Smartstaff
2,271
edits
Changes
m
→Major Updates
===Major Updates===
====Enforcing Deny Permissions for Portal Pages on Common Role====Changed the behavior of the Deny Access permission setting for pages on the Common portal. This setting will now deny access to the portal page for any roles selected. Previously, the Deny Access permission hid the link from view in the main header menu but the page was still accessible via a portal shortcut. If you want to hide a portal page but still allow people to access the portal page via a shortcut, toggle off Display As Header Link. To see the affected setting go to Global Settings > Users tab > Portals > Common > edit a Portal Page > Permissions tab.<!-- 142111 - Still access portal sections using link if role based permissions applied --> ====Deprecated Password Variables====Deprecated several password variables for security reasons. For example, sending passwords as plain text via emails is not a secure practice. If your system contains any of these deprecated variables, they will display as plain text. Deprecated variables include: @password@, @checkportalpassword@, @checkactivatedpassword@, @randompassword@ and @passwordresetlink@. System Administrators must change existing email templates to use password activation links that will send the user to a page where the user can set their password. The syntax for password links is https://@url@@activationlink@. Emails that need to be updated are located at Menu Icon > Global Settings > Security tab > Password and Activation Policies > Click the Activation Emails tab in the left navigation. Another location where these variables may be present is on user signup pages. To find user signup email templates go to Menu icon > Global Settings > Communications > System Email Templates > Search for “New User”.<!-- 139473 - Remove ability to retrieve password on request password/new user email templates using variable syntax --> ====Enhanced Multi-Factor Authentication====Moved multi-factor authentication (MFA) settings from the user roles to Global Settings > Security tab > Password and Activation Policies. In this new location, you can enable MFA and assign MFA options to some or all roles from a single central location. Additionally, there is also a new toggle called Enable Trusted Device. If you enable trusted devices, you can set the time period in which a person who has authenticated into the system can bypass entering the MFA verification code.<!-- Ticket ID139210 - MFA remember my computer (trusted device) functionality. --> ====TitleEnhancements to the List View====TextAdded System Filters to the basic search Filter drop down. Previously, system filters were only visible when Advanced Search was toggled on. We also added the ability to set system filters as configuration only. Setting a system filter as configuration only will hide the system filter from the Filter drop down on the search for end users, but still allow system administrators to select the system filter while configuring their system. Additionally, if you have permission to edit a system filter, you will also see an edit button beside the filter name in the dropdown.<!--Comment133656 - List views and filter improvements (include system filters in basic search) -->
===Minor Updates===