Versago Release Notes

Release notes are cumulative for all builds of v2.5

• New Features
  • VGO-2171 - Autocomplete has been disabled in password elements. However, the setting may be ignored by the browser.

• Improvements
  • VGO-2128 - Improved authentication security by removing unnecessary functions from asmx and web API controllers.
  • VGO-2172 - Implemented security headers for improved security. The URL Rewrite extension for IIS must be installed. It can be downloaded from https://www.iis.net/downloads/microsoft/url-rewrite.
  • VGO-2173 - A vulnerability was addressed were passwords were stored in the password history table in plain text.
  • VGO-2300 - Addressed an issue where a resource Forbidden message was displayed even though the user credentials were correct.

• Bug Fixes
  • VGO-2146 - Addressed a vulnerability where an attacker might bypass authentication.
  • VGO-2148 - Address a vulnerability where information was disclosed in the form of API documentation.
  • VGO-2149 - Addressed a vulnerability where access rights at the function level have been verified.
  • VGO-2150 - Addressed a vulnerability to remote code execution (RCE).
  • VGO-2151 - Addressed a vulnerability to SQL injection attacks originating from input verification.
  • VGO-2152 - Addressed CSRF vulnerability.
  • VGO-2153 - Addressed a vulnerability where the application allowed the upload of an SVG file containing HTML content.
  • VGO-2154 - Addressed a vulnerability where references to internal objects were not secure.
  • VGO-2155 - Addressed a vulnerability denominated Persistent XSS attack where an injected script is permanently stored on the target servers, such as in a database, in a message forum, visitor log, comment field, etc.
  • VGO-2156 - Addressed a vulnerability where some sensitive data was exposed to attack.
  • VGO-2157 - Addressed a vulnerability where attacks aim at discovering non-public web services by retrieving their WSDL files.
  • VGO-2159 - Addressed a vulnerability where by using old session cookies, user profiles can be accessed.
  • VGO-2176 - HTTP is no longer permitted. HTTPS must be deployed with a valid certificate.
  • VGO-2177 - The session timeout setting for end-users and administrators have been merged. There is only one setting across the site.
  • VGO-2182 - Some ad blocker extensions to the browser may cause problems with the Admin Console. Please disable any extensions that block the Versago site.
  • VGO-2185 - Addressed an issue where the password field for a new user was not large enough. Expanded to max 32 characters. See https://wiki.twbs.com/doku.php/versago/role_profile_user_configuration#user_details_core_information for more information.
  • VGO-2192 - Addressed a vulnerability where several HTTP methods designed to aid developers in deploying and testing applications were allowed.
  • VGO-2195 - Addressed a vulnerability where a Referrer-Policy was not being used.
  • VGO-2196 - Addressed a vulnerability where HTML comments were exposed.
  • VGO-2220 - Addressed an issue with reports that allow record submission where the field's length created to store the submission was limited to 50 characters.
  • VGO-2221 - Addressed an issue where action links to an https site were not working properly.
  • VGO-2235 - Mask passwords will no longer be displayed in pages where there is a password field such as DB connections and Email settings. If the password needs to be changed, the Update Password button must be clicked first in order to enable the field.
  • VGO-2240 - Address an issue where action links did not export correctly. If a form contained multiple action links and it was imported and exported, all links would point to the same link in the new environment.
  • VGO-2247 - Addresses an issue where images in Crystal Reports were not displayed.
  • VGO-2296 - Addressed an issue where system session time out did not follow the set value.

Release notes are cumulative for all builds of v2.4

• New Features
  • VGO-1543 - Versago now includes support for presenting images associated with records (both header and detail) displayed in Versago lists (reports) and forms. Optional sizes for thumbnails, mouse-over preview, and large images can all be associated with a single record. A typical use-scenario for images would be adding items to an order form or materials to a production order. Less obvious applications might be images of schematics, assembly instructions, or other documents. A Bizweaver workflow is also available to aid in management of the images.

• Improvements
  • VGO-1633 - Scrolling for forms that use a detail (grid) section has been modified so that the Add, Edit, and Delete buttons for the detail section remain visible. This will make changes easier in grids where there are a large number of rows.
  • VGO-2000 - Version of data connector (HANA Client) updated to 2.4. See https://wiki.twbs.com/doku.php/bw/installation_upgrade_guide for information.

• Bug Fixes
  • VGO-1548 - Addressed an issue where report display option “Display in new browser tab” was not being included in export/import. Addressed an issue where a new instance of Versago could not be installed if Bizweaver had been previously installed on the same server.
  • VGO-1557 - Addressed an issue where profiles for SAP Business One HANA installations could not be created.
  • VGO-1562 - Addressed an issue where a multi-select ( or payments) report would reset the page when a value was changed. This was causing difficulties with large selection lists. Page now remains at the current position when a value change is made.
  • VGO-1563 - Addressed an issue where multi-select reports would fail if the data being saved contained a date.
  • VGO-1564 - Addressed an issue where decimal values did not sort correctly when the data source is HANA.
  • VGO-1565 - Addressed an issue where non-displayed user-applied filters were not applied to the data result set as expected.
  • VGO-1570 - Addressed an issue where images were not displayed in report columns greater than second.
  • VGO-1572 - Addressed an issue where “image hover” was not displaying in the first row of a report.
  • VGO-1574 - Added image field to Print version export.
  • VGO-1580 - Addressed an issue where the option to not display a column name in a report was not working when the report is used as a sub-report.
  • VGO-1586 - Addressed an issue where not all needed user information was being captured when an initial user is created during installation. All values normally required for a new user are presented and must be populated. Addressed an issue where the position of a form control being “dragged” to position on the form layout was offset from the cursor.
  • VGO-1590 - Addressed an issue where “large” import files would not be processed. The base limit is now 100MB. A warning message is raised for files over 100MB but processing will continue.
  • VGO-1599 - Addressed an issue where menu information was not included in an export.
  • VGO-1600 - Addressed an issue where menu information was not included in an export.
  • VGO-1601 - Addressed an issue where the Home and Favorites icons did not use the theme color scheme as expected.
  • VGO-1612 - Addressed an issue in multi-select reports where the selection checkbox would be deselected when changing an editable value field.
  • VGO-1625 - Addressed an issue where an entered Expiration Date value was not being displayed as expected in the Admin function.
  • VGO-1627 - Addressed an issue where available Categories were not displayed in sorted order in the drop-down list.
  • VGO-1628 - Addressed an issue where mandatory drop-down fields in a form were not catching the fact that a value had not actually been selected. The normal “mandatory” message is now displayed.
  • VGO-1631 - Addressed an issue in Form development where the data type of a numeric database column was treated as a text column. The issue occurred when the “search” function was used to find a database field in the list of available fields.
  • VGO-1632 - Addressed an issue where Home and Favorites icons were not displayed in MS Edge browser. Addressed an issue where expiration dates were not being saved correctly for Banners and News & Announcement items.
  • VGO-1660 - Addressed an issue where Menus were not being included in the Export process, even if selected.
  • VGO-1661 - Addressed an issue where records from a multi-select report were saved with an additional HTML tag when a text value contained an “&” character. This only occurred on the first record of this type that was selected.
  • VGO-1736 - Addressed an issue where cloned forms would not upen in certain, very specific, situations.
  • VGO-1739 - Addressed an issue where the label on standard action buttons (Save & New, Save & Close, etc.) could not be changed as was possible in earlier versions.
  • VGO-1741 - Addressed an issue where v2 Forms called from a report where the Action Link used a condition.
  • VGO-1743 - Resolved an issue where user-applied filters could not be selected when using Android 10
  • VGO-1744 - Addressed an issue where data could be incorrectly accessed in a public form.
  • VGO-1745 - Address an issue where the “Add Day” formula in a form was not calculating correctly if the target field was NOT set to use the “MM/dd/yyyy” display format.
  • VGO-1746 - Address an issue where columns associated with an action link we not being displayed in an export for print. Also addressed a similar issue where KPI icons were not displayed in the same scenario.
  • VGO-1758 - Address an issue where the browser time-out values were not being reset properly when the user logged out. Addressed an issue where a new password assigned to an existing user during the upgrade process would prevent the user for logging in after the upgrade.
  • VGO-1765 - Addressed an issue where existing report action link conditions could not be modified as expected.
  • VGO-1766 - Addressed an issue where the [Add Day] formula in a form was not working as expected.
  • VGO-1767 - Addressed an issue where the Reports configuration page was being presented incorrectly in certain circumstances.
  • VGO-1768 - Addressed an issue where the drop-down list for User Applied filters did not display values as expected in certain circumstances.
  • VGO-1769 - Addressed an issue where an error was being raised when a Data Source Type value was not selected in the initial report configuration field.
  • VGO-1772 - Addressed an issue where multi-line text boxes could not be entered when marked as Editable.
  • VGO-1777 - Addressed an issue where a duplicate Calculated Field name in a report was not flagged as an error.
  • VGO-1778 - Addressed an issue where the Color Picker form was not displaying correctly in some circumstances.
  • VGO-1779 - Addressed an issue where a new row in the KPI configuration was not being added as expected.
  • VGO-1782 - Addressed an issue where the database [Submit] button in a multi-select report was not being displayed in certain circumstances.
  • VGO-1787 - Addressed an issue where binary data fields in a multi-select report would prevent the record(s) from being inserted into the database. The data from these field will no longer be inserted.
  • VGO-1789 - Addressed an issue where a multi-select report could be configured without specifying a database for the records to be saved.
  • VGO-1790 - Addressed an issue where SAP Business One queries raised an issue when used as a report Data Source.
  • VGO-1797 - Addressed an issue where eCheck input fields were not being displayed if no credit cards were also selected as available payment options as well.
  • VGO-1842 - Addressed an issue where extraneous text was displayed in charts when a tool tip referred to a date value.
  • VGO-1860 - Addressed an issue where an exception error was raised when logging into Versago in certain (rare) situations.
  • VGO-1862 - Removed the ability to display the password in the Database Connection configuration page.
  • VGO-1864 - Added “Mandatory” flag to DB Type field in Database Configuration page.
  • VGO-1866 - Change the way the “country” value is saved in a User configuration. The country will need to be reselected if the user is updated.
  • VGO-1871 - Additional logic has been added to the login process so that if the administrator changes the user password security to a stronger level AND the user's password does not meet the required strength they will automatically be redirected to the “Reset Password” page.
  • VGO-1872 - Addressed an issue where spaces were not allowed in strong level user password as indicated in the notes on the setup page.
  • VGO-1978 - Addressed an issue where a Crystal Report using a HANA database as the data source did not load correctly
  • VGO-2019 - Addressed an issue where the “mandatory” option was not being correctly handled on numeric form fields.
  • VGO-2037 - Addressed an issue where text and date fields in a form were cleared when a custom_PreExecute error was encountered from the [Save and New] button.
  • VGO-2046 - Addressed an issue where numeric values using “.” for thousands and “,” for decimal as separators (e.g. 1.000,00) were not being accepted into form fields correctly.
  • VGO-2082 - Addressed an issue where form attachment information was lost when a custom_preExecute error message was presented.

Release notes are cumulative for all builds of v2.3

• New Features
  • VGO-1359 - Adds a new property to the Save, Save & New and Save & Close form submission buttons. Administrators can designate any one of the three buttons to be automatically invoked on a form when an Enter Key event (ASCII Code 13) is received via a USB device.
  • VGO-1260 - Adds a new property to form controls. Administrators can designate one form control to have initial focus immediately after the form web page loads in the browser.

• Improvements
  • VGO-1487 - Access to form navigation buttons (Save, Save & Close, Save & New, Delete, Cancel) can be controlled using the Control Roles functionality. As an example, this will allow some Roles to see the Delete button, while others will not.
  • VGO-1437 - Report Actions configuration now supports the use of the new POST call to Bizweaver. See documentation at https://wiki.twbs.com for more information.
  • VGO-1405 - System configuration now supports the entry/saving of the Bizweaver token used for the new POST call to Bizweaver. See documentation at https://wiki.twbs.com for more information.
  • VGO-1393 - Form button Actions configuration now supports the use of the new POST call to Bizweaver. See documentation at https://wiki.twbs.com for more information.
  • VGO-1372 - Added logic to installation process to confirm that required .Net framework components are installed.
  • VGO-1364 - For stronger security, the user's password can no longer be viewed in clear text in the User administration page, nor can it be changed. The user must use the “Reset Password” option from the home page to reset their password.
  • VGO-1360 - Adds two new Action properties to the Save, Save & New and Save & Close form submission buttons. Administrators can suppress the form submission success and or error message (modal window) from appearing after form submission.
  • VGO-1326 - A “working” indicator is now displayed when a Bizweaver workflow is initiated from Versago.
  • VGO-642 - Actual date values are now displayed in the SQL Select results when configuring a report.

• Bug Fixes
  • VGO-1482 - Addressed an issue where exported/imported HANA reports did not include sub-reports and action links.
  • VGO-1425 - Enabled an option to sort on multiple columns by holding down the <Shift> key when clicking on the column heading.
  • VGO-1317 - Addressed an issue where the Setup page was automatically displayed if access to the database service failed. The setup process has now substantially changed. See the documentation (https://wiki.twbs.com) for more information.
  • VGO-1278 - Addressed an issue where user timeouts were not functioning as expected.
  • VGO-1207 - Addressed an issue where the Email Settings function in the Admin console would fail the first time it was accessed.
  • VGO-1203 - Addressed an issue where the Versago user name variable {UserProfile.$UserName} was not being assigned correctly in a form.
  • VGO-1202 - Addressed an issue where a date could not be passed from a report to a form in a report Action