Smartstaff, administrator
3,321
edits
Changes
→Updated TLS to Enforce 1.2 for Added Security
====Added New Button Color Classes====
Added a new setting for save, submit and delete buttons which gives you the ability to adjust the visual priority of buttons. Buttons can now be color-coded using predefined styles. For example, you could make all continuation actions green while negative actions red. A neutral color could be used for secondary buttons. To configure default, save and delete buttons go to '''Global Settings''' > '''Branding''' tab > '''Colors and Styles'''. To configure custom save and submit buttons go to the desired '''UTA''', '''Organization''',''' User''', or '''Transaction''' tab and click the '''Submit and Save Buttons''' link.
<u>'''Note:'''</u> Button colors will not apply to configuration pages. After applying button colors, it is recommended that you log out and clear your browser cache to see changes.
<!-- 127822 - Capability to change button colors -->
[[File:2022-11-ticket-127822-1.png|thumb|none|800px|Adjust the visual priority of buttons with color classes.]]
Updated '''Report Builder''' to support <code>SS_FUNC.ADDBUSDAYS</code>, <code>SS_FUNC.COUNTBUSDAYS</code>, <code>SS_FUNC.COUNTWEEKDAYS</code> functions to assist with complex date calculations.
<!-- 141877 - MySQL Function Support -->
====Updated TLS to Enforce 1.2 for Added Security====
Updated "Transport Layer Security (TLS)" references to enforce version 1.2 for improved security. TLS 1.0 and 1.1 are no longer supported.
<!-- 140404 - HP Fortify - Insecure Transport: Weak SSL Protocol -->
====Invalid Characters in E-signature File Names Replaced with Underscores====
==Service Packs==
===February 23th 2023 (202302.03)===
====Fixes====
* Fixed memory issue for the service process manager (Gort Automation).
<!-- 146147 - Gort locked on image compressing task -->
===February 16th 2023 (202302.02)===
====Fixes====
* Fixed an issue with''' Advanced Data Tables''' where cells were not populating on initial load under some circumstances.
<!-- 141737 - ADT not show information in calculated columns-->
* Fixed an issue where changing a user to a''' Global Administrator''' was not retained.
<!-- 145408 - Global Admin toggle not sticking on internal contact -->
* Fixed an issue with the '''Text Box – Date and Time''' custom field where the time was not rounding correctly when the time was converted to another time zone.
<!-- 145622 - DateTime field incrementing by 30minutes on save -->
====Other Changes====
* Updated missing Spanish translations for group emails and the password activation page.
<!-- 145670 - The generate password page is not translated -->
<!-- 145286 - Group Email window header translation -->
===February 9th 2023 (202302.01)===
====Fixes====
* Fixed an issue with the delete permissions on the duplicate check user/organization page so users with permission are able to delete an organization/user while merging.
<!-- 144732 - Security issue with org deletion -->
* Fixed an issue with the processing of negative numbers for Norwegian krone (NOR) and Swedish krona (SEK) currency where the negative indicator on the currency value was stripped.
<!-- 145047 - Issue with negative numbers in the system -->
* Fixed an issue with comparing dates for autoloader file processing.
<!-- 144908 - Autoloader appears stuck. Status is 'running 2023-01-12 12:25:04' -->
* Fixed an issue with how the''' Forgot Password''' screen was rendering on mobile devices.
<!-- 144106 - Forget Password Link - Android and Apple Mobile Browsers -->
* Fixed an issue with the '''Message Center''' where a file could not be removed from a selected template if it contained a single quote ( ' )in the filename.
<!-- 138660 - Cant remove file with Message Centre if it has single quote in the name -->
====Other Changes====
* Updated the user’s personal settings to no longer display the time-based one-time password (TOTP) key and QR code that was associated with multi-factor authentication (MFA). This was hidden to enhance security. The '''TOTP Secret Key''' and '''TOTP QR Code''' are now only visible when you first set up TOTP. You can generate a new secret key and QR code by going to the desired user profile record and clicking '''Actions''' >''' Edit roles and access''' > '''Reset TOTP'''.
* Updated the''' Web Page View''' field to have a toggle for SmartFields. By enabling the SmartFields template, the HTML and CSS used to create a PDF of the fields on this record will be automatically generated. This is recommended over adding the SmartField template manually as you will not be required to update existing templates in the future.
<!-- 145592 - Web page view, don’t hide template by default -->
<!-- 121945 - Update two-factor process -->
* Updated email behavior on backup servers to allow the sending of multi-factor authentication (MFA) verification codes as well as password resets. Other emails on backup servers will not be sent.
<!-- 140928 - securing all email sending functions in the system on backup environments (MFA) -->
* Enhanced system security by adding additional checks and blocking uploads of files with certain extensions.
<!-- 144430 - SmartFolders - File upload security and general issues -->
* Updated missing translation country names for Danish, Spanish, and Catalan.
<!-- 143763 - Country options not displaying as user's language -->
* Updated cookie policy to reflect the new cookie used to support trusted devices when multi-factor authentication (MFA) is enabled.
<!-- 143518 - Update to cookie policy page to reflect fact we no longer just have session-based cookie -->
* Deprecated the '''RSA Disconnected Token''' option from the multi-factor authentication (MFA) dropdown on user roles.
<!-- 139685 - Deprecate the RSA disconnected token option for MFA -->
===January 19th 2023 (202301.02)===
====Fixes====
* Fixed an issue with the query for finding custom field ID from the custom field name to improve the speed of validation using SmartCheck.
<!-- 145040 - SmartCheck Validation Slowness -->
* Fixed an error in the '''Archive Scheduler'''.
<!-- 141637 - Archive not placing files on our SFTP -->
===January 12th 2023 (202301.01)===
====Fixes====
* Fixed an issue where reports that were not set to be publicly accessible were able to open web page views externally. After this release if you want a web page view to be publicly available via a report you must set the report to be internet enabled and then go to the web page view custom field and allow public access.
<!-- 144055 - Searching on Bing returns results that should not be publicly accessible -->
* Fixed an issue with displaying the '''Lookup - Autocomplete Options''' field in a list view where only the first of multiple selected options were visible.
<!-- 117079 - Lookup - Autocomplete field not showing all data in list view
-->
* Fixed an issue with duplicate SmartCheck validation messages displaying under a file upload field.
<!-- 140019 - Double Validation Message Appearing in Application
-->
* Fixed an issue with the group email wizard where the''' From''' address and attachments were not preserved if the user clicked the '''Preview''' button and then clicked the '''Back''' button.
<!-- 141725 - Group email from address reverted if you click preview, then back
-->
* Fixed an issue with the download files feature where the generated file was empty if the field was stored to another field.
<!-- 143499 - Download files feature generating empty zip files
-->
* Fixed an issue with the aspect ratio of thumbnails in the '''Media Library''' at lower resolutions.
<!-- 142550 - Media Library Images Aspect Ratio Issue in MS Edge on Mac OS -->
<!-- 142703 - QA Issue: Issues with media files being unplayabale -->
* Fixed an issue with charts where the x-axis was displaying the store value instead of the display value.
<!-- 142666 - Bug on Charts? Showing dropdown 'code/number' instead of 'option text' -->
====Other Changes====
* Updated multi-factor authentication to be more secure and easier to set up. Roles using the time-based one-time password (TOTP) will now automatically be brought to a new instruction screen after being activated. Resetting a user's TOTP MFA must now be done by going to the desired users profile and selecting''' Actions''' > '''Edit roles and access''' > '''Reset TOTP'''. There is also a new permission on roles called '''Roles this role can reset TOTP for'''. This new permission is used to specify which roles can reset a user's TOTP.
<!-- 143115 - MFA Email/Text Code allowed attempts and Lockout Duration -->
* Updated autoloader behavior where when new users and organizations are created via the autoloader, no country will be set if no default country is specified. Previously new users or organizations would be given the country value of Canada if no default value was set.
<!-- 143525 - Users created with wrong country -->
* Added a new option to set which fields should be refreshed upon changes to a record in a linked record list. To see this new setting, edit a '''Special - Linked Record List''' custom field and the setting is called '''Refresh On Update'''.
<!-- 130352 - L1 form doesn't refresh when changes are made to a L2 in a modal window -->
<!-- Implemented various measures. -->
<!-- 142337 - Netcraft pen test 202208 section 7 -->
<!-- 143863 - NOV2022 - Burpsuite Security Scan results -->
<!-- 144428 - Security Vulnerability - Cross Site Scripting -->
<!-- 144124 - The Home Depot Foundation - Synack Vulnerability - IDOR to edit+delete any status -->
<!-- 143534 - Add option to 'Link Device' on TOTP MFA code screen -->
* Updated labels for '''System Visibility Permissions''' found on the '''People''' tab which are related to hiding items in the '''User Menu'''. Specifically, the labels for items found under the '''Manage''' heading in the user menu have changed (Profile, Password, Personal Settings, Roles and Access, Filters, and Resource).
<!-- 141534 - Not sure Personal Settings - Menu Access is working as expected -->
* Updated some elements used in portal configuration for improved UX. Specifically, the portal page content type is now surfaced in the '''Portal Page''' list view and the content type called '''Single Page''' has been renamed''' Direct Link'''.
<!-- 113759 - UX and behaviour problems with portal config -->
* Updated the look of aggregate shortcuts to automatically reduce the size of text to accommodate up to 14 characters on desktop resolutions.
<!-- 124202 - aggregate shortcuts with big numbers -->
* Updated '''Report Builder Help''' to include functions used with business day calculations. Specifically, SS_FUNC.ADDBUSDAYS, SS_FUNC.COUNTBUSDAYS, and SS_FUNC.COUNTWEEKDAYS which are found under the platform options tab in the help.
<!-- 143021 - Adding ss_func syntax to report builder help -->
* Updated T2P tool by removing the email broadcast table. Email broadcasts created on a dev environment will no longer be promoted to production environments.
<!-- 143602 - T2P Tool update for email broadcast table -->
* Deprecated the SmartSimple mobile app.
<!-- 140599 - Deprecate the mobile app -->
===December 1st 2022 (202211.03)===
====Fixes====
* Fixed an issue with records opening in a modal window rather than a full window in a portal.
<!-- 143441 - Issue when opening applications from portal -->
* Fixed an issue where workflow tasks were not adding new roles to users because certain permissions were not found.
<!-- 143604 - Update Role WF Task not adding role to users -->
===November 24th 2022 (202211.02)===
====Fixes====
* Fixed an issue with line breaks in autoloader files not working when encapsulated in double quotes.
<!-- 143244 - Line Breaks in Autoloader file not working with double quotes -->
* Fixed an issue with the '''Start Date''' and '''End Date''' fields when using '''Quick Edit''' on '''Transactions'''. This affected users that had a different timezone than the server.
<!-- 131006 - Stamping of date issue when changed through Quick Edit button on Publication tab -->
====Other Changes====
* Updates to Danish and Portuguese translations.
<!-- 143586 - November translations for Danish and Portuguese -->