Smartstaff, administrator
3,321
edits
Changes
→Updated TLS to Enforce 1.2 for Added Security
==General Details==
===Upgrade Dates===
Public Cloud Production release date: '''July 21 November 10 2022'''<br />Public Cloud Backup release date: '''June 30 October 27 2022'''
Private Cloud Production (Managed Upgrades) release date: '''July 28 November 24 2022'''<br />Private Cloud Backup (Managed Upgrades) release date: '''July 21 November 10 2022'''
==Overview==
Watch this video to get a general overview of the new features in this release.
{{#ev:youtube|SeqIGYtM9bYbABdVKpzxHg}}
===Major Updates===
====TitleEnforcing Deny Permissions for Portal Pages on Common Role====TextChanged the behavior of the '''Deny Access''' permission setting for pages on the '''Common''' portal. This setting will now deny access to the portal page for any roles selected. Previously, the '''Deny Access''' permission hid the link from view in the main header menu but the page was still accessible via a portal shortcut. If you want to hide a portal page but still allow people to access the portal page via a shortcut, toggle off '''Display As Header Link'''. To see the affected setting go to '''Global Settings''' > '''Users''' tab > '''Portals''' > '''Common''' > Edit a '''Portal Page''' > '''Permissions''' tab.[[File:2022-11-ticket-142111-1.png|thumb|none|800px|The <strong>Deny Access</strong> permission settings will be enforced on the common role.]][[File:2022-11-ticket-142111-2.png|thumb|none|800px|The setting that controls visibility of portal pages in the header.]]<!-- 142111 - Still access portal sections using link if role based permissions applied --> ====Deprecated Password Variables====We will be deprecating several password variables for security reasons in 2023. For example, sending passwords as plain text via emails is not a secure practice. If your system contains any of these deprecated variables, they will display as plain text. Deprecated variables include: <code>@password@</code>, <code>@checkportalpassword@</code>, <code>@checkactivatedpassword@</code>, <code>@randompassword@</code> and <code>@passwordresetlink@</code>. System Administrators must change existing email templates to use password activation links that will send the user to a page where the user can set their password. The syntax for password links is https://<code>@url@@activationlink@</code>. Emails that need to be updated are located at '''Menu Icon''' > '''Global Settings''' > '''Security''' tab > '''Password and Activation Policies''' > Click the''' Activation Emails''' tab in the left navigation. Another location where these variables may be present is on user signup pages. To find user signup email templates go to '''Menu Icon''' > '''Global Settings''' > '''Communications''' > '''System Email Templates''' > Search for “New User”.[[File:2022-11-ticket-139473-1.png|thumb|none|800px|Deprecated password variables need to be replaced or removed. For example, this email template was updated to use the activation link variable.]]<!-- 139473 - Remove ability to retrieve password on request password/new user email templates using variable syntax --> ====Enhanced Multi-Factor Authentication====Moved multi-factor authentication (MFA) settings from the user roles to '''Global Settings''' > '''Security''' tab > '''Password and Activation Policies'''. In this new location, you can enable MFA and assign MFA options to some or all roles from a single central location. Additionally, there is also a new toggle called '''Enable Trusted Device'''. If you enable trusted devices, you can set the time period in which a person who has authenticated into the system can bypass entering the MFA verification code. To learn more on MFA setup, read [[Multi-Factor Authentication|our article on multi-factor authentication]]. '''Note''': in an effort to enhance everyone’s security we will by default enable multifactor authentication for all roles in 2023.<!-- Ticket ID139210 - MFA remember my computer (trusted device) functionality. -->[[File:2022-11-ticket-139210-1.png|thumb|none|800px|Multi-factor authentication (MFA) settings have moved and are defined globally instead of on the role.]][[File:2022-11-ticket-139210-2.png|thumb|none|800px|Optionally, you can allow users to remember their device for a definable number of days so they don’t need to enter a verification code each time they log in.]] ====Enhancements to the List View====Added system filters to the basic search '''Filter''' drop down. Previously, system filters were only visible when '''Advanced Search''' was toggled on. We also added the ability to set system filters as configuration only. Setting a system filter as configuration only will hide the system filter from the '''Filter''' drop down on the search for end users, but still allow system administrators to select the system filter while configuring their system. Additionally, if you have permission to edit a system filter, you will also see an edit button beside the filter name in the dropdown.<!--Comment133656 - List views and filter improvements (include system filters in basic search) -->[[File:2022-11-ticket-133656-1.png|thumb|none|800px|<strong>System Filters</strong> will now appear in the basic search drop down.]][[File:2022-11-ticket-133656-2.png|thumb|none|800px|<strong>System Filters</strong>can be flagged as configuration only and then they will not show up in the basic search drop down.]]
===Minor Updates===
====TitleAdded Invitations Import Wizard to UTA Level 3s====TextExtended the ability to easily import invitations in bulk using the '''Invitation Import Wizard''' to Level 3s. To see this link, go to '''UTA Settings''' > '''Level 3''' tab > '''Invitation Import Wizard'''.<!--Comment124048 - L3 invitation import wizard -->
==On-Demand System Upgrades==Updated the Transaction Type Settings Page====The following features are available immediately with Added the left navigation to the '''Transaction Type''' settings page. Specifically, the left-hand navigation now contains a tab for '''Template Page''' and '''Verification Mapping'''. Also, the application '''Advanced Logic''' setting has been renamed '''UTA Link Button Condition''' and has been moved to the bottom of the upgrade'''Main''' tab. To see these changes, but must first be enabled or configured by a go to '''Global AdministratorSettings'''> '':'Transactions''' tab > '''Types''' and edit a type.<!-- 125402 - Modernize the Transaction Type pages -->
===Major Updates=======TitleAdded Ability to Specify a Role as External Only====TextAdded the ability to tag a role as exclusively external in order to prevent that role from being assigned to internal users. Specifically, the '''Internal User Role Only''' toggle has been replaced with '''Available to'''. This new setting can be used to restrict roles so they can only be given to an internal or an external users. To see this setting, go to '''Global Settings''' > '''Users''' tab > '''Roles''' > Edit a '''Role'''.<!--Comment125839 - Enhancement Request: 'External Role Only' option on roles External -->[[File:2022-11-ticket-125839-1.png|thumb|none|800px|Setting to restrict roles so they can only be given to internal or external users.]]
====Updated Breadcrumb Appearance====Updated the look of the breadcrumb navigation to be more compact and mobile-friendly.<!-- 126333 - Breadcrumb (hierarchical record navigation bar) on mobile phone and desktop -->[[File:2022-0711-ticket-128740126333-1.png|thumb|none|800px|PDFs can now be generated via a workflow task The breadcrumb navigation as it will appear after the upgrade.]][[File:2022-11-ticket-126333-2.png|thumb|none|800px|The breadcrumb navigation as a specific roleit appeared before the upgrade.]]
====Added Ability to Add Attachments from Configuration Folders in Export System Email Templates===='''Global Administrators''' editing Added a button to the system email templates can now add default attachment files from a configuration folderpage to allow for exports. To see this new feature, go to the '''Menu IconExport Email''' > button, go to '''EmailGlobal Settings''' > '''TemplatesCommunications''' tab > Edit a template > '''Default Attachments''' '''(Configuration Folder)System Email Templates'''.<!-- 124007 126880 - Select Default Attachment for Email Template from Config Folder Need a way to easily export all system emails -->
====Added Type and Status Filters to Workflow Email Previews====Added the '''Type''' and '''Status''' filter to the workflow email preview for easier record searching and selection. To see this setting, go to '''Workflows''' > Edit a workflow > '''Tasks''' tab > Edit a task of the '''Acknowledgment''' type > '''Message Template''' tab > '''Preview'''.<!-- 126881 - Improve email preview lookup from workflow -->[[File:2022-0711-ticket-124007126881-1.png|thumb|none|800px|A new field allows Global Administrators to add default attachments from <strong>Configuration Folders</strong> to Email TemplatesType and Status filter on workflow email preview.]]
====Added New Date Primary Contact Optionfor UTA Group Emails====Added a new date option to render dates with the month name fully spelled out to avoid confusion. Example: January 03, 2022 (mmmm dd yyyy). To view dates in this new format, change your settings located at '''User MenuPrimary Contact''' > '''Personal Settings''' > '''Regional''' taboption when creating a group email from a UTA Level 1, 2, and 3 list view.<!-- 128666 - Enhancement Request - Enable Global Date Format -->
====Added Ability to Lookup Email Templates in Group Emails====Added ability to lookup email templates for group emails. Previously, you could select email templates using a drop down but now you can also search for email templates in the dropdown which is helpful if you have many templates. To see this feature, go to '''UTA''' > Select desired records > Click '''Group Email''' > Select users and click '''Next''' > Click the '''Template''' field to see a new lookup field. This feature is also available for group emails sent from the record contacts page.<!-- 138069 - Enhancement - Improve Template Selection in the New Email/Message Centre -->[[File:2022-0711-ticket-128683000-1.png|thumb|none|800px|Users can specify their personal pronouns on their profile by using the new standard fieldWhen creating a group email, type to filter available email templates making it easier to find that desired email template.]]
====Added the Ability to Use an Email Template as the Message Template in Workflow TasksInvitation Details Button====Previously, you could use an email template to populate the message template in Added a workflow email task. Once the message template was populated from the email template, there was no longer a connection between the two. If the email template was updated, the message template in the workflow task did not update.We have added an option new button called '''Details''' to use the email template as the message templateinvitations page. This way you can use the same email template in multiple workflows and you can update the template in a single location and all workflows new button will get updated appear for easier maintenance.To see this new setting, go to every invitation and shows '''Menu IconInvited Date''' > , '''WorkflowsLast Updated''' > , '''TasksResponse Date''' tab > Edit and optionally a task of reason for why the user accepted or declined the invitation. To see this new button, go to the desired '''Type''' of '''AcknowledgementUTA''' > Open a record > Click '''Message TemplateInvitations''' tab > Set on the '''Message Type''' to '''Email''' and choose '''Email Template''' for '''Email Type'''left-hand navigation.<!-- 126882 128627 - Email templates and workflow email tasks that uses the email template should be connectedEnhancement to Invitations feature, add date of invite/accept/decline -->[[File:2022-11-ticket-128627-1.png|thumb|none|800px|New Invitation Details button makes it easier to see more information.]]
====Added Search to Activity List Views on Record Pages====Added search for activity list views within a record. For example, on the Level 1 record, click on the Level 2 '''Activity''' tab to see the list view with search options. On level 2 records, click on the Level 3 '''Activity''' tab to see the list view with search options.<!-- 130906 - Add search to left-hand menu activity list views -->[[File:2022-0711-ticket-126882130906-1.png|thumb|none|800px|New option Added search to use an email template as activity list views on the message template in workflow tasksrecord.]]
====Added Ability to Autosave New Recordsuse Custom Lookup Options with Dynamic Field Visibility Controls====Added a new setting the ability to automatically save use custom lookup fields as the record when opening up a new record pageprimary fields in''' Dynamic Field Visibility Controls'''. To enable this settingset up custom lookup options, go to create a '''Global SettingsSelect One -Dropdown List''' > with '''SystemEnable Dynamic Content''' tab > Toggle on and '''Automatically Save New Records on CreationUse Custom Lookup Options'''toggled on. This setting applies To specify a custom lookup options field, go to new records of the following types: '''UTA Settings''' > '''Level 1/2/3''', tab > '''UsersDynamic Field Visibility Controls'''> Create a new visibility control > Once saved, set the '''OrganizationsPrimary Field''', and to be the desired '''TransactionsCustom Lookup Options'''field.<!-- 132929 133369 - Add an option Allow Dynamic Field Visibility to auto save new recordswork with Custom Lookup Options -->
====Added Ability to Update Custom Fields across Versions without Updating the Display OrderConfiguration Mode in View Mode====When copying custom field changes Added ability to other versions, we added enter '''Configuration Mode''' when a new option to skip updating display order record is in case you wanted to update a field but you do not want to update the display order of that field in all versions'''View Mode'''. To see this settingPreviously, go to '''UTA Configuration SettingsMode''' > was only available when records were in '''Level 1/2/3Edit Mode''' > . '''Custom FieldsConfiguration Mode''' > Select desired fields > Click can be found under the '''Copy to Other VersionsTools'''. Select menu for '''UpdateUser''' for, ''' If field already existsCompany''' to see the new toggle called , and '''Update Display OrderLevel 1'''record pages.<!-- 133298 133786 - Versioning and Field Order Make Configuration mode available in view mode -->
====Added Default Page Layout Option to the Web Page View Custom Field====Added a new setting for '''Special - Web Page View''' custom fields to allow for default or custom page layouts. It is recommended that you leave this set to the new '''Default''' option whenever possible. This ensures you always have the latest template. There is a''' Custom''' option if you want to see and modify the web page view HTML template. To see this setting, go to the settings of any web page view custom field. Under the '''General Settings''' tab, the new setting is called '''Page Layout'''.<!-- 134367 - Default/Custom page layout option for web page view fields -->[[File:2022-0711-ticket-133298134367-1.png|thumb|none|800px|Users can skip updating New web page view option to always have the display order when copying latest and greatest template or choose custom fields across different versionsto see and modify the template.]]
====Added Ability Tab for for Failed E-Signatures to Download All Attachments in a Record from the RecordQueue====Added ability a '''Failed''' tab to download all attached files from a record with a single click from inside the record. This feature collects the files from upload fields, creates a single zip file and then downloads that zip file just like the '''Enable File DownloadE-Signatures Queue''' feature to make it easier to see any e-signature documents that failed. This allows users who’ve sent batch e-signature requests to see the status in one place instead of individually checking the status on list viewseach web page view. To set see this featuretab, go to '''Global Settings''' > '''SecurityIntegrations''' tab > '''System Feature PermissionE-signature Queue''' > '''FeaturesFailed''' tab > '''Enable File Download from Record'''. Once this feature is set, you can go to the desired '''UTA''', '''Organization''', or '''User''' record and click the '''Actions''' menu and select '''Download Files'''.<!-- 133397 138900 - OneE-click Downloadsignature Failed documents list -->
====Added Integration for UK Companies House API for Organization Signup Pages==On-Demand System Upgrades==Added support for users who need to lookup organizations using The following features are available immediately with the United Kingdom’s registrar Companies House. To see this optionapplication of the upgrade, go to '''Global Settings''' > '''Organization''' tab > '''Signup Pages''' > Create but must first be enabled or edit configured by a signup page > '''General''' tab > '''Verification Service'''. There is now a new option called '''United Kingdom Companies House (CH)'''. You must set up an integration key in order to use this feature by going to '''Global Settings''Administrator' >''' Integrations''' tab > '''Integration Key Management''' > Create a key for Companies House.<!-- 134018 - Companies House Integration (API)-->:
===Major Updates=======Added Default Settings for Custom Field Translation ServiceAbility to Autosave Fields====Added new translation options for text box single and multiple line custom an option to autosave fieldson the record page. Users who utilize If you enable this option, data entered into an input will be saved when you click out of the translation service feature can now set a default language to translate from and input. A small green notification (toast message) will display on top of the screen toindicate the change has been saved. To see the new settingsturn on this setting, navigate go to the desired text box custom field and toggle on '''Enable Translation ServiceGlobal Settings'''. > '''Enable Field Translation ServiceSystem''' must also be toggled tab > Toggle on, which is located under '''Global SettingsAutomatically Save Field Values when Editing Records''' > '''System''' tab.<!-- 61319 - Translation Service feature - Allow configuration of default settings within a given field-->
<u>'''Note:'''</u> Button colors will not apply to configuration pages. After applying button colors, it is recommended that you log out and clear your browser cache to see changes.<!-- 127822 - Capability to change button colors -->[[File:2022-11-ticket-127822-1.png|thumb|none|800px|Adjust the visual priority of buttons with color classes.]][[File:2022-11-ticket-127822-2.png|thumb|none|800px|color class options.]] ====Added Ability to Make Media Files Publicly Shareable by Default==Beta Previews==No features are Added setting to enable media library files to be publicly available for beta preview streaming by default. To use this upgradefeature, go to the settings for the desired '''Upload - Multiple Files Storage''' custom field that has '''Media Library''' enabled and toggle on '''Enable Media Sharing by Default'''. Previously, video and audio files were not shareable by default and users needed to manually enable sharing on each file one by one after upload.<!-- 133789 - Add a field level setting to the Media library, to default all videos to be publicly available -->[[File:2022-11-ticket-133789-1.png|thumb|none|800px|New option to make media shareable (publicly available for streaming) by default.]] ===Minor Updates=======Added Option to Add a Subject Line to Notes====Added setting to allow subject lines for the notes. Additionally, the notes can also be collapsed. If this new setting is enabled, individual notes can be collapsed and expanded. To enable this feature, go to '''Global Settings''' > '''System''' tab > Toggle on '''Enable Subject Line for Notes'''.<!-- 138067 - Enhancements - Subject Line for Notes & Ability to Collapse -->[[File:2022-11-ticket-138067-1.png|thumb|none|800px|New option to add a subject to notes. If you opt in you can also collapse individual notes.]]
====Added Export Functionality Metadata Mapping for Message QueueStripe Payments====Added ability to export When configuring payment forms of the type '''Message QueueCredit Card (Stripe)''' list. This will export under the following fields: '''ToConnectivity'''tab of a UTA, you can now define '''FromMetadata Mapping''', '''Subject''' and''' Dates'''. The export mapped data will not include the body of the message or its attachments. To see be included in the new export, go charge submitted to '''Menu Icon''' > '''Message Queue''' > click the desired tab and then click the '''Export''' button at the top of the list viewStripe.<!-- 124563 126287 - Export files in Message Queue Stripe Payment -->
==Notes for Admins======Added Indicator Icon to Message Queue Version Option for Email AttachmentsCustom Fields Permissions Quick Edit====Added a paperclip icon ability to target custom fields by version when using the list view of emails in '''Permissions Quick Edit''' feature. To see this setting, go to '''UTA Settings''' > '''Level 1/2/3''' tab > '''Custom Fields''' > Click the '''Message QueuePermissions Quick Edit''' to indicate whether button in the email contains an attachmentlist view button bar.<!-- 127638 129133 - Custom Fields - Email Attachment indicator on Message queue Quick Edit Permissions -->
====SmartConnect Added Ability to Get Translation Details in the API changes====Modified Added ability to get translations using the text options under '''Action Types''' for improved clarity[https://dev.smartsimpleqa.com/devtools/api.html?apiversion=2 SmartSimple API]. Results are returned in an array.<!-- 128706 126424 - Consumer/provider custom fields update Adding of translation details to meta data -->
====Updated Autoloader to Apply Multiple Roles/Categories for New RecordsConfiguration Folders and Files Included in Cloning Scripts====Added ability to add multiple user roles or multiple company categories when importing new records via the autoloader. This eliminates the need to apply multiple roles or categories by using additional workflows. To see this settingWhen systems are cloned, go to '''Menu Icon''' > '''Autoloaders''' > Edit an autoloader > '''ProcessConfiguration Folders''' tab. Depending on and the '''Create/Update Behavior''' option chosen, you files within will see be included in the '''Role/Category''' field now accepts multiple role/category optionscloning scripts.<!-- 132802 128348 - Autoloader Cloning - Abilitiy to add more than one role to created/updated user Include Configuration Folders and Contents and Portal Config Images -->
====Added Link Option to Profile for Standard FieldsBypass Secure Session Validation Based on IP Addresses====Added a link beside the setting called IP addresses to bypass secure session validation. This setting is only visible if '''Created ByDisable Secure Session Management''' and '''Updated By''' standard fields that open up the corresponding user profile in a is toggled off. This new modal windowsetting allows you to keep secure session management active for all users while allowing some users to bypass this security. This setting is applied to ''located at 'UTA Level 1/2/3''Global Settings' records, ''> 'User''Security' records, and '''Organization''' records. If you navigate to the standard field you can hide this link using the '''Restrict Profile Link''' settingtab.<!-- 132989 136789 - Created By Link Whitelisting IP option to use with Secure Session Management -->
====Updated Login PagesAdded Dynamic Visibility Controls to the Custom Field Search Reference====Added the ability to specify a see '''Dynamic Visibility Controls''' in the custom field '''Logout Redirect URLSearch Reference''' for alternate login pages. Additionally, This makes it easier to identify the ability to include an "origin" URL parameter has been removedfield that controls the visibility of a custom field.<!-- 134351 - Add configurable setting for logout redirect url-130177 ->Show related Dynamic Field Visibility Controls in Search Reference
====Added Patch for Document Generation ToolsError Message to Media Library====Added additional validation an error message in the '''Media Library''' that will display if a video or audio file fails to document generation tools, such as PDFWriter and DOCXWriterbe processed.<!-- 135113 132058 - pdfWriter Vulnerability Patch Media library failure message and checking -->
====Added Security Settings Ability to Autoloader Ad Hoc Upload PageLink and Unlink Transactions with API====Added additional role security the ability to autoloader where link and unlink transactions from the ad hoc upload page will check if Level 1 and Level 2 using the [https://dev.smartsimpleqa.com/devtools/api.html?apiversion=2 SmartConnect API version 2]. This gives you are a '''Global Administrator''' or if you have any of the roles permitted ability to use remove the URL. If no roles are configured, only relationship without deleting the '''Global Administrator''' will have accesstransaction. To see this setting, go Adding transactions to '''Menu Icon''' > '''Autoloaders''' > Edit an autoloader > '''Process''' tab. There will be a new '''Role''' setting under the '''Ad Hoc Upload''' sectionLevel 2 is also now supported.<!-- 136382 134010 - Additional Caixa Security Audit Report (Autoloader Permissions) SmartConnect API link and unlink transactions from Objects -->
====Updated State/Province Options for Cayman IslandsAdded Ability to Limit API Access to Reports====Updated the list Added ability to limit which reports can be requested with an API call. The new setting called '''Reports''' can be found by navigating to '''Global Settings''' > '''Integrations''' tab > '''SmartConnect API''' and editing an API function of districts (State/Province standard field) for the Cayman Islands'''Object Type''' called '''Report'''.<!-- 137992 135052 - state/province options Can we arrange API access for cayman islands are not correct only 1 report? -->
====Added Validation to Virtual Folder and Alias Names for Login PagesUpdated Appearance of the Data Exchange Summary====Added validation to virtual folder names Updated the look of the classic '''Data Exchange Summary''' that shows incoming and alias names within login pages outgoing packages on UTA records. The new message can be collapsed to prevent illegal characters and duplicate namestake up less space.<!-- 135000 132293 - need URI character sanitization of foldername and alias parameter of login page configurations Hide field -->
====Added Role-Based Permission Access the Data Exchange History LogThe Country Formerly Known as Turkey Will Now Appear as Türkiye====Added a new role-based permission settings for the exchange history log, for Updated the '''New Data ExchangeCountry'''standard field list to use the label Türkiye for the country formerly known as Turkey. To see Türkiye is the setting go to '''Global Settings''' >''' Integrations''' tab > (you must be using officially requested label for the '''New Exchange Type''') '''Import Settings''' or '''Export Settings''' > Edit '''Import/Export Setting''' > The new setting is called '''Exchange History Access'''country.<!-- 137437 141553 - DEX3 Exchange History Log - Create Role Permission AccessTurkey > Türkiye : Official country change name -->
====Added SmartField Options Support for Chart Custom FieldsCopy Profiles in Batch Update Buttons====Added support for '''Copy Profiles'SmartField''in custom ' settings options to ''Batch Update Buttons'''. To see the new option, edit the custom field type desired list view > '''Special - ChartBatch Update Buttons''' to easily control if charts will be included in tab > Edit a button of the type '''SmartFieldsCopy''' or not .<!-- 137904 141204 - Special Chart custom field is missing the smartfields options Batch update button (Copy feature) does not store source ID -->
====Security ImprovementsUpdated Report Builder Support====Updates Updated '''Report Builder''' to Apache, JavaScript, and Google Maps APIsupport <code>SS_FUNC. Removed the X-XSS-Protection header from being served by the platform.ADDBUSDAYS<!-- 138391 - Netcraft vulnerability finding 20220612 for Apache config --/code>, <!-- 137569 - Netcraft Pentest Scan - V1code>SS_FUNC. Outdated JavaScript libraries - Google Maps API-->COUNTBUSDAYS<!-- 137794 - API Update Contact - Org association bug and Sonarqube vulnerabilities --/code>, <!-- 137389 - NetCraft Pentest 04-2022 --code>SS_FUNC.COUNTWEEKDAYS<!-- 138525 - Home Depot Finding - XSS app_groupemail.jsp --/code><!-- 138526 - Home Depot Finding - XSS app_appobjlogic functions to assist with complex date calculations.jsp --><!-- 138552 - Home Depot Finding 141877 - XSS app_process.jsp MySQL Function Support -->
====Header Text Template Field Updated TLS to Enforce 1.2 for PortalsAdded Security====The header text template in portals was deprecated in a previous upgradeUpdated "Transport Layer Security (TLS)" references to enforce version 1.2 for improved security. TLS 1. Any content entered into the '''Header Text Template''' options will 0 and 1.1 are no longer be visible after this upgradesupported.<!-- 136309 140404 - Portal header not displaying HP Fortify --><!-- ====Image Compression Exclusion====Images uploaded to the system that have a width or height of greater than 15,000 pixels will no longer be processed by GORT to create a smaller compressed thumbnail image. Images that do not get processed because of image dimensions will be noted in the GORT log. --><!-- 138085 - Image compression exceptions for png files Insecure Transport: Weak SSL Protocol -->
====Deprecate Running Associated Workflow after Change Status Workflow Task Executed on Related ObjectsInvalid Characters in E-signature File Names Replaced with Underscores====On new workflow tasks of the type of "'''Change Status'''" if there is a workflow associated with the target status it Invalid characters for e-signature file names will not be triggered. On existing tasks of this type, you will see a toggle '''Run Associated Workflow''' on '''Target Objects''' under replaced with underscores to ensure the target status drop down when the target object has '''Related Objects''' option selected. This toggle will only appear on existing tasks to avoid disruption. The toggle will not appear for new tasks and if it is toggled off, it will no longer be availablesigning process completes successfully.<!-- 134968 142043 - Deprecate running associated workflow after change status workflow task executed on related objects Signed Contract Not Received from Adobe -->
==Service Packs==
===October 27th 2022 February 23th 2023 (202210202302.03)===
====Fixes====
* Fixed an memory issue with status indicators when used with standard field containersfor the service process manager (Gort Automation).<!-- 146147 - Gort locked on image compressing task -->
====Fixes====
* Fixed an issue with the Open button not working on organization contacts and associates when '''Enable Straight JoinAdvanced Data Tables''' was toggled on for classic reports. <!-- 141663 - Open Button Not working On Organization Contacts & Associates-->* Fixed an issue with PDF generation where problematic embedded PDF files did cells were not display a file corruption message in the combined PDFpopulating on initial load under some circumstances.
<!-- 141235 141737 - Generated PDFs missing biosketches and no error generated ADT not show information in calculated columns-->* Fixed an issue where changing a user to a''' Global Administrator''' was not retained.<!-- 145408 - Global Admin toggle not sticking on internal contact -->* Fixed an issue with the '''Annotation ModeText Box – Date and Time''' custom field where the custom field would lose its caption after an annotation activity occurred time was not rounding correctly when the caption time was set converted to be placed above the another time zone.<!-- 145622 - DateTime field.incrementing by 30minutes on save -->
====Other Changes====
* Updated the messaging for the '''Upload - Multiple Files Storage''' custom field to include missing Spanish translations for Catalan group emails and French Canadianthe password activation page.<!-- 141827 - Upload field Message -->
<!-- 145670 - The generate password page is not translated -->
<!-- 145286 - Group Email window header translation -->
===February 9th 2023 (202302.01)===
====Fixes====
* Fixed an issue with the delete permissions on the duplicate check user/organization page so users with permission are able to delete an organization/user while merging.
<!-- 141755 145047 - Change pdf generation to use temp files for all operations Issue with negative numbers in the system -->* Fixed an issue with the '''Upload - Single File Storage''' field where its instruction box disappeared when the '''File Upload''' modal window was showncomparing dates for autoloader file processing.
<!-- 140766 144908 - SingleAutoloader appears stuck. Status is 'running 2023-File Upload Field Titles and Instructions disappearing (2273) 01-12 12:25:04' -->* Fixed an issue with dynamic field visibility where instructions configured on fields under a how the'''Layout - Title BarForgot Password''' custom field were not being shown or hidden properlyscreen was rendering on mobile devices.
<!-- 140986 144106 - Title Bar/Field Instructions Bug Forget Password Link - Android and Apple Mobile Browsers -->* Fixed listview sorting to sort on an issue with the type’s '''CaptionMessage Center'''where a file could not be removed from a selected template if it contained a single quote ( ' instead of )in the type’s '''Name'''filename.
<!-- 140456 138660 - Listview is sorting by Type Name instead of Type Caption Cant remove file with Message Centre if it has single quote in the name -->
====Other Changes====
* Added support for Service Provider Updated the user’s personal settings to no longer display the time-based one-time password (SPTOTP) initiated key and QR code that was associated with multi-factor authentication for single sign-on (SSOMFA). Previously, only Identity Provider (IdP) initiated SSO This was availablehidden to enhance security. A new The '''Multiple Environment Support (MES) Group IdentifierTOTP Secret Key''' was also added which may be used to give you a consistent configuration across multiple environments (production, testing, and backup). The system will use the '''Multiple Environment Support Group IdentifierTOTP QR Code''' to detect and render the appropriate SSO link on your login page, based on your environmentare now only visible when you first set up TOTP. To see the You can generate a new settings, go secret key and QR code by going to the desired user profile record and clicking '''Global SettingsActions''' > '''IntegrationsEdit roles and access''' tab > '''Single Sign-On''' > Edit a single sign-on configuration.<!-- 134892 - Service Provider initiated Single Sign On (SP-initiated SSO) --> * Added a new list type of '''Mixed Record Type''' to the '''Special - Linked Record List''' custom field. This new list type can be used to display multiple list views with different types of records. For example, it can show a listview of consumer activity records and a listview provider activity records in the same '''Linked Record ListReset TOTP'''.
<!-- 140832 145592 - Batch update buttons accessible in Emulation Web page view only mode , don’t hide template by default --><!-- 121945 - Update two-factor process -->* Updated the '''Field History''' email behavior on backup servers to show both allow the store value and display value for custom fieldssending of multi-factor authentication (MFA) verification codes as well as password resets. The '''Field History''' window can Other emails on backup servers will not be seen by enabling '''Track Changes''' on dropdown lists, checkboxes, and radio button custom fieldssent.
<!-- 130510 140928 - Enhancement: Show Display Value securing all email sending functions in Field History the system on backup environments (MFA) -->* Set the spellcheck attribute to be false on password input fieldsEnhanced system security by adding additional checks and blocking uploads of files with certain extensions.
<!-- 141302 144430 - Add spellcheck='false' to password fields SmartFolders - File upload security and general issues -->* Updated the text missing translation country names for the '''Report Builder Help'''Danish, Spanish, and Catalan.
<!-- 134051 143763 - Update examples and descriptions in report builder to support allow list of functions Country options not displaying as user's language -->* Added Updated cookie policy to reflect the new cookie used to support for Polish language translationstrusted devices when multi-factor authentication (MFA) is enabled.
<!-- 141272 143518 - Polish not an option in translation languages Update to cookie policy page to reflect fact we no longer just have session-based cookie -->* Update jQuery UI to version 1.13.2Deprecated the '''RSA Disconnected Token''' option from the multi-factor authentication (MFA) dropdown on user roles.
<!-- 140885 139685 - NetCraft Pentest 08-2022 Deprecate the RSA disconnected token option for MFA -->===September 22nd 2022 (202209.03)=======Changes====* Added the ability to enter translations into the message template of workflow tasks using a new button called '''Message Template Translation Settings'''.
====Fixes====
* Fixed an issue with the '''Is Container''' setting where container organizations restricted access query for associated usersfinding custom field ID from the custom field name to improve the speed of validation using SmartCheck.
<!-- 140671 145040 - Contact VS Association SmartCheck Validation Slowness -->* Fixed an issue where reports were error in the '''Archive Scheduler'''.<!-- 141637 - Archive not generating PDFs when using a portal link for encrypted content.placing files on our SFTP -->
===September 8th 2022 January 12th 2023 (202209202301.01)===
====Fixes====
* Fixed an issue where the number of precision values was reports that were not being applied set to the custom field type '''Special - Chart''' be publicly accessible were able to open web page views externally. After this release if the chart had you want a web page view to be publicly available via a '''Number Format''' report you must set the report to be internet enabled and then go to '''None.''' <!-- 135527 - Values on Field Special-Chart -->* Fixed an issue with the “'''Within the last X days”''' clause of the '''Advanced Search''' criteria when the NOT operator was in useweb page view custom field and allow public access.
<!-- 138882 144055 - Listview filter 'Within the last x days' is Searching on Bing returns results that should not working be publicly accessible -->* Fixed an issue with displaying the '''Upload Lookup - Multiple File StorageAutocomplete Options''' field in a list view where only the file limit could be bypassed by enabling''' Keep Version''', uploading a file with the same name as a previously uploaded file, and utilizing the <code>.uploadlink</code> variablefirst of multiple selected options were visible.
<!-- 139097 117079 - More than 2 files can be uploaded to References Lookup - Autocomplete field not showing all data in list view -->* Fixed an issue with the versioning on '''Upload - Single File Storage''' duplicate SmartCheck validation messages displaying under a file upload field where the file type restriction was not being pulled from the desired version.
<!-- 139967 140019 - Single file upload field error Double Validation Message Appearing in Application -->* Fixed an issue with emulating a user the group email wizard where the''' From''' address and attachments were not preserved if you switched the language setting, it was not applying user clicked the '''Preview''' button and then clicked the new language setting everywhere'''Back''' button.
<!-- 139212 141725 - Language Settings Issue When Emulating Users in French Group email from address reverted if you click preview, then back -->* Fixed an issue with email activities the download files feature where Level 2 formulas were not executing when an email the generated file was empty if the field was created from a Level 1 record directly instead of being triggered by a workflowstored to another field.
<!-- 139667 143499 - Simons - Type formulas not executing for email activities Download files feature generating empty zip files -->* Fixed an issue with the aspect ratio of thumbnails in the '''Lookup - Autocomplete OptionsMedia Library''' custom field where records using <code>ssRetiredOptions</code> were appearing in the list of optionsat lower resolutions.
<!-- 140182 142550 - RID Field 1867084 Media Library Images Aspect Ratio Issue in MS Edge on Mac OS --><!-- 142703 - QA Issue: Issues with media files being unplayabale -->* Fixed an issue with portal sections of charts where the type''' List View''' that are using the '''Record Count''' setting. If a user clicks the '''Show More''' link, the results will no longer be restricted to x-axis was displaying the height store value instead of the section on the previous pagedisplay value.
<!-- 139158 142666 - Smart Connect API ConsumerBug on Charts? Showing dropdown 'code/Provider Update Not Creating a Connection number' instead of 'option text' -->* Fixed an Issue with the SmartConnect API when Consumer was a level 2 and the Provider was a level 1.
====Other Changes====
* Added Updated multi-factor authentication to be more secure and easier to set up. Roles using the time-based one-time password (TOTP) will now automatically be brought to a new column instruction screen after being activated. Resetting a user's TOTP MFA must now be done by going to the desired users profile and selecting'''Invitations HistoryActions''' called > '''Invite Sent''' which can be sorted in descending order by date Edit roles and time. To see theaccess''' Invitation History> ''', go to the desired UTA record and click Reset TOTP'''Logs. There is also a new permission on roles called ''' > Roles this role can reset TOTP for'''Invitations History''. This new permission is used to specify which roles can reset a user's TOTP.<!-- 138153 - Should invitation history be ordered in descending order based on date like other histories? -->
<!-- 143115 - MFA Email/Text Code allowed attempts and Lockout Duration -->* Added a Updated autoloader behavior where when new option in users and organizations are created via the '''Custom Field Translation Settings''' so you can use a different file name per language when you rename uploaded filesautoloader, no country will be set if no default country is specified. To see this setting, edit an Upload – Single /Multiple file upload custom field and click '''Custom Field Translation Settings'''Previously new users or organizations would be given the country value of Canada if no default value was set.
<!-- 114975 143525 - no option for translation of file name Users created with wrong country -->* Added a newoption to set which fields should be refreshed upon changes to a record in a linked record list. To see this new setting, edit a ''' Integration Key ManagementSpecial - Linked Record List''' option custom field and the setting is called '''PGP KeyRefresh On Update'''.<!-- 130352 - L1 form doesn' which can be used for encryption t refresh when changes are made to a L2 in the report export and decryption in the autoloader.a modal window -->
<!-- 128992 Implemented various measures. --><!-- 142337 - Netcraft pen test 202208 section 7 --><!-- 143863 - NOV2022 - Burpsuite Security Scan results - PGP encryption keys added in the Integration Key Management -><!-- 144428 - Security Vulnerability - Cross Site Scripting --><!-- 144124 - The Home Depot Foundation - Synack Vulnerability - IDOR to edit+delete any status --><!-- 143534 - Add option to 'Link Device' on TOTP MFA code screen -->* Updated labels for '''System Visibility Permissions''' found on the '''People''' tab which are related to hiding items in the '''User Menu'''. Specifically, the display of labels for items found under the '''Special - Like Button RatingManage''' custom field so heading in the thumbs up user menu have changed (Profile, Password, Personal Settings, Roles and down will display in PDFsAccess, Filters, and Resource).<!-- 141534 - Not sure Personal Settings - Menu Access is working as expected -->
<!-- 140180 113759 - SmartCheck Validation doesn't work UX and behaviour problems with new date format portal config -->* Added an option Updated the look of “Last 3 Months” aggregate shortcuts to automatically reduce the '''System Usage Chart''' located at '''Global Settings''' > '''Systems''' tabsize of text to accommodate up to 14 characters on desktop resolutions.
<!-- 138372 124202 - System Usage Chart - All option just shows last 24 hours aggregate shortcuts with big numbers -->* Deprecated the classic setting to hide the top button action bar on the user profile. Previously, this setting was located at Updated '''Global Settings''' >''' SecurityReport Builder Help''' to include functions used with business day calculations. Specifically, SS_FUNC.ADDBUSDAYS, SS_FUNC.COUNTBUSDAYS, and SS_FUNC.COUNTWEEKDAYS which are found under the platform options tab in the help.<!-- 143021 - Adding ss_func syntax to report builder help --> '''System Visibility Permissions''' > '''People''' tab > '''Hide Menu Bar'''.
<!-- 136472 143602 - HP Fortify - Vulnerable Open Source Components T2P Tool update for email broadcast table -->* Updated the state/province standard field options for Kenya and Deprecated the U.KSmartSimple mobile app.
<!-- 139609 140599 - Standard Field - State / Province Incorrect for Kenya (ID 1056) Deprecate the mobile app --><!-- 136592 - Council Area drop down options in Organisation Profile -->* Updated wording on the SmartSimple Cloud cookie policy for added clarity.
===August 11th December 1st 2022 (202208202211.0103)===
====Fixes====
* Fixed an issue with custom report search where the search criteria would not automatically minimize when records opening in a query was performedmodal window rather than a full window in a portal.
<!-- 139881 143441 - Custom Report (Intern Search) not displaying results Issue when opening applications from portal -->* Fixed an issue with the '''Lookup - Autocomplete Options''' custom field where the field would lose focus when a search was performedworkflow tasks were not adding new roles to users because certain permissions were not found.
<!-- 136834 143604 - Priority area/interview location quick edit window Update Role WF Task not adding role to users -->* Fixed an issue where running the T2P tool would overwrite the access tokens for Docusign when the integration links option is not selected.
====Fixes====
* Fixed an issue with the French Canadian translation file that prevented web page views from displayingline breaks in autoloader files not working when encapsulated in double quotes.
<!-- 139697 143244 - WPVs are blank for french users Line Breaks in Autoloader file not working with double quotes -->* Fixed an issue with the sorting of rows by '''Last ModifiedStart Date'''and ' date in ''End Date''' fields when using '''Quick Edit''' on '''Transactions'''. This affected users that had a different timezone than the custom fields list viewserver.<!-- 139522 - sort by last modified not working -->
====Other Changes====
* Updated the Catalan, Updates to Danish, Spanish, and French (Canada) translation filesPortuguese translations.<!-- 139403 143586 - July 2022 Upgrade November translations –for Danish and Portuguese -->