General

• Default password complexity rules have been updated in Properties:
  • Core > Security > Policy > Minimum Password Length. Minimum length in characters of a valid password. A value of 0 allows empty passwords. Default value is 8.
  • Core > Security > Policy > Password Required Character Types Specifies character types that must be included in all passwords. This property depends on other password policy context properties. Options are: Upper case alpha character, Lower case alpha character, Symbol character, and Number character. By default, all four character types must be used.
  • Core > Security > Policy > Password Hashing > Algorithm. Select the way passwords are hashed and stored in the CoreIdentity table:
    • TCF1 (64-bit hash). Original algorithm used for backward compatibility when older client and server applications that do not support newer algorithms are connected to the same database.
    • PBKDF2 (192-bit hash). Industry-standard password hashing function, used to produce a 192-bit hash incorporating a 192-bit cryptographically random salt. (Default.)
    Note: If Core > Security > Policy > Enforce Password Policy on Next is selected, users may need to reset their passwords to meet new default requirements the next time they sign in.
• Descriptions for the following Service Shell switches have been updated:
  • Core > Security > Authenticate. Turn OFF to disable username/password authentication and permission checks. DEPRECATED! This switch may be removed in a future version.
  • Core > Security > Check Permissions. Turn OFF to disable permission checking (even if Authentication is still ON.) DEPRECATED! This switch may be removed in a future version.

• The Open Work checkbox was un-checked. It should be checked by default because the work assigned is not allowed to coexist with the absence.
• Leaving the Open Work checkbox un-checked, and saving, records the absence, thus creating work and absence overlap that was unexpected and not allowed as per absence type configuration.

Fixed a bug that caused the OPS Statistics graphs to not display work pieces with 0 minutes of work or elapsed time in the Extraboard Utilization and Volunteer Usage tabs.

Improved the handling of custom assignment types with different list types (Extraboard Only, Volunteer Only, or None) in the OPS Statistics tabs.

Related tasks: OPS-28793, OPS-28953, OPSN-3452.

Before configuring gender options, run the OPS Upgrade Utilities, Version 21, Upgrade 21.0 Step 36. Populate Pronouns.

To create new pronoun combinations, open the Pronouns ancillary data screen. Enter a PronounId, a one-character Abbreviation (this represents the gender - for example, M for male), and a Description (these are the pronouns that apply to the gender abbreviation - for example, They/Them).

To define the pronoun options for specific operators, in the Employee Profile - Employee Card screen, update the Gender field. The Gender field is also used in the Incidents Detail screen.

A new table, Pronouns was created in MmsData.dbd.

In the Suggest Employee dialog, messaging that used the phrase he/she was updated to they.

Now, if an employee status is updated in the Employee Profile screen to an INACTIVE Status Type or created with an INACTIVE Status Type and the inactive status overlaps with the current date, any linked security user CoreIdentity account name is unlinked from the Employee Profile record and the security user status is not affected.

• Daily Activity (when loading the screen)
• Daily Activity > Recheck Violations
• Daily Activity > Suggest Employee
• Daily Activity > Split Work
• Daily Activity > Undo Split Work Group
• Open Work > Auto Group
• Bidding > Update Accrual Balance
• Work Planner (when loading the screen)
• Work Planner > Replicate Work
• OPS Line Costing > Costing Import
• Weekly Timekeeping Summary (when loading the screen)
• Vehicle Assignment > Auto Assign Vehicle

Now, all date formats are supported. Absence quota type filtering in Employee Self-Service uses division group, employee type group, and job class group.

Fixed in ESS 1.5.1 and 1.6.0.

Fixed in OPS 21.21.x (May 7, 2024) and OPS 21.28.

Related tasks: OPS-29959; OPSN-3893; OPSN-3874.

• jobs can be deleted if they have not previously run
• users cannot select Frequency: Auto Generate when Job Type is Standard User Define or Custom User Define (which do not support the Auto Generate option)
• messages shown when a job cannot be deleted are more user-friendly

Now, if a file fails and there is an existing file with a matching name in the folder specified in the OPS > Interfaces > Import > Employee Picture Import > Directory folder, then the original file is overwritten.

The message type of the Employee Badge not found message was updated to warning.

Now, held-down and vacation relief days aren't extended when the sign-up period is extended, and sign-up periods can't be deleted if hold-down or vacation relief records created from the Work Planner screen exist for dates in the sign-up period being deleted.

Now, if a specific Agency is selected, records for that agency and records for All Agencies are shown.

Note: Updates made in the OPS Bus Types ancillary data screen are also applied in the Bus Types ancillary data screen.

To assign the same password to multiple employees already assigned an Identity, select the employee records to update (use Ctrl or Shift and click to select multiple employees), select Bulk Reset Password, and then OK. Enter New Password and then Confirm Password and select OK.

• Two filtering options were added to the Context (F3) dialog: Identity Assigned Only and Self-Service Group Assigned Only.
• The Core Identity column is now called Identity.
• The Password Reset Requested column is now called Change Password on Next Login.
• A Password Last Changed column was added. It shows the last date the password was reset.
• A Self-Service Group column was added. A check mark indicates the employee is a member of the Employee Self-Service Users user group.
• Records can be sorted by First Name, Last Name, Middle Name, Badge, Division, Employee Type, and Identity. Double-click the column header to sort.

All actions have also been added to the right-click menu. Right-click on one or more employee records to see the available actions.

Previously, when this property was selected, users in OPS-Web and ESS were repeatedly prompted to reset their password on each login after an administrator reset, rather than only on the first login. Now, the password reset option works as expected.