12.7.3
Features and improvements
Installation
Updated the branding for Bravura Security within the product installer for a few remaining areas.
Reports
Updated the scheduled report configuration page to allow editing and saving the previously saved scheduled report on a patch version upgraded instance.
Bravura Identity
The
autores
command line utility now skips and warns for roles that are disabled and/or unassignable when submitting.A warning notification is presented in the role assignment user interface if a selected role is disabled and/or unassignable.
Resolved issues
Installation
Fixed formatting issue of error message when unable to load customer-verified connectors during setup.
OrgChart
Adjusted the early termination condition in im_corp_hr_orgchart_manager to check the OrgChart data in addition to attribute values.
im_corp_hr_orgchart_manager: adjust the early termination condition to check the orgchart data in addition to attribute values
Updated the Orgchart graph page to load the current user's manager, even if the manager is in an orphaned Orgchart tree (calculated level is -1).
Bravura Pass
Fixed unexpected quit during password reset when the browser client IP was too long.
Resolved an issue with the Login Assistant / SKA when upgrading from version 12.4.x to 12.8.1 and up. Upgrading to 12.5.0 and up caused an upgrade issue due to rebranding from Hitachi ID to Bravura Security.
Fixed an issue where operation SRES (User self-reset result) is logged per account for both self-service and help-desk reset, which should be one operation per reset action and for self-service reset only. Also updated the
report to generate the proper statistics for both self-service and help-desk change passwords.Fix issue on pages for unlock/detach/reset password for accounts ending in
.x
.
Bravura Identity
The
autores
utility now skips and warns for roles that are disabled and/or unassignable when submitting.A warning message is given in the role assignment user interface if the role is disabled and/or unassignable.
Bravura Privilege
Fixed component import and export of managed system policies with multi-phase authorization so that all authorizers are accounted for instead of just one.
Changes to Create OTP user request:
When a request is issued from the secondary node, it is now always forwarded to the primary node in case the secondary node is unstable.
Fixed an issue where retry operations could never succeed if the initial attempt failed.
Updated stored procedure TargetDelete to use RECOMPILE when deleting from targetobj to ensure that an unsuitable (from a performance perspective) cached query plan is not used when deleting large target systems.
Fixed issues with date timezones for Ajax and the product UI in general related to setting the preferred timezone environment variable.
Workflow
Fixed an issue where implementer(request)-created account could conflict with discovered account if their object names only differ by case, resulting in a runtime error during discovery.
Fixed an issue where the authmod plugin failed to populate authorizers if a request has duplicate RLUA operations (added by wfreq plugin).
Fixed an issue where wizard entitlement members page is broken to start a request in the roles app, when some of the potential members descriptions are too long.
Fixed an issue in the Requests app where the delegation manager was unable to delegate an implementer task on behalf of the selected primary implementer.
Database
Performance fix for stored procedures AttributeSet and AttribAdd leading to the prevention of deadlocks when large sets of data are involved.
API
Fixed REST API endpoint PATCH /targetSystems({key)} to properly save target system option "automaticallyDiscoverResourcesToLoad".
Authentication chains
Added a fix to clear the SAML Session ID on failure so that authentication cannot be bypassed.
Account attributes
Profile attributes now correctly fall back to the next-priority mapped account attribute when the highest priority attribute is removed.
Component framework
Modified the component uninstallation to check if the table exists before removing component data. This previously caused an issue/exception for hid_extdb to show an error for "no such table".
Discovery
During discovery, the order of precedence in target attribute overrides is obeyed when listing target attributes.
Fixed runtime error in ObjDiffAssociate stored procedure during auto discovery when handling duplicate accounts (sharing the same stable ID) across different targets with cross-target relationships.
Reports
Updated scheduled report configuration page to allow editing and saving the previously saved scheduled report on a patch version upgraded instance.
Upgrade and Migration
Fixed an issue that previously still showed connectors in the target type drop-down list that have been removed on upgrade of the Connector Pack.