Release v2.13.3-p1

Fix

• Added the validation of the instances hierarchy to prevent a possible parent / child circular reference.

Release v2.13.3

Includes the following features and fixes:

• Possibility to rest 2FA of users by the admin account along with the password reset.
• Fixed analysis creation based on a specific model when the model has assets that consist of risks with generic threats or vulnerabilities.
• The Global analyses stats is only available now to the users with CEO (global statistics) role.
• Possibility to import on the BackOffice side risks with mode (generic | specific) property.

Release v2.13.2

Includes the following features and fixes:

• An optional Captcha integration, that can appear after certain number, configured, of unsuccessful login attempts.
• Fix of Assets Library objects import,Issue.
• Configurable export of analyses with evaluations. By default the option can be yes, so export with evaluations is not forgotten to be enabled.
• Added the risks IDs to all the tables to facilitate the traceability. Based on the discussion.

Release v2.13.1-p1

Fixed the models removal by removing the related analysis and fetching only active models for the analysis creation.

Release v2.13.1

The code refactoring includes the following parts:

• Removed the relying on the abstraction and sharing the same methods execution of services.
• Implemented the single responsibility approach to the entities.I
• Added the filtering functionality to process the incoming get requests data and prepare them for the filter and sort queries.
• Added the data validation at first place. Before the post, put, patch and delete requests data are passed to the services, they are validated.
• Removed the dependency on the abstract table common methods, where the entities positions were processed, and some specific code run.
• Implemented the common approach, not resources/time consuming, of the entities positioning based on interfaces and traits.
• Optimised the export and import functionality to be clean and fast.
• Added a common place to validate the analysis access and endpoints permissions before the controllers’ actions are reached. The Middleware passed an anr object to the actions automatically as an attribute.
• Restructured the components and code parts of the application based on responsibilities, relations and to be more clear.
• Removed many deprecated code parts and cleaned up the deprecated columns in the DB tables.
• Improved some DB indexes and renamed tables, columns to be more clear on the names.
• Added some first unit tests as a starting point for the full coverage.

Not refactored parts are the following: Questions, QuestionsChoices, Guide, Interviews, ROPA, Deliverable.

Release v2.12.7-p2

Fixed the issues of the position update, uuid was wrongly used as Anr id.

Release v2.12.7-p1

• Fixed the library objects disappearing after the specific risks removal.

Release v2.12.7

New features

• [FrontOffice] Alternative to 2FA QR code
• [FrontOffice] Add context info to the list of analysis panel

Bugfixes

• [FrontOffice] Global dashboard max calculation error

Patch v2.12.6-p1

Fixed an issue with console commands execution:
TranslateServiceFactory should not return false and the PROJECT_ROOT const is used to search for PO files.

Release v2.12.6

New feature:

• Analysis background import.
• Support of PHP8.