Page History

Content import/export

• Upgraded PDF encryption to AES 256-bit, with a configuration option available to revert to the old RC4 128-bit scheme (learn more).

Data

• Added Kerberos support for Oracle databases.
• Resolved an issue where users with older JDBC drivers, including Oracle ojdbc5.jar, could not see the Schema dropdown list.
• Enabled support for Redshift Spectrum tables.
• Added support for GEOGRAPHY and GEORGRAPHYPOINT in MemSQL data sources.

Infrastructure

• Enabled groups defined at the Primary Org to be used for securing content at Client Orgs. Group membership defined by role or LDAP will give access at the Client Orgs where those users have access.
• Enabled the display of members of client-visible Primary Org groups in the Admin Console at Client Orgs.
• Added a Super User role that allows users with the role to view, edit and delete all content (more info herehere and here).
• Added a role function to optionally disable file uploads in discussion comments.
• Added functionality to allow guest users to read Stories.
• Upgraded performance for loading access level information when a system has tens of thousands of users.
• Improved security through validation to prevent potential SQL injections in Freehand SQL calculated fields
• Improved security for XML-related processes to avoid XXE attacks.
• Improved email security by adding an option to allow password resets via email links, avoiding potential DoS, and by modifying the on-screen confirmation message to prevent username enumeration.
• Added a cooling-down period between emails sent from Yellowfin to avoid denial of service.
• Implemented a new security parameter to prevent URL titles from being fetched when sharing links in a discussion.
• Upgraded log4j, the library used for logging, from 1.2.17 to 2.13.3. The minimum supported Servlet spec has been changed from 2.3 to 3.0.
• Added error logging to identify corrupt data in the contentmanagement table.
• Improved file type validation for the Add Reference Code feature which allows for CSV file uploads.
• Added a background task to clean up thumbnails of deleted reports.
• Updated the Pitney Bowes Geocode step to use the new Precisely APIs endpoints and branding. Also fixed token request failed error in Pitney Bows Transform step plugin.

REST API

• Added an API info endpoint to the REST API for version info and better navigation to some previously-unlinked endpoints and top-level resources.
• Added API version info to the System Information page in the UI.
• Improved the REST API refresh token and single sign-on responses so they now return token identifiers in the security token response model.
• Improved error handling for the REST API to return error messages in standard JSON format.
• Added handling for reading the requested REST API Version from custom header X-API-Accept, for clients who are not able to set/modify the Accept header.
• Updated REST API documentation for API version 1.2 and made some improvements for clarity of some file upload parameters.

UI

• Improved the UI for dashboards by wrapping the View field details in the Select View area of the New Report dialog box.
• Modified the UI text for Table Summaries.

Views

• Added new indexes and made performance improvements to the View Import and View Activation processes.

Web services

• Added datasource UUID to the resources returned by the GETCONTENT web service.

Content import/export

• Resolved an issue where exporting a report to PDF with a company logo enabled would cause an error.
• Resolved an issue that would incorrectly include duplicate cell values during export to XLSX.

Dashboards

• Resolved an issue where dashboard filter values would not be applied in Assisted Insights and in linked reports on dashboards.

Data

• Resolved an issue where Oracle error ORA-01795 would occur when adding an access filter to a data source with more than 1000 associated view elements.
• Resolved an issue where some components of Yellowfin would not work with custom authentication adapters.
• Resolved an issue where migrating schedule records would fail upon upgrade.

Infrastructure

• Resolved an issue that would prevent a user with a duplicate email address from being updated when skipEmailDupCheck was enabled.
• Resolved an issue with the Multiple sessions and Password Reset pages would not work if the configuration option Multiple Login Logic was set to Ask and the context path was not set to ROOT.
• Resolved a potential XSS (cross-site scripting) vulnerability within the report name in Report Builder.
• Improved the robustness of filter loading when directing a user to a dashboard via SSO.
• Resolved an issue where the IMPORTCONTENTNOVALIDATION web service call would still validate.

Reports

• Resolved an issue that would incorrectly update filter values set to Current Values in a share link, rather than preserving the value used at the time the link was created.
• Resolved an issue that would cause an error when Minimum/Maximum Value was selected from the Report filter list.
• Resolved an issue where a date time filter with an EQUAL operator would use BETWEEN in some SQL databases.
• Resolved an issue where editing a report would automatically re-enable the filtering setting Remember Filter Values each time.
• Resolved an issue with field matching logic where importing a view with a view-level filter named the same as an existing field in the existing view would cause the report to break.
• Resolved an issue where removing multiple fields from report could cause an exception on tables with a large number of columns.
• Resolved an issue where altering report column fields would not update the related canvas text widget references.
• Resolved an issue with analytic functions where adding a section to a report would cause an incorrect field reference.
• Resolved an issue where a union joined report would fail with back-end exceptions.
• Resolved an issue with duplicate values when Stored Procedure is added as Subquery.

UI

• Resolved an issue that would prevent Boolean filters from rendering on dashboards.
• Resolved an issue that would cause extra dialog boxes to appear when creating a new access filter via the Access Filter Record tab.
• Resolved an issue that would unintentionally empty the search box of text after performing a search and adding or removing a calculated field to a report.
• Resolved an issue where columns hidden to custom user roles on the browse page would be displayed.
• Resolved an issue on the Browse page that would allow users to see views in a restricted folder.
• Resolved an issue where a chart with variance could not be deleted.
• Resolved an issue with assigning users to tasks.
• Resolved an issue with two broken text links at the bottom of the New Connection dialog box.
• Resolved an issue where some views would not be displayed in the Browse page.
• Resolved an issue that would break columns of the Browse page when a user was assigned to a copied role.

Views

• Resolved an issue that would prevent the creation of freehand SQL views using Hive.

Web services

• Refactored the use of the client org parameter in the user admin web service GETALLUSERS (learn more).
• Resolved an issue where IMPORTCONTENTNOVALIDATION would cause an error 42 when trying to import older version import files via SOAP.