beqom PaySuite 21.1 - Detailed release notes
This article lists the new features that have been added to the platform, as well as the bugs that have been corrected in the intermediate 21.1 release of the beqom PaySuite application and in the subsequent patches.
21.1
Deployment to staging environments: February 24th, 2026
Deployment to production environments: March 3rd, 2026
| Type | Issue key | Module | Description | |
|---|---|---|---|---|
| Zendesk | Jira | |||
| AC-17031 | Performance Management | Under Workbench > Performance Management > Career Development Plans, a new "HR portal" was added for Career Development template owners (HRBPs and local owners). For published templates, owners can now access the portal by clicking the Manage option in the 3-dot menu or by clicking the template name directly. The portal displays a page titled 'Manage {Plan name}' with two tabs: Move stages (opened by default with filters including Career Development stage prepopulated to 'Closed', organizational unit, manager, workers, cost center, and country) and Manage plans (same filters without default selection). Both tabs include collapsible filter panels with an always-active Apply filters button. The Manage option is not shown for draft templates, and clicking draft template names continues to open edit mode. This improvement is currently being worked on as part of our continuous deployment strategy and will be released at a later date. | ||
| AC-17710 | Authorization | An issue was corrected in the IAM service where updating support user (reserved for beqom support team) information (professional roles, password, or active status) caused the 'Support' SubjectProfessionalRole to be removed from the system, leaving only the 'Employee' role or removing roles entirely. The user update process now correctly preserves the 'Support' role when modifications are made to support user accounts. | ||
| AC-17721 | Compensation Management | An issue was corrected in Round Management > Statement Generation where users with the Global Compensation Admin role who were not owners of a compensation round could initiate statement creation but received a 404 error ("Current user is not an owner of the round") when attempting to save or publish. The system now properly recognizes Global Compensation Admin permissions throughout the statement generation workflow. | ||
| AC-17873 | Authorization | An issue was corrected where logging out of the application did not properly revoke the active session. After the logout workflow was changed to redirect users to the Microsoft logout page, session cookies and access tokens remained valid and could still be used to access protected backend APIs after logout. The root cause was identified as the logout process not triggering server-side session revocation. Sessions are now revoked immediately upon logout, and backend APIs reject requests made with revoked session identifiers or tokens. | ||
| AC-19840 | Compensation Management | The accessibility of skip links on Planner, Goals Planner, Feedback Planner, Check-Ins Planner, Reviews Planner, and Career Development pages was improved to bypass repeatable content. The affected pages were updated to ensure skip links now properly omit repeatable navigation elements and direct users to the main content area. | ||
| AC-20066 | Compensation Management | An issue was corrected in the validation report where certain bonus-related columns were not properly displayed or were ignoring their configuration settings. When the Pro-Rated Target Bonus Per Situation or Guaranteed Amount columns are enabled for bonuses, they are now included in the validation report. Additionally, all other bonus-related columns now respect their respective enablement settings in the validation report. Previously, the Pro-Rated Target Bonus Per Situation and Guaranteed Amount columns were not visible even when enabled, and other bonus columns were always displayed regardless of configuration. | ||
| AC-20288 | Authorization | A security enhancement was implemented to enforce immediate session termination upon logout. When users log out, the backend now actively revokes the session by blacklisting the access token in Redis (a high-performance caching service used for fast data retrieval) with a time-to-live matching the token's remaining validity (defaulting to 24 hours). A new security middleware was applied to all protected API endpoints to validate each incoming request against the blacklist. If a blacklisted token is used to call an API after logout, the system immediately rejects the request with a 401 Unauthorized status and the message "Session has been revoked." This eliminates the vulnerability where access tokens remained valid and usable after explicit sign-out. | ||
| AC-20320 | Pay Transparency | Multicurrency support was added for Pay Analytics dataset synchronization. The system can now normalize pay information from multiple currencies to a global currency when exporting data to Pay Analytics, ensuring consistent currency representation across all rows. Currency conversion settings in Dataset Mapping (Workbench > Pay Analytics) are controlled by a feature flag and include configurable currency fields and main currency selection. When currency conversion is disabled, data is sent without currency normalization. | ||
| AC-20781 | Compensation Management | Tailwind CSS (a utility-first CSS framework used for styling the user interface) was upgraded from version 3.4 to version 4.1. The update included migrating the configuration to the new format, updating custom color tokens and CSS files, and verifying that all semantic spacing classes, dark mode functionality, and responsive design breakpoints continued to work correctly. Related packages tailwind-merge and tailwindcss-safe-area were also updated to their latest compatible versions. | ||
| AC-20848 | Pay Transparency | A snapshot filter was added to the Pay Analysis List page in Workbench > Model Factory > Pay Analysis Results. Users can now filter the analysis list by selecting a snapshot name from a dropdown. The dropdown displays all snapshots that have associated analysis data, enabling users to quickly narrow results to a specific snapshot. | ||
| 142568 | AC-21297 | Performance Management | An error that was occurring when editing text in the feedback textbox after adding and removing links was corrected. The problem specifically occurred when users would add a link to their feedback text and then attempt to remove it, causing the text cursor to malfunction and preventing proper text editing at the cursor position. Users can now properly edit feedback text at any cursor position even after manipulating links within their feedback content. | |
| AC-21328 | Performance Management | Reassigned managers can now view and participate in Career Development processes through Passport > Career Development. A new filter toggle was added allowing managers to switch between 'My Plans' (their own career development plans) and 'Assigned Plans' (plans reassigned to them and plans of their direct reports). When a CD plan is reassigned to a manager, an info icon appears next to the plan title with a tooltip explaining the reassignment. Reassigned managers have full participation rights including providing manager feedback, participating in chat, submitting, and printing PDFs. For in-progress plans, reassignment immediately transfers editing rights from the previous manager to the new manager. A new setting in Workbench > Performance Management > Career Development Plans, 'Allow system managers to see closed Career Developments', controls whether new managers can see completed plans from previous managers; when enabled, both previous and new managers may see closed plans depending on the scenario, and when disabled, only the manager who completed the plan retains visibility. | ||
| AC-21334 | Performance Management | Employees can now see when their career development plan has been reassigned to a different manager. In Passport > Career Development Plans, an alert icon appears in the plan list when a manager or admin reassigns the plan. Clicking the icon displays a popup message with the name of the new manager. System-initiated reassignments do not trigger the alert. | ||
| AC-21500 | Pay Transparency | Error handling for dataset uploads in Workbench > Model Factory > Pay Analysis Results was improved to provide clearer feedback when upload creation fails. Previously, generic bad request errors were returned without actionable information for users. The system now returns specific, translatable error codes with descriptive messages: when Pay Analytics encounters a data processing error, users see a message directing them to contact support; when null values are detected in numerical fields during validation, users are informed to check logs for column-specific details. This change helps users understand why a dataset upload failed and what action to take. | ||
| AC-21593 | Compensation Management | Audit trails in Planner > Compensation now display the user-friendly display name of compensation elements in the Updated field column, rather than technical field names. This enhancement ensures that audit records show meaningful field labels even when columns are hidden in the compensation round interface. The system retrieves the current display name when audit data is accessed, with a fallback mechanism to ensure historical audit records remain readable. | ||
| AC-21982 | Data Foundation | An issue was corrected where Power BI configuration credentials (passwords and client secrets) were stored in clear text in the Analytics database. This storage method violated security policies and posed a potential security risk. The credentials are now securely managed using Azure Key Vault or Managed Identity, ensuring that sensitive authentication information is no longer exposed in the database. | ||
| AC-22037 | Compensation Management | An issue was corrected in the statement generation process where the system attempted to fetch all workers at once, leading to service memory failures that prevented statements from being generated. The process was updated to fetch workers in batches, allowing statements to generate successfully regardless of worker population size. | ||
| 146427 | AC-22081 | Pay Transparency | An issue was corrected in the Pay Analytics integration where the platform assumed a fixed URL format at the service configuration level, causing connection failures for tenants using non-standard Pay Analytics URLs (e.g., URLs ending in .dev rather than .com). The API endpoints POST ~/api/MachineLearning/pay-analytics/tenants and PATCH ~/api/MachineLearning/pay-analytics/tenants/{tenantName} now allow API users to configure both the tenant name and the full Pay Analytics URL, supporting any URL format. | |
| AC-22149 | Pay Transparency | A status lifecycle was implemented for Pay Analysis under the Machine Learning module. Each analysis now progresses through defined statuses: New (upon import), Validation (when opened), In Progress (when published), Closed (when closed), and Archived (when soft deleted). Status transitions are automatically triggered by specific user actions: opening an analysis transitions it from New to Validation, publishing moves it from Validation to In Progress, closing sets it to Closed from any status, and soft deletion archives it from any status. All existing analyses were initialized with New status. | ||
| AC-22245 | Pay Transparency | An issue was corrected where users were unable to upload documents with file names longer than 128 characters in Planner > Documents and during compensation round configuration. The system now supports document file names up to 255 characters in length, allowing users to upload documents with longer, more descriptive names. | ||
| AC-22520 | Pay Transparency | The data upload validation for Pay Analytics was adjusted to be less strict when processing text fields (categorical fields). Previously, snapshots with null or missing text values would fail to upload. The system now converts null text values to empty strings, allowing these uploads to succeed. Numeric fields continue to use the existing validation approach where rows with missing numeric values are skipped and users are notified. | ||
| AC-22802 | Pay Transparency | A warning mechanism and reset functionality were added to the column configuration in Workbench > Model Factory > Pay Analysis Results. When users modify grid column settings, a reset button is now available to discard changes. If users attempt to close the configuration popover with unsaved changes, a warning dialog prompts them to cancel, discard changes, or save and close. This prevents accidental loss of column configuration changes. | ||
| AC-22865 | Pay Transparency | An issue was corrected in Planner > Pay Information where the form validation banner displayed incorrect behavior in several scenarios. When validation errors occurred, the banner was not visible if users had scrolled down the page, requiring manual scrolling to the top. When generating a document without selecting both template and data source, the error messages in the banner did not follow the correct field order (template first, then data source). Switching between radio button options (generate document vs. attach document) did not clear the validation banner as expected. Additionally, field labels in the banner did not match the labels shown in the form fields. The system now scrolls to the top automatically when validation errors occur, displays errors in the correct field order, clears the banner when users switch options, and shows consistent labels throughout the interface. | ||
| AC-22947 | Compensation Management | An issue was corrected in Workbench > Compensation where the navigation toolbar would vanish and reappear (causing a layout shift) while data was loading on the Payroll data drop page. The navigation tabs are now displayed consistently during loading, matching the behavior on other round management pages such as Overview, Round reminders, and Statement generation. | ||
| AC-22952 | Compensation Management | In Workbench > Compensation Round Management, the target bonus currency field in the bonus calculation equation step was widened. The autocomplete input field and completion dropdown are now wider, allowing compensation admins to view full field details without truncation. | ||
| AC-22957 | Compensation Management | The deprecated PeopleInput component was replaced with the new Autocomplete component in compensation round configuration and round portal interfaces. This technical migration affects the Owners field in Planner > Compensation round configuration and in the round details view within the Round Portal, improving component stability and maintainability. | ||
| AC-22960 | Authorization | A configuration setting was added to enable or disable the session blacklist mechanism via application settings. Administrators can now control whether the blacklist feature (which prevents use of JWT tokens after logout by maintaining a Redis-based blacklist of revoked sessions) is active for specific regions based on their security requirements. The EnableSessionBlacklist setting defaults to disabled to maintain existing behavior, and when enabled, the system validates sessions against the blacklist for all API Gateway requests. This provides administrators with fine-grained control over security features per environment or region. | ||
| AC-22995 | Compensation Management | An issue was corrected where not all enabled compensation element datapoints were displayed in payroll data drop exports. Previously, when creating a payroll data drop with compensation elements selected in the payroll configuration, certain columns such as ProRatedTargetBonus were missing from the downloaded report. All enabled datapoints for the selected compensation elements (both Salary and Bonus types) are now properly included in the payroll data drop file. | ||
| AC-23053 | Performance Management | Translation keys for the Request Feedback widget were split to follow localization best practices. The keys request_feedback_widget_dataset and request_feedback_widget_dataset_about_my_team were each replaced with 15 dedicated keys, with each on-screen text element now having its own key. This change makes it easier to identify and customize specific text elements and resolves issues where customizations were hitting the 1000-character limitation for custom labels. | ||
| 146477 | AC-23178 | Data Foundation | An issue was corrected where audit trail entries were ordered only by date, which caused entries created on the same day to appear in an incorrect or non-deterministic sequence. The audit trail is now consistently ordered by both date and time (to millisecond precision), ensuring a precise chronological view of all events. This behavior is enabled by default across all environments, with no data migration required. | |
| AC-23237 | Performance Management | A visual indicator was added to reassigned review views across multiple interface locations. When a review is reassigned, an alert icon now appears in Passport > My Reviews for employees, in Planner > Review List for managers, and in Passport > Assigned Reviews and Planner > Assigned Review List for LM+1 users in challenge processes. Users can click the alert icon to see a message displaying the name of the manager who performed the reassignment. The alert icon displays alongside existing labels for Let's Discuss and Challenge processes, providing clear visibility into review reassignment status. | ||
| AC-23361 | Compensation Management | Excel export functionality was added to Planner grids under Planner > Compensation. HRBPs and Compensation managers can now click the three-dot menu icon in the top right of a Planner grid and select 'Export to Excel' to download grid data. The export dialog allows users to choose between exporting the current page or all pages (based on applied authorization), and requires a password meeting specific complexity requirements to protect the downloaded file. The exported Excel file includes all visible fields from the Planner grid (except Eligibility and Notes Count), respects applied filters and field grouping, and follows the naming pattern [RoundName]_[ViewMode/Actor]_[Date/Time]. | ||
| AC-23369 | Compensation Management | A full-screen Calculation Workspace mode was added for configuring calculated column formulas. Compensation admins and global compensation admins can now click an 'Open calculation workspace' button when creating or editing calculated columns to access an expanded view with three resizable panes: a Functions browser with searchable, categorized functions and syntax helpers; a Formula editors section with an arithmetic operator toolbar supporting both non-conditional and conditional (If-Then-Else) formula types; and a Properties tree displaying searchable properties with type tags and inline descriptions. Functions and properties can be inserted directly into formula editors via '+' buttons. The workspace preserves all configuration when closed, returning users to the calculated column drawer with formulas intact. | ||
| AC-23479 | Compensation Management | Under Workbench > Compensation Management, the Name field of standard compensation elements in the compensation tree is no longer editable. For existing implementations, any previously customized names are preserved but can no longer be modified. New implementations receive standard compensation elements with fixed, non-editable names. | ||
| AC-23482 | Compensation Management | The "Customer code" field was removed from custom compensation elements in the compensation tree under Compensation Management. When creating or editing custom compensation elements, the field is no longer present. Existing custom compensation elements retain historical data but the field is no longer displayed. | ||
| AC-23500 | Data Foundation | The report synchronization process in Integration Hub was enhanced to use a two-tier matching strategy. The system now performs ID-based matching as the primary method: when a Fabric report ID matches an existing Accelerate report's FabricReportUid, it updates the Name, Description, and DatasetId if different. As a fallback, name-based matching is applied: if IDs don't match but a single name match is found (normalized, case-insensitive), the system updates the FabricReportUid to the new Fabric report ID; if multiple name matches exist, the synchronization is skipped and a warning is logged to avoid ambiguity. If no match is found, a new report entry is created in Accelerate. The same matching logic applies to Pages (by page ID, then by displayName) and Datasets (by ID only), ensuring reliable synchronization while supporting unique translation keys for report names. | ||
| AC-23521 | Performance Management | An issue was corrected in Workbench > Performance Management > Performance Review Template where it was not possible to navigate to the next step after duplicating a review template that contained a Worker widget and then enabling 'Goal setting template' or 'Skip worker self-assessment'. The issue was caused by an internal error during component data mapping when widgets were removed due to settings changes. The mapping function was adjusted to properly handle these cases, and section weights are now calculated correctly to reflect only the enabled widgets and settings. | ||
| AC-23566 | Performance Management | The review interface was redesigned to improve the user experience in both view and edit modes. In view mode, the top banner is no longer displayed, and the Back button replaces the Exit button. Primary actions (Print PDF and Send to documents) are now prominently displayed, with additional actions consolidated behind a 3-dot menu when more than three options are available. Read-only, Let's discuss, and Challenged labels were removed from the top of the interface, while Challenge and Let's discuss labels now appear below the status. In edit mode, the top banner is displayed, the Exit button was removed in favor of the Back button, and the primary action button (Save and Exit or Publish, depending on the scenario) is shown with other actions hidden behind the 3-dot menu. | ||
| AC-23715 | Pay Transparency | A new Integration Hub endpoint (the API layer used for reporting and data integration) was added to retrieve pay transparency document settings. The GET ~/reporting/v1/pay-transparency/document-settings endpoint returns the overdue period and warning period values configured in the Document Settings tab, enabling analytics and reporting widgets to calculate request SLA metrics such as overdue requests and requests due within specified timeframes. | ||
| AC-23721 | Data Foundation | A people-centric worker list grid was added as the primary entry point for exploring worker data in the Worker 360 area. The grid displays workers in a tabular format with human-readable, business-friendly fields showing current effective data as of today. Users can configure visible columns, sort and filter by configured fields, and search workers by name, email, or worker identifier. The grid includes drill-in navigation to the Worker Profile view and applies consistent security filtering to restrict worker visibility based on user permissions. | ||
| AC-23779 | Compensation Management | A configurable workflow system was added to compensation round creation in Workbench > Pay Management > Compensation Rounds. Compensation admins can now select and apply workflow templates (Hierarchy driven or Collaborative) when configuring a compensation round. The workflow step displays an initial unconfigured step, provides a Templates button to access template options, and includes preview modals showing read-only diagrams of each template's steps and actors. When applying a template to an existing configured workflow, a confirmation modal prompts admins to confirm replacement of current configurations. The workflow diagram includes zoom controls (zoom in, zoom out, fit-to-screen) for easier navigation. Workflow-level validation prevents navigation to the next step if no workflow step is fully configured, displaying an error banner with specific validation messages. | ||
| AC-23782 | Compensation Management | Workflow step configuration was added to the compensation round setup interface in Workbench > Pay Management > Compensation Rounds. Compensation admins can now configure individual workflow steps by defining step names, assigning actors (HRBP, Comp manager, Comp manager +1) with granular permissions, setting field-level read/write access per actor group, and enabling optional time-based progression with automatic advancement dates. Each step supports multiple actor configurations with independent approval and rejection permissions, allowing flexible role assignments such as editor-only roles (write access without approval rights), auditor roles (read-only with reject capability), or full approvers. The interface includes validation to prevent duplicate actors within a step, enforce chronological date ordering across steps, and ensure required fields are completed. Steps can be inserted above or below existing steps, duplicated, or deleted via the workflow diagram. Two pre-built templates (Hierarchy driven and Collaborative) provide default step configurations that can be customized to match organizational approval processes. | ||
| AC-23802 | Pay Transparency | In Workbench > Data Management > Snapshot Manager, users can now assign Pay Analytics labels when creating a Pay Analytics dataset. The create dataset modal includes a multi-select dropdown that displays existing Pay Analytics labels. Labels are cached for 5 minutes to optimize performance and reduce system load. The dropdown is disabled when no Pay Analytics tenant is selected and is automatically cleared when the selected tenant is changed. | ||
| AC-23856 | Authorization | Documentation about IAM (Identity and Access Management) and authorization was created to provide guidance and reference material for these security components. | ||
| AC-23866 | Pay Transparency | Consumer registration logic was moved from application startup to database migrations. This change ensures that message consumers (components that process asynchronous events and background tasks) are properly registered during system deployment, improving deployment reliability and consistency. | ||
| AC-23872 | Data Foundation | ABAC (Attribute-Based Access Control) enforcement was applied to snapshot CSV downloads in Snapshot Manager. Previously, CSV exports exposed all employees in a snapshot regardless of the user's ABAC restrictions. Snapshot CSV files now respect ABAC permissions, filtering employee rows based on the downloading user's authorization rules. When a user with ABAC restrictions initiates a CSV download, the system displays a warning indicating that the exported data is limited by their role or ABAC scope, and the resulting file contains only employees they are authorized to view. This enforcement applies to all roles with CSV download capability. | ||
| AC-23875 | Data Foundation | Snapshot Manager access was removed from Compensation Admin roles (including country-level variants). Compensation admins can no longer navigate to or view the Snapshot Manager page. This change restricts unintended visibility of snapshot data while maintaining access for Global Compensation Admin roles, which are handled separately. | ||
| AC-23878 | Data Foundation | The Insight cards in the Snapshot Manager page were reorganized to improve clarity and usability. The cards now display four consolidated metrics: Snapshots (total count), Publishing (combining Started and Pending statuses), Ready (Published status), and Failed (combining Failed and StaleTimeout statuses). The grid view was updated to reflect the same status categorization for consistency across the interface. | ||
| AC-23901 | Pay Transparency | A feature toggle for Pay Analysis was added to Workbench > Platform Setup > Feature Enablement. When enabled by Support role users, the toggle controls visibility and access to Pay Analysis functionality across the platform, including the Pay Intelligence tab, Pay Analysis Results, the Pay Analysis Data Mapping page in Data Management > Data Modelling, and the context menu option to create Pay Analysis datasets in Snapshot Manager. The feature toggle complements existing feature flags and is only visible when the underlying feature flag is enabled. | ||
| AC-23973 | Authorization | The subject-attributes data model (the storage layer used to manage user roles and authorization attributes) was extended to support attributes sourced from security groups. The schema now stores a denormalized copy of security group roles and attributes per subject, identified by context type and security group ID, while maintaining full backward compatibility with existing individually-assigned subject attributes. All existing subject-attributes flows, including import, export, and authorization endpoints, continue to function without changes. | ||
| AC-23988 | Data Foundation | Translation keys were added to the webapp project for semantic model objects in System Usage and Roles. These keys enable semantic model objects to be accessed in custom labeling via the download button and are used in Power BI reports. | ||
| AC-24010 | Data Foundation | Filter and sort capabilities were added across Workers, Employment, Demographics, Individual Pay, and Range screens. Users can now filter by any visible field using type-appropriate operators (with IN and NOT IN accepting comma-separated values), perform full-text search across fields, and sort by configured attributes. The functionality leverages existing criteria expression logic to provide a fast, intuitive way to locate and organize worker data. | ||
| AC-24033 | Pay Transparency | An idempotency check was added to the backend to prevent duplicate processing of identical requests. This enhancement ensures that repeated API calls with the same parameters are handled correctly, improving system reliability and data consistency. | ||
| AC-24037 | Data Foundation | An issue was corrected in Workbench > Data Management > Data Ingestion where the text displayed when uploading CSV files was improperly formatted. The message now correctly displays: 'Total max size 10MB (combined size of all uploaded files). Max number of files: 100' with proper sentence separation. | ||
| AC-24038 | Data Foundation | The BusinessKey calculation logic for NonReferenceableEntity types (e.g., Matrix Tables such as MeritMatrix, SalaryRaisePerCountry, PerformanceZoneMapping) was extended to support optional (nullable) key properties. Previously, the system would throw a KeyNotFoundException when an optional business key property was absent from parsed data. New calculation methods were added that use a sentinel value (ulong.MaxValue) for absent keys, ensuring unique hash generation while maintaining backward compatibility. This enhancement enables concrete-to-abstract resolution patterns where lookup rows can have NULL input keys to match broader criteria (e.g., a row with a null district value matches any district within a city). | ||
| AC-24045 | Data Foundation | An enhancement was added to the Data Viewer in Workbench > Data Management > Entity Browser to prevent errors when navigating large datasets. Previously, rapidly clicking pagination buttons before the page fully loaded could trigger 500 errors from the gateway. Pagination controls are now disabled until the page is fully loaded, ensuring stable navigation through worker data. | ||
| AC-24049 | Pay Transparency | An issue was corrected in Workbench > Data Management > Pay Analysis Data Mapping where users were unable to clear gender mapping values in the Non-Binary and Not Reported fields when editing a Dataset Mapping Config. Clicking the cross icon to unselect a value would cause the UI to reapply the previously selected value instead of clearing it. Users can now successfully remove values from these fields when editing configurations. | ||
| AC-24059 | Pay Transparency | |||
| AC-24070 | Compensation Management | In Planner > Compensation, the job title displayed in the worker cell was aligned to the left to match the alignment of the worker's full name, improving visual consistency in the manager grid. | ||
| AC-24091 | Compensation Management | Under Planner > Compensation, a configurable row limit was introduced for Excel exports to optimize system performance. When HRBPs or Compensation managers attempt to export more than the configured number of rows (10,000 by default), a validation check now prevents the export and displays a message prompting users to narrow their selection or contact Customer Support for assistance with large exports. The limit is controlled by the new PlannerExportFileGenerationSettings configuration. | ||
| AC-24111 | Data Foundation | PowerBI configuration was refactored to improve security and maintainability. Sensitive authentication fields (ClientId, AuthenticationMode, AuthorityUrl, TenantId, ScopeBase, and Instance) were removed from the PowerBIConfiguration database table and moved to appsettings.json (a configuration file used to store application settings). Only the WorkspaceId field, which varies per tenant, remains in the database. Additionally, the IAM materialized views migration (database views used to optimize user hierarchy queries) was updated to check if UserHierarchySubordinatesMV and UserHierarchyManagersMV already exist before attempting to create them, preventing migration failures when views are already present. | ||
| AC-24116 | Pay Transparency | |||
| AC-24123 | Authorization | An issue was corrected where support user email addresses were not updating in the Company Network page after being modified. The root cause was a data synchronization issue: when updating a support user's email, only the User.Email property was being updated, while the related Emails collection in the database remained unchanged due to a missing .Include() clause in the repository query. The system now properly synchronizes both the User email property and the Emails collection entity during updates, ensuring that email changes are consistently reflected in both the database and the UI. | ||
| 148153 | AC-24134 | Performance Management | An issue was corrected in Passport > Goals where managers could not successfully modify a goal's weight while the goal was in draft status. Although the weight change could be saved, the value would revert to its initial value afterwards. The issue was caused by validation logic being incorrectly applied to draft goals. The validation was disabled for draft status, and weight changes now persist correctly. | |
| AC-24140 | Compensation Management | An issue was corrected in Planner > Compensation where removing the base reference field from a compensation element configuration would cause a 422 error when saving the round. The system now automatically disables the Increase Amount and Increase Pct options when the reference field is cleared, allowing the configuration to be saved successfully. | ||
| AC-24159 | Pay Transparency | The PayAnalyticsEditor and PayAnalyticsReader authorization roles were removed from the platform. These roles were no longer relevant and have been deleted from all authorization policies and frontend policy checks. | ||
| AC-24165 | Performance Management | An issue was corrected in Workbench > Performance Management > Goal Plans where text in the weighted goals section was hard to read due to incorrect theme styling and colors. The styling was adjusted to ensure text is clearly readable during goal plan creation. | ||
| 146282 | AC-24226 | Data Foundation | An issue was corrected in the authorization logic for the HRBP profile in Analytics Hub where access to all workers was controlled by the 'All Company' subject attribute filter. The system now uses the 'GrantFullAccess' attribute to determine whether a user can access data for all workers. When GrantFullAccess is set to true, users with the Analytics role and HRBP profile selected can view data for all workers. When GrantFullAccess is not set or is false, standard ABAC (attribute-based access control) filters apply. Manager access behavior remains unchanged: users with Manager profile enabled continue to access their direct reports in the line manager hierarchy without ABAC policy restrictions. | |
| AC-24230 | Pay Transparency | |||
| AC-24252 | Data Foundation | An issue was corrected in Workbench > Data Management > Snapshot Manager where snapshot exports were limited to 60,000 records. Admins attempting to export snapshots containing more than 60,000 records would receive incomplete CSV files truncated at the 60,000-record limit. The export functionality now correctly handles snapshots containing up to 100,000 records while respecting ABAC permissions. | ||
| AC-24299 | Data Foundation | Access permissions for Snapshot Manager were updated to align snapshot configuration capabilities with governance and responsibility boundaries. The PayAnalyticsEditor role no longer has access to Snapshot Manager, and the module is hidden from navigation for users with this role. Full access to Snapshot Manager is now granted exclusively to users with the following roles: Support, GlobalCompensationAdmin, Configuration, DataModelerAdmin, and PayAnalyticsAdmin. These changes apply consistently across UI access, navigation, and API authorization. | ||
| AC-24302 | Data Foundation | An issue was corrected in the GitHub Actions workflow for the Lokalize localization service where the automation was executing too quickly and adding unintended commits to pull requests, which blocked the validation gate. The pull request generation process was improved so that localization changes can now be pushed and merged to main after approval without being blocked by the validation gate. | ||
| AC-24463 | Authorization | An issue was corrected where the GrantFullAccess subject attribute failed to work when boolean values were provided in uppercase (TRUE or FALSE). Some versions of Microsoft Excel automatically convert CSV boolean values to uppercase when opening or saving files, and the authorization system was only recognizing lowercase values. The system now handles boolean values in a case-insensitive manner, so TRUE, true, and True (as well as FALSE, false, and False) are all treated as equivalent. | ||
| AC-24514 | Performance Management | An issue was corrected in Planner > Goals and Planner > Check-ins where the UI layout was broken for managers. The Create Goal page, Goals list, Goal view, and Check-in view pages did not scale correctly and sections were misaligned. The layout and styles of the affected pages were adjusted so that components now render correctly. | ||
| AC-24518 | Compensation Management | The healthchecks library (a component used to monitor service health and readiness) was upgraded in the compensation service to resolve an out of memory issue. This technical improvement has no impact on compensation functionality. | ||
| AC-24588 | Performance Management | An issue was corrected in Passport > Career Development where a type error prevented the Career Development plans list from loading when a plan had no assigned manager. The manager field in the API type definition was made nullable and null safety checks were added to UI components displaying manager information. Career Development plans now load correctly regardless of whether a manager is assigned, and reassignment alert buttons are properly hidden for plans without managers. | ||
| AC-24665 | Data Foundation | An issue was corrected in Workbench > Data Management > Data Ingestion where translation keys were missing for the CSV upload dialog when using the en-US (English - United States) language setting. The affected keys (admin_settings_data_ingestion_upload_step_fill_in and admin_settings_data_ingestion_upload_step_upload) have been added to the translation repository and now display properly translated text. | ||