EDELOG 6.11

Major New Features

New Permission System

Edelog 6.11 introduces a new permission system that allows a more granular control over the access to the different parts of the application. You can now specify individual permissions e.g., per data record, activity, or even per field. This allows you to create a more fine-grained access control for your users.

While the new permission system is a major update, it is fully backwards compatible with the old permission system. All existing permissions will be automatically migrated to the new system.

Within Edelog, the user interface for the permission system has been standardized. While in the past, the permission system has looked and worked differently in different parts of the application, the new permission system is now consistent across the whole application.

Rule-Bases Access to Data Records

With Edelog 6.11 you can now define rules that control the access to data records per user or group. This feature was previously created for Portal Builder and has now been carried over to Edelog Data Services.

This allows you to define role-based access permissions based on a user's group memberships. As an example, you can define that users from one subsidiary can only see data records from their own subsidiary.

The rule-based access to data records is an addition to the new permission system. You can configure the rules within a database's access permission settings.

Administrators are notified if rules are applied for them and can opt out of the rules on a per-request basis.

New Search with Improved Performance

Edelog 6.11 introduces a new search that has been drastically improved in terms of performance. The new search is also able to filter results on a per-app basis. This means that you can easily filter search results e.g., by forms, data records, activities or databases.

The new search can also be extended by third-party apps allowing a unified search across all apps.

Features

Edelog Data Services: The appearance of the Activity Feed has been improved. This refresh also includes a more visual representation whether an activity is shared with guest users.
Expert Directory: You can now define permissions to access and administer the Expert Directory.

Bug Fixes

Edel UI: Fixes a bug that prevented the search box to be automatically focussed when opening a value select dropdown.
Edelog Classic: Fixes a bug that causes Classic Jobs to send more than one notification for group members.
Edel UI: Fixes an incorrect display of the profile picture in Safari.
Edel UI: Fixes a bug that causes tooltips to have strange line-breaks.
Data Explorer: Fixes an issue that prevented the default data sheet from being selected automatically under some circumstances.
Edelog Classic: Attached Form activity cards show an infinite loading indicator if the user does not have permission to access a form.
Wiki: Fixes an issue where the Wiki app is re-initialized after the user has navigated away from the app.
Data Explorer: Fixes a problem that causes filters to be applied to the wrong database after the user navigates with the browser directly between databases.
Data Explorer: Fixes an issue that causes elements on map view to disappear when you scroll more than one time around the globe.
Edelog Data Services: Fixes an issue that prevented sorting database records by their ID.
Edelog Data Services: Fixes an issue that selected the wrong database records using the "Select all" button within an object picker if a filter is activated.
Edelog Data Services: Fixes an issue that causes object picker to download all data records to the client.
Edelog Data Services: Fixes an issue that causes CSV importer to show the loading indicator indefinitely if an error occurred during the import.
Edelog Identity Services: Fixes an issue that prevented using a login QR code to log in on a web browser.
Edelog Login UI: Fixes an issue that causes the FQN and organization identifier to be displayed in the wrong order if the user cancels the login process.
Edelog Data Services: Fixes an issue that causes Time Scheduler to only navigate backwards in time when the user is in month view.

Other Changes

Portal Builder has been updated and now includes a new default theme.
Edelog Data Services: NULL values are now correctly handled when filtering for values not equal to NULL.
Edelog App Services: The "Install App" screen has been updated to show the app's description and the required permissions. Also, when an app is requesting more permissions after its initial installation, the user is now automatically asked to confirm the additional permissions.
Edelog Identity Services: Sessions are now hierarchical. This means that when a user logs out, all child sessions (e.g., for OAuth apps or other Edelog services) are also logged out. This ensures that the user does not have to log out of all OAuth apps they launched during their session.
Edelog Notification Services can now be used by third-party apps. This allows you to send notifications to users from your own apps.
Edelog Data Services: Two new key-value storage systems have been added: "User Data" allows you to store data per user (like settings). "App Data" allows you to store data per app. "App Data" also allows fine-grained access control on a per-key basis.
Edelog Identity Services: The OAuth authorization dialog has been updated. It is now in the same style as the Edelog login dialog.
Edelog App Services: Iframe-based apps can now define Edelog's accent color. This allows you to better visually integrate your app with Edelog.
Edelog App Service: Added support for Iframe feature policy settings. This allows you to define which features are allowed for your app's iframe.
Settings: The group settings have been updated to support the new data table.
Settings: The user and group settings now include a search field to quickly find users and groups.
Edelog Data Services: Databases can now be created without the default permissions and/or data sheets by specifying the options "skipDefaultPermissions" and/or "skipDefaultDataSheets".
Edelog Data Services: Activity feed now uses message stream service to update activities across multiple users and clients in real-time.
Edelog Data Services: Databases can now be created / updated as "hidden". Hidden databases are not visible within Data Explorer.
Edel UI: Appearances of loading indicators have been improved.
Database Settings: The settings page for Database Extensions have been removed since it is no longer necessary.
Edelog Core Server: Various caches have been added to improve performance.
Edelog Core Server: Added route /api/v4 which can be used for health checks.
Edelog Data Services: Hierarchy view now supports sorting.

Developer Notices

Third-party app permits are migrated automatically to the new permission system. While this is a fully automatic process, it is recommended to test the new permission system thoroughly before going live with the new version.
Many identity-related UI components have been re-located to the new @conclurer/edelog-identity module. If you have used any of these components in your own code, you will need to update the import paths. This module also includes helpful services and pipes for managing permissions and OrganizationalUnits.
Support for FontAwesome Pro has been integrated directly into Edelog. Third-party apps can now use <edel-icon> to render FontAwesome Free or FontAwesome Pro icons. To define the set of available icons, use the FONT_AWESOME_ICONS dependency injection token.
Edelog Core now uses FontAwesome 5 by default.
The new API controller /organizational_units has been added. This unifies access to all users, groups and other organizational units. The previously known controllers (e.g., /users and /groups) are still available and fulfill their previously defined specialized purposes.
Apps can now define ResourcePermissionTypes and provide those to other apps. This allows an app-to-app based interaction model. For example, an app can define a permission type that allows other apps to access the app's data.
Apps and app views now require a unique name property. This is used to identify the app and app view in the permission system.
The handling of ShadowDOM components has been modified to improve UI rendering performance.
The injection token API_BASE_URL has been renamed to EDLOG_API_BASE_URL and is now exported from @conclurer/edelog-core-services. defaultApiBaseUrlFactory has also been relocated to this module.
The way, Edelog loads app modules has been rewritten to improve performance and stability. App modules are now executed isolated from each other.
Data Explorer: Added the localStorage flag "com.conclurer.data-explorer.includeHiddenDatabases" to force Data Explorer to show hidden databases.
Third-party libraries have been updated.
Edelog App Services: Using AppExtensionService you can now dynamically compose app views from multiple apps.
Edelog App Services: An app can control the new loading screen pages by injecting AppLoadingScreenService. This is helpful for apps that need to fetch data or check permissions before they can render the initial UI.
Edelog Core Services: Added the localStorage flag "com.conclurer.edelog.shell.log-http-requests" to log all HTTP requests to the console.
Data Explorer: Added the localStorage flag "com.conclurer.data-explorer.ignore-app-config" to ignore "Open in App" database settings to debug app databases.