Skip to main content

12.7.3

Features and improvements

Installation

  • Updated the branding for Bravura Security within the product installer for a few remaining areas.

Reports

  • Updated the scheduled report configuration page to allow editing and saving the previously saved scheduled report on a patch version upgraded instance.

Bravura Identity

  • The autores command line utility now skips and warns for roles that are disabled and/or unassignable when submitting.

  • A warning notification is presented in the role assignment user interface if a selected role is disabled and/or unassignable.

Resolved issues

Installation

  • Fixed formatting issue of error message when unable to load customer-verified connectors during setup.

OrgChart

  • Adjusted the early termination condition in im_corp_hr_orgchart_manager to check the OrgChart data in addition to attribute values.

  • im_corp_hr_orgchart_manager: adjust the early termination condition to check the orgchart data in addition to attribute values

  • Updated the Orgchart graph page to load the current user's manager, even if the manager is in an orphaned Orgchart tree (calculated level is -1).

Bravura Pass

  • Fixed unexpected quit during password reset when the browser client IP was too long.

  • Resolved an issue with the Login Assistant / SKA when upgrading from version 12.4.x to 12.8.1 and up.  Upgrading to 12.5.0 and up caused an upgrade issue due to rebranding from Hitachi ID to Bravura Security.

  • Fixed an issue where operation SRES (User self-reset result) is logged per account for both self-service and help-desk reset, which should be one operation per reset action and for self-service reset only. Also updated the Session activity report to generate the proper statistics for both self-service and help-desk change passwords.

  • Fix issue on pages for unlock/detach/reset password for accounts ending in .x.

Bravura Identity

  • The autores utility now skips and warns for roles that are disabled and/or unassignable when submitting.

  • A warning message is given in the role assignment user interface if the role is disabled and/or unassignable.

Bravura Privilege

  • Fixed component import and export of managed system policies with multi-phase authorization so that all authorizers are accounted for instead of just one.

  • Changes to Create OTP user request:

    • When a request is issued from the secondary node, it is now always forwarded to the primary node in case the secondary node is unstable.

    • Fixed an issue where retry operations could never succeed if the initial attempt failed.

  • Updated stored procedure TargetDelete to use RECOMPILE when deleting from targetobj to ensure that an unsuitable (from a performance perspective) cached query plan is not used when deleting large target systems.

  • Fixed issues with date timezones for Ajax and the product UI in general related to setting the preferred timezone environment variable.

Workflow

  • Fixed an issue where implementer(request)-created account could conflict with discovered account if their object names only differ by case, resulting in a runtime error during discovery.

  • Fixed an issue where the authmod plugin failed to populate authorizers if a request has duplicate RLUA operations (added by wfreq plugin).

  • Fixed an issue where wizard entitlement members page is broken to start a request in the roles app, when some of the potential members descriptions are too long.

  • Fixed an issue in the Requests app where the delegation manager was unable to delegate an implementer task on behalf of the selected primary implementer.

Database

  • Performance fix for stored procedures AttributeSet and AttribAdd leading to the prevention of deadlocks when large sets of data are involved.

API

  • Fixed REST API endpoint PATCH /targetSystems({key)} to properly save target system option "automaticallyDiscoverResourcesToLoad".

Authentication chains

  • Added a fix to clear the SAML Session ID on failure so that authentication cannot be bypassed.

Account attributes

  • Profile attributes now correctly fall back to the next-priority mapped account attribute when the highest priority attribute is removed.

Component framework

  • Modified the component uninstallation to check if the table exists before removing component data.  This previously caused an issue/exception for hid_extdb to show an error for "no such table".

Discovery

  • During discovery, the order of precedence in target attribute overrides is obeyed when listing target attributes.

  • Fixed runtime error in ObjDiffAssociate stored procedure during auto discovery when handling duplicate accounts (sharing the same stable ID) across different targets with cross-target relationships.

Reports

  • Updated scheduled report configuration page to allow editing and saving the previously saved scheduled report on a patch version upgraded instance.

Upgrade and Migration

  • Fixed an issue that previously still showed connectors in the target type drop-down list that have been removed on upgrade of the Connector Pack.