '''Invite Sent''' which can be sorted in descending order by date Edit roles and time. To see theaccess''' Invitation History> ''', go to the desired UTA record and click Reset TOTP'''Logs. There is also a new permission on roles called ''' > Roles this role can reset TOTP for'''Invitations History''. This new permission is used to specify which roles can reset a user's TOTP.<!-- 138153 - Should invitation history be ordered in descending order based on date like other histories? -->
<!-- 143115 - MFA Email/Text Code allowed attempts and Lockout Duration -->* Added a Updated autoloader behavior where when new option in users and organizations are created via the '''Custom Field Translation Settings''' so you can use a different file name per language when you rename uploaded filesautoloader, no country will be set if no default country is specified. To see this setting, edit an Upload – Single /Multiple file upload custom field and click '''Custom Field Translation Settings'''Previously new users or organizations would be given the country value of Canada if no default value was set.
<!-- 114975 143525 - no option for translation of file name Users created with wrong country -->* Added a newoption to set which fields should be refreshed upon changes to a record in a linked record list. To see this new setting, edit a ''' Integration Key ManagementSpecial - Linked Record List''' option custom field and the setting is called '''PGP KeyRefresh On Update'''.<!-- 130352 - L1 form doesn' which can be used for encryption t refresh when changes are made to a L2 in the report export and decryption in the autoloader.a modal window -->
<!-- 128992 Implemented various measures. --><!-- 142337 - Netcraft pen test 202208 section 7 --><!-- 143863 - NOV2022 - Burpsuite Security Scan results - PGP encryption keys added in the Integration Key Management -><!-- 144428 - Security Vulnerability - Cross Site Scripting --><!-- 144124 - The Home Depot Foundation - Synack Vulnerability - IDOR to edit+delete any status --><!-- 143534 - Add option to 'Link Device' on TOTP MFA code screen -->* Updated labels for '''System Visibility Permissions''' found on the '''People''' tab which are related to hiding items in the '''User Menu'''. Specifically, the display of labels for items found under the '''Special - Like Button RatingManage''' custom field so heading in the thumbs up user menu have changed (Profile, Password, Personal Settings, Roles and down will display in PDFsAccess, Filters, and Resource).<!-- 141534 - Not sure Personal Settings - Menu Access is working as expected -->
<!-- 140180 113759 - SmartCheck Validation doesn't work UX and behaviour problems with new date format portal config -->* Added an option Updated the look of “Last 3 Months” aggregate shortcuts to automatically reduce the '''System Usage Chart''' located at '''Global Settings''' > '''Systems''' tabsize of text to accommodate up to 14 characters on desktop resolutions.
<!-- 138372 124202 - System Usage Chart - All option just shows last 24 hours aggregate shortcuts with big numbers -->* Deprecated the classic setting to hide the top button action bar on the user profile. Previously, this setting was located at Updated '''Global Settings''' >''' SecurityReport Builder Help''' to include functions used with business day calculations. Specifically, SS_FUNC.ADDBUSDAYS, SS_FUNC.COUNTBUSDAYS, and SS_FUNC.COUNTWEEKDAYS which are found under the platform options tab in the help.<!-- 143021 - Adding ss_func syntax to report builder help --> '''System Visibility Permissions''' > '''People''' tab > '''Hide Menu Bar'''.
<!-- 136472 143602 - HP Fortify - Vulnerable Open Source Components T2P Tool update for email broadcast table -->* Updated the state/province standard field options for Kenya and Deprecated the U.KSmartSimple mobile app.
<!-- 139609 140599 - Standard Field - State / Province Incorrect for Kenya (ID 1056) Deprecate the mobile app --><!-- 136592 - Council Area drop down options in Organisation Profile -->* Updated wording on the SmartSimple Cloud cookie policy for added clarity.
===August 11th December 1st 2022 (202208202211.0103)===
====Fixes====
* Fixed an issue with custom report search where the search criteria would not automatically minimize when records opening in a query was performedmodal window rather than a full window in a portal.
<!-- 139881 143441 - Custom Report (Intern Search) not displaying results Issue when opening applications from portal -->* Fixed an issue with the '''Lookup - Autocomplete Options''' custom field where the field would lose focus when a search was performedworkflow tasks were not adding new roles to users because certain permissions were not found.
<!-- 136834 143604 - Priority area/interview location quick edit window Update Role WF Task not adding role to users -->* Fixed an issue where running the T2P tool would overwrite the access tokens for Docusign when the integration links option is not selected.
====Fixes====
* Fixed an issue with the French Canadian translation file that prevented web page views from displayingline breaks in autoloader files not working when encapsulated in double quotes.
<!-- 139697 143244 - WPVs are blank for french users Line Breaks in Autoloader file not working with double quotes -->* Fixed an issue with the sorting of rows by '''Last ModifiedStart Date'''and ' date in ''End Date''' fields when using '''Quick Edit''' on '''Transactions'''. This affected users that had a different timezone than the custom fields list viewserver.<!-- 139522 - sort by last modified not working -->
====Other Changes====
* Updated the Catalan, Updates to Danish, Spanish, and French (Canada) translation filesPortuguese translations.<!-- 139403 143586 - July 2022 Upgrade November translations –for Danish and Portuguese -->