Security

Release notes on Security and related issues.

Version Type Description ID

19.0.5.0

ENH Password changes from CliShell now encrypt both the password and the username when transmitted from the Client Shell to the Service Shell. This encryption is done even over non-SSL connections. For v19, the encryption method is set in the Core/Security/Policy/Password Storage/Algorithm context property, which also controls the algorithm used to store passwords in context properties and the database password in the Service Shell profile file. For versions 16 to 18, the default method is option 1, TCF1. DEVCORE3-4968

19.0.7.0

CORR Users who do not need to edit context properties or user security settings do not require grant permissions for the following security keys to run the Client Shell:
  • Core/Context/Read
  • Core/Security/View Permissions
DEVCORE3-5175
19.0.20.0 CORR An issue where an error message appeared when saving attribute changes on built-in identity type users has been fixed. DEVCORE3-5486