Security

Release notes for Security and related issues.

Version Type Description ID
19.2.0.0 CORR
Users who do not need to edit context properties or user security settings do not require grant permissions for the following security keys to run the Client Shell:
  • Core/Context/Read
  • Core/Security/View Permissions
 DEVCORE3-5175
19.2.0.0 ENH
The following changes have been made to support the ability to unlock user accounts when resetting passwords:
  1. User account is unlocked when user clicks "Forget Password."

  2. Added new property, TravelerInformation/FixedRoute/TransitNow/Password/

    UnlockUserAccountInMinutes. This sets the number of minutes after which a user account is unlocked.

 TI-13055
19.3.0.0. CORR

When users register for an account, they now receive an activation email message, which allows them to create their passwords to complete their account registration.

 TI-14487
19.4.0.0 ENH

Native SSL support has been added to Trapeze applications using the Trapeze4 platform.

 DEVCORE3-5356
19.9.0.0 ENH
Security permissions granted to system administrators and Trapeze6 Client Shell users for some operations have been configured to be always set to Deny for Anonymous users. The security permissions granted system administrators are:

  • Core/Admin/

  • Core/Context/Write

  • Core/Security/Edit Users and Groups

  • Core/Security/Set Permissions

  • Core/TableEdit/

  • Core/SqlDirect/

The security permissions granted Trapeze6 Client Shell users are:

  • Core/File/Browse

  • Core/File/Write

 DEVCORE3-5430
19.11.0.0 ENH The following changes have been made regarding updating user passwords for logging into the TransitNow Admin screen:
  1. Removed the ability of admins to update user passwords in TransitNow G3.
  2. Added a new security key, Hiwire/Admin/TNowUpdatePassword. If granted, the admin is able to reset user passwords in the earlier TransitNow version: TransitNow G2.
    Note:
    Transit sites using TransitNow G2 will require this security key when they have a Trapeze6 upgrade.
 TI-17709
19.12.0.0 ENH A new security key, Hiwire/Admin/TNowSuspensions has been added to support the ability of users to suspend receiving alerts. The system checks if the Admin user has been granted permission to use the functionality. If denied, the Suspensions feature is not shown on the Manage Users screen. TI-17722
19.15.0.0 CORR An issue where an error message appeared when saving attribute changes on built-in identity type users has been fixed. DEVCORE3-5486