INC-148817 · Issue 604971
Added check for ABAC policy to getassignmentdetailsinternal
Resolved in Pega Version 8.4.4
When an attribute based access control (ABAC) policy was defined on a particular class, the policy was properly applied when browsing instances of the class and directly opening the work object. However when an associated assignment was processed via the DXAPI (using the assignments service) the security was not applied and users who should not have access were able to progress the case. This has been resolved by adding a check in the pzgetassignmentdetailsinternal activity to check for work object opening security.
INC-149823 · Issue 608354
DX API returns properly referenced icon class for embedded page
Resolved in Pega Version 8.4.4
When using the DX API to build an Angular JS UI, the response returned from the GET /cases/{ID}/actions/{actionID} api did not return the iconStyle for an icon class that uses a property reference when the flow is on an embedded page. This has been resolved by adding code to set the correct context for pzAPICreateJsonForModes and pzAPICreateJsonForField Rule-Utility-Function.
INC-150172 · Issue 611774
Updated class handling for View field security
Resolved in Pega Version 8.4.4
When using a defined View which returned a page and its fields and used an inherited custom work party definition, trying to update the pyWorkParty(Customer) by calling the "post /assignments/{ID}/{actionID}" did not work as expected when Field Security was ON. This was traced to the field security relying on the design time page class information stored in the list/group property, and has been updated to resolve the view fields using actual class information from the work page.
INC-152442 · Issue 616668
Check added for Create Access to attachment
Resolved in Pega Version 8.4.4
After restricting access for the attachments category in a CS application, the attachment was added without category and could not be opened. This was due to the Create Attachment access not being automatically created for all categories when privileges were added, and has been resolved by adding a step to check Create Access for attachments of the respective category.
INC-153688 · Issue 616919
Class name length limitation raised to 64 characters
Resolved in Pega Version 8.4.4
In order to support field audits on very long class names, FLAudit Class has been modified to allow a class Name length of 64 characters instead of the previous limit of 56.
INC-154189 · Issue 617247
Harness used to determine read-only for button/text input
Resolved in Pega Version 8.4.4
If a button/text input was configured to always be editable in a section by using the /v1/cases/{ID}/pages/{pageID} API (say i.e PageID as Review), the button/text input was always returned as readonly. This was due to the API being hardcoded to return readonly info, and has been resolved by updating pzGetPageDetails to not force read-only and let the harness configuration decide the behavior.
INC-154826 · Issue 614818
Enhanced handling for screen/non-screen/screen flow movement
Resolved in Pega Version 8.4.4
When using a screen flow where the last screen had a link to launch a section, a cancel button in the section that was configured with a data transform and a 'Finish Assignment' intended to move back to the screen flow did not work as expected. If a browser refresh was performed and then the cancel button was clicked, the Finish Assignment / return was triggered as expected. Because this configuration navigated to a non-screen flow, the attachOnLoad function did not load the parameter needed for maintaining error messages. This has been resolved by updating the navigation to handle this use.
INC-155469 · Issue 616912
Attach Documents Control updated for busy indicator timing
Resolved in Pega Version 8.4.4
When using the standard control - Attach content - to attach documents for processing in the application, selecting multiple files for upload and then clicking on the attach button before the busy indicator started resulted in not all files being uploaded. Investigation showed that the busy indicator was not set to display as soon as the attachments were added, giving an opportunity to click "Attach" before all the documents could be successfully added to the process. As part of the resolution for this issue, the busy indicator will be displayed immediately upon file selection.
SR-D18725 · Issue 488208
OrgUnit delete works as expected
Resolved in Pega Version 8.4
After creating two organization units such as Unit1 and Unit11 on the same level and mapping one operator to Unit11, attempting to delete Unit1 resulted in an error indicating the operator had to be deleted first even though unit1 had no operator associated with it. This was traced to Obj-List performing a 'like' check instead of exact match check for the deletion, and has been resolved by updating the ValidateDelete activity to do obj-browse instead of obj-list.
SR-D19999 · Issue 488268
Logic updated for displaying email attachments
Resolved in Pega Version 8.4
Once an Email had been sent with attachments, additional attachments could be added to the work object at a later time and would show up when the work object was opened as if they had been part of the original transmission of the message. This was traced to the logic not accounting for for the state of the data-corr-email object and showing all the work object attachments as sent as part of the email irrespective of when the attachment was added. To resolve this, the system has been updated to save all the attachment keys that are sent as part of the email on the data-corr-email instance and use that property while retrieving the list of attachments sent on the email. If the attachment is deleted, no hyperlink will be shown but instead a message on hover on the attachment memo will note that the attachment was deleted and not available for download.