Changelog

Diese Seite zeigt alle Änderungen, die in den Releases der einzelnen Versionen enthalten sind.

Für Administratoren und Developer gibt es separate Changelogs (Administrations-Changelog und Developer-Changelog). Diese sind eine Teilmenge dieses Changelogs, mit Einträgen, die nur für diese Personen relevant sind.

Für manche Versionen ist ein Update einzelner Systemkomponenten (Karaf, OpenSearch) oder anderer Bestandteile nötig. Im Update-Guide ist beschrieben, wie diese aktualisiert werden können.

Erläuterungen zum Changelog

Innerhalb jeder Version sind Änderungen nach verschiedenen Kategorien gruppiert:

  • Breaking Changes
    Änderungen, die ein bestehendes Verhalten von Funktionen ändern oder die möglicherweise zusätzliche Arbeiten beim Aktualisieren des BPCs nach sich ziehen.

    Lesen Sie die Hinweise am Breaking Change aufmerksam.

    Einträge dieser Kategorie tauchen ggf. erneut in einer der anderen Kategorien auf.

  • Empfohlene Anpassungen
    Handlungsanweisungen für das BPC Update sowie die Konsequenzen beim Befolgen oder Unterlassen der Anweisungen.

    Einträge dieser Kategorie tauchen ggf. erneut in einer der anderen Kategorien auf.

  • Neue Funktionen
    Funktionen, die mit dieser Version neu hinzugekommen sind.

  • Verbesserungen
    Verbesserungen an bestehenden Funktionen.

  • Security
    Änderungen, die potenzielle IT-Security-Risiken im BPC beheben oder das Sicherheitsniveau weiter anheben.

  • Bugs
    Behebungen von Fehlern verschiedenster Art.

  • Dokumentation
    Änderungen oder Erweiterungen der Produktdokumentation.

  • Dependency Updates
    Änderungen an intern genutzten Komponenten aus externen Quellen.

  • Sonstiges
    Änderungen, die keiner anderen Kategorie zugeordnet sind.

Zur Erklärung der Versionsnummerierung siehe Erläuterung zur Versionierung.

BPC 4.1.28

Release date: 2026-01-16

The following components must be updated with this update: BPC modules | Karaf

New features

Improvements

  • Unser Karaf startet über 10mal langsamer als ein Vanilla Karaf BPC-9395

    Affects: Karaf |

  • Correct display of the checkbox in bpcCheckColumn for On/Off values BPC-10224

    Affects: BPC Core |

  • Replikation repliziert keine Sätze wenn in initialer Tabelle nur Sätze aus der Zukunft sind BPC-10318

    Affects: BPC Core |

Bugs

  • Einstellbare Monitor-Export Limits unklar und werden beim Export ignoriert BPC-9840

    The configured limit (max. number of records) for XLSX is now taken into account again during data export in the monitor. For CSV and JSON, a limit can now also be configured in the export mask. There is only an upper limit for XLSX, not for other file formats.
    See also Konfiguration des Monitor-Daten-Exports
    Export von Prozessen

  • Module type displayField / displayValue gibts nicht, Instanzen können nicht angelegt werden BPC-10005

    For GUI modules that offer types, components with types can once again be created. Translations for the designation of a type no longer require a "CORE_" prefix. The schema for the translation keys is "<MODULID>_INSTANCE_TYPE_<VALUE>".

    Affects: BPC Core |

  • Fehler im Data Analysis Datensatz Modifikator BPC-10246

    Affects: BPC Core | Data Analysis |

  • Applikationsbereich mit ViewMode Tabbed zeigt Navigtionsleiste an BPC-10374

    Affects: BPC Core |

  • API Keys Editor Änderungen lassen sich nicht speichern BPC-10415

    Affects: BPC Core |

Documentation

Dependency Updates

  • Update com.networknt:json-schema-validator BPC-10237

    Affects: BPC Core | Forms |

  • Update froala-editor BPC-10330

    Affects: BPC Core |

  • Update org.quartz-scheduler:quartz BPC-10357

    Affects: BPC Core |

  • Update apache-poi monorepo BPC-10359

    Affects: Process Monitoring |

  • Update ace-builds BPC-10361

    Affects: BPC Core |

  • Update dompurify BPC-10394

    Affects: BPC Core | Forms |

  • Update org.json:json BPC-10461

    Affects: BPC Core |

  • Update nl.jqno.equalsverifier:equalsverifier BPC-10469

    Affects: OpenSearch |

  • Update de.virtimo.bpc:nimbusLib BPC-10500

    Affects: BPC Core |

  • Update ace-diff BPC-10501

    Affects: BPC Core |

  • Update @vaadin/avatar BPC-10502

    Affects: BPC Core |

BPC 4.1.27

Release date: 2025-11-17

The following components must be updated with this update: BPC modules | Karaf | Java

Improvements

  • BPC Log Index CleanUp: Nach Start des Karaf läuft die erste Säuberung erst nach 60 Minuten. BPC-10168

    Index cleanups are performed 60 seconds after BPC starts, and then run at the configured interval.

    Affects: BPC Core |

  • 0 Label für CustomRenderer im Monitor BPC-10170

    It is now possible to use the value 0 in the valueMap of a custom renderer and to see it as a label in the monitor. Previously, values of 0 were not displayed.

    Affects: Process Monitoring |

  • Better testability of comboboxes BPC-10196

    The values of the different options in combo boxes are now no longer generally supplemented with a &nbsp;. This makes automated testing of the interfaces easier.

    Affects: BPC Core |

  • Beim deinstallieren von Bundles kommt es zu Exceptions BPC-10228

    Affects: BPC Core |

Security

  • mssql-jdbc:12.6.1 | CVE-2025-59250 BPC-10266

    The driver provided via pax-jdbc-mssql is no longer delivered.

    Please ensure that the MSSQL driver used has at least one of the following versions: 10.2.4, 11.2.4, 12.2.1, 12.6.5, 12.8.2, 12.10.2, 13.2.1

    If an older driver is being used, it should be replaced. Remove the old driver by deleting it from the deploy directory or by uninstalling pax-jdbc-mssql or the driver itself. Then install a current driver (without the pax-jdbc-mssql feature). See also: Databases

    Affects: Dokumentation | Karaf |

Bugs

  • Prozessstarter mit Parametern "startWithContext" und "hidden" auf true lädt den falschen Prozess BPC-10261

    A bug was fixed where an incorrect process starter was displayed when exactly two process starters were configured, one of which is hidden.

    Affects: Process Monitoring |

  • Opensearch Exception, wenn bpcCheckColumn einen anderen Typ als boolean hat BPC-9662

  • Going to use the local/Karaf IDP as fallback not working BPC-9837

    If the configured identity provider is not reachable, it is no longer incorrectly logged that the local Karaf identity provider has been selected as a fallback. Instead, it is indicated that this could be enabled as a fallback.

    Affects: BPC Core | Dokumentation |

  • UI: bpcModuleInstanceSelector - Modulkonfigurations-Routing fehlerhaft für BackendConnection BPC-9975

    Affects: BPC Core |

  • Issue URL: https://virtimo.atlassian.net/browse/BPC-10007 BPC-10007

    Buttons that discard local changes now have a better text description.

    Affects: BPC Core |

  • Keycloak: Geänderte "GET /groups" API Request ab Version 26+ BPC-10149

    Ein Fehler wurde behoben, dass der Endpunkt GET /cxf/bpc-core/im/organisations nicht mehr KeyCloak-Gruppen listet, die als Untergruppen definiert sind. Grund war eine Änderung im Verhalten von KeyCloak ab Version > 26.

    Affects: BPC Core |

  • bpc.env.sh DE_VIRTIMO_BPC_DECANTER_APPENDER_OPENSEARCH_DELETEENTRIESOLDERTHAN greift nicht BPC-10169

    In the central configuration file (bpc.env.sh), an error in the commented-out option DE_VIRTIMO_BPC_DECANTER_APPENDER_OPENSEARCH_DELETEENTRIESOLDERTHAN was fixed. Previously, activation did not work because the value must be enclosed in quotation marks. The Windows variant was not affected.

    Affects:

  • Replikation erkennt fälschlicherweise eine Endlosschleife BPC-10181

    Affects: BPC Core |

  • Redirect URL beim Logout enthält language Parameter BPC-10201

    A bug was fixed where changing the language in the Keycloak screen had no effect when being redirected from BPC to Keycloak via logout.

    Affects: BPC Core |

  • Statusendpunkt liefert Fehler BPC-10203

    The status endpoint returned a faulty response when incorrectly configured loggers were stored.

    Affects: BPC Core |

Dependency Updates

  • Update Karaf BPC-9960

    With this update, the Karaf version is upgraded to 4.4.8. It is necessary to update the modules bpc-be-core, bpc-be-analysis, bpc-be-forms, and bpc-be-monitor.

    For BPC module developers

    With the updated Karaf, we are delivering CXF 3.6.8 instead of 3.6.7, which provides Jackson in version 2.19.2.

    Please update the CXF version (3.6.8) and Jackson version (2.19.2) in your pom.xml. Check whether you have an Import-Package statement for this version. This must be added or adjusted if you use Jackson features such as the ObjectMapper class.

    <Import-Package>
    ...
    com.fasterxml.jackson.*;version="[2.17.2,3.0.0)",
    ...
    </Import-Package>
  • Update graaljs.version BPC-10206

    Affects: Data Analysis |

  • Update org.quartz-scheduler:quartz BPC-10230

    Affects: BPC Core |

  • Update java BPC-10235

    Affects:

  • Update froala-editor BPC-10238

    Affects: BPC Core |

  • Update @vaadin/avatar BPC-10240

    Affects: BPC Core |

BPC 4.1.26

Release date: 2025-10-13

The following components must be updated with this update: BPC modules

Breaking Changes

You should read the descriptions in this section carefully. It may contain instructions that you must follow for an update.

  • HTTP proxy filters X-APIKey header BPC-10011

    Http calls via an Http-Proxy or Flow connection filter out the BPC Api-Key header (X-APIKey). Attention: This could affect existing BPC configurations, for example if an INUBIT process is triggered that in turn makes calls to the BPC API using the provided API key. (In this case, it would be better to store a fixed BPC API key in the INUBIT process.)

    Affects: BPC Core | Dokumentation |

Improvements

  • Revised dashboard table layout BPC-8672

    The cells in the dashboard’s table layout make better use of their available space and maintain proper spacing from other cells. Errors no longer occur when enlarging or resetting the size of cells.

    Affects: Process Dashboard |

  • Informationen über OpenSearch interne Indices verbergen BPC-8820

    The endpoint /cxf/bpc-core/opensearch/indices/compact does not return any OpenSearch internal indices. These are all indices that are named with a . prefix. Accordingly, these are also no longer filtered in index selectors in the frontend.

    Affects: BPC Core |

  • Komplexe Filter im Tooltip anzeigen und Volltextsuche bei Anzahl Filter berücksichtigen BPC-9193

    A new filter type json has been added, which displays filtered structured data in the column header. See Spalten filtern

  • Replikationseditor: Tooltip bei den "Cron Pattern" Expressions erweitern BPC-9396

    The tooltips for cron patterns in replication have been supplemented with a reference to the Quartz Scheduler documentation.

    Affects: BPC Core | Dokumentation |

  • Boolsche Werte in Einstellungs-Tabelle besser darstellen und setzen BPC-9968

    For boolean values in the settings tables, a combo box is no longer displayed; instead, only the checkbox with the truth value is shown. The value can be changed by clicking, pressing the space bar, or pressing Enter.

    Affects: BPC Core |

  • Klassen für Menu-Buttons für geringeren Pfeil-Abstand BPC-10060

    Buttons can now use the classes arrow-spacing-sm (small) and arrow-spacing-xs (extra small) to reduce the spacing of the arrow.

    Affects:

  • 0 Label für CustomRenderer im Monitor BPC-10170

    It is now possible to use the value 0 in the valueMap of a custom renderer and to see it as a label in the monitor. Previously, values of 0 were not displayed.

    Affects: Process Monitoring |

  • Styling Checkbox / Radiogroup BPC-9917

    For checkboxes and radio groups, the mouse pointer is now displayed in such a way that it is clear the user can change the state by clicking.

    Affects:

  • SETTING_LICENCED_MODULES readonly BPC-9923

    The setting licencedModules can no longer be edited in the frontend. Previously, the setting could be edited, but the value was not applied.

    Affects: BPC Core |

Security

  • HTTP proxy filters X-APIKey header BPC-10011

    Http calls via an Http-Proxy or Flow connection filter out the BPC Api-Key header (X-APIKey). Attention: This could affect existing BPC configurations, for example if an INUBIT process is triggered that in turn makes calls to the BPC API using the provided API key. (In this case, it would be better to store a fixed BPC API key in the INUBIT process.)

    Affects: BPC Core | Dokumentation |

  • Default für filterSessionCookie auf true BPC-9926

    For new backend connections of the type HTTP-Proxy and Flow, the option Filter BPC Session is enabled by default.

    Affects: BPC Core | Dokumentation |

Bugs

  • Replikation in Endlosschleife BPC-10121

    It could happen that replication got stuck in a certain time window if this window bordered on the present and no records were found.

    Affects: BPC Core |

  • Ansichten aus älteren Versionen werden beim Laden als geändert markiert BPC-8564

    Views are correctly marked as changed when the views object contains new values or objects. If there are new columns or added grids in additional tabs, the view is automatically saved for the user, provided the user has permission to save the view. There is a notification indicating whether the save was successful or failed.

    In BPC 5.0.0, unsaved changes occur in views from older versions because the fields in the model have been updated. The views then need to be saved once.

  • Gleichzeitiges Hinzufügen mehrerer Rollen/Organisationen BPC-9659

    A problem was fixed where errors could occur when creating several new users, roles, or permissions at the same time and Karaf was selected as the identity provider.

    Affects: BPC Core |

  • Dashboard Table Layout kaputt, wenn Zeile durch Rowspan entfällt BPC-9730

    The resizing of widgets in the dashboard’s table layout has been improved and susceptibility to errors has been reduced.

    Affects: Process Dashboard |

  • Monitor Export - Auswahl der Ansicht BPC-9970

    Affects: Process Monitoring |

  • JavaScript Modifikatoren können nicht ausgeführt werden BPC-9993

    For existing Karaf installations, add the following value to KARAF/etc/custom.properties:

    # the base value is from config.properties and has been extended
    # by the packages 'jdk.internal.access' and 'jdk.internal.module'
    org.osgi.framework.bootdelegation = \
        com.sun.*, \
        javax.transaction, \
        javax.transaction.xa, \
        javax.xml.crypto, \
        javax.xml.crypto.*, \
        javax.security.cert, \
        jdk.nashorn.*, \
        sun.*, \
        jdk.internal.reflect, \
        jdk.internal.reflect.*, \
        org.apache.karaf.jaas.boot, \
        org.apache.karaf.jaas.boot.principal, \
        jdk.internal.access, \
        jdk.internal.module

    Affects: Data Analysis | Karaf |

  • Custom-Language-Entries werden bei Fallback nicht berücksichtigt BPC-10010

    When retrieving translations (cxf/bpc-core/i18n/translations or in the frontend), user-defined entries of the fallback language are now also taken into account.

    Affects: BPC Core |

  • Fehlender Übersetzungstext im Replikationseditor BPC-10175

    Affects: BPC Core |

Dependency Updates

  • Update graalvm.version BPC-10031

    Affects: Data Analysis |

  • Update com.networknt:json-schema-validator BPC-10032

    Affects: BPC Core |

  • Update org.mariadb.jdbc:mariadb-java-client BPC-10038

    Affects: BPC Core |

  • Update dompurify BPC-10086

    Affects: BPC Core | Forms |

  • Update @vaadin/avatar BPC-10158

    Affects: BPC Core |

BPC 4.1.25

Release date: 2025-08-21

The following components must be updated with this update: BPC modules | Karaf | Java

Improvements

  • version-Property von BPC Modul wirkt sich auf Abhängigkeiten des BE Core aus BPC-8968

    If a BPC module used a different versioning than the BPC core, the project.version property affected the dependencies in the BPC core and caused problems. The dependencies within the BPC core are now no longer influenced by the project.version property in the module.

    Affects: BPC Core | Forms |

  • Darstellung im Monitor-Header BPC-8999

    The readability of large numbers in the number of records has been improved by using thousand separators. The "Remove filter" button now also contains information about the currently applied filters.

    Affects: Process Monitoring |

  • Dashboard Table Layout: Zellen vergrößern BPC-8669

    The moving and resizing of widgets in the dashboard, with the table layout enabled, has been improved.

    Affects: Process Dashboard |

  • Menü innerhalb Dashboard Widget vollständig anzeigen BPC-9682

    Affects: Process Monitoring |

  • Per Default die Gruppierung in den BPC Settings Tabellen aktivieren. BPC-9737

    The option for grouping settings is now initially enabled. It is recommended to use this view, as the settings are displayed together in a common context.

    Affects: BPC Core |

  • Deployment kann nicht durchgeführt werden (wenn Modellversion Quelle kleiner als Ziel) BPC-9741

    Affects: BPC Core |

  • TailSync beachtet das "Relatives Enddatum:" in den meisten Fällen nicht BPC-9780

    Affects: BPC Core |

  • Fehlende Übersetzungen auf der Core Status-Seite ergänzen BPC-9827

  • Images sollen im FileViewer nicht gestreckt werden BPC-9833

    Affects: Process Monitoring |

  • Fehlende Monitor-settings in den Editor aufnehmen BPC-9835

    Affects: Process Monitoring |

  • Falscher Lizenzwert "licenseLists" wird im LicenseGrid angezeigt BPC-9841

    Affects: BPC Core |

  • Zeilenumbruch in Tooltip vom Setting-Panel BPC-9908

    Affects: BPC Core |

  • Sanitize Forms BPC-9918

    The output of the HTML component is sanitized by a sanitizer to remove, for example, script content.

    Affects: Forms |

  • ProzessStarter: "windowWidth" und "windowHeight" für initiales Fenster BPC-9944

    The default window size for Process Starter can now be configured.

  • Tooltips for index operations in the index overview BPC-7878

  • Status change: Automatic preselection of the target status BPC-9816

    For the process status change, it is now possible to configure the preselection of a value. The preselection is controlled via the configuration preselectState in the setting function_changeStateConfig.

    "preselectState": "_first": Always selects the first available value from the dropdown. "preselectState": "<search value>": Selects the first entry that contains the specified text (case-sensitive). Both raw values and display names (from Custom Renderer) can be used.

    If exactly one process is loaded and there are exactly two values to choose from, the status field automatically selects the status that does not correspond to the current status.

    Example configuration

    [
        {
            "dataIndex": "STATUS",
            "useDistinctValues": true,
            "preselectState": "Offen"
        },
        {
            "dataIndex": "VALID",
            "useDistinctValues": true,
            "preselectState": "no"
        },
        {
            "dataIndex": "STATUS2",
            "useRendererValues": true,
            "useDistinctValues": false,
            "preselectState": "_first"
        }
    ]

    Affects: Process Monitoring |

Security

  • Bei den Modul- und Lizenz-Uploads keine Dateinamen mit Pfadangaben annehmen BPC-9362

    Any path specifications are ignored to prevent path traversal attacks.

    Affects: BPC Core |

Bugs

  • Combobox wird nicht richtig dargestellt BPC-9710

    Affects: Forms |

  • Ungünstige Keycloak Konfiguration führt dazu dass das BPC nicht mehr reagiert BPC-9753

    Affects: BPC Core |

  • ProzessStarter: "windowWidth" und "windowHeight" wirken sich nicht vollständig auf Fenster aus BPC-9943

    The ProzessStarter configuration for windowWidth and windowHeight now correctly affects the window.

    Affects: Process Monitoring |

  • gridActionColumn im childGrid zeigt Prozessstarter an BPC-9585

    Affects: Process Monitoring |

  • JSON Daten sollen im Forms Repository nicht automatisch sortiert werden BPC-9603

    The order of properties in JSON forms is preserved.

    Affects: Forms |

  • Replikation stoppt bei Lücken > blockDayRange BPC-9606

    Affects: BPC Core |

  • Datenmodifikator-Editor speichert nicht immer aktuellsten Stand beim Speichern BPC-9613

    Affects: BPC Core |

  • Full-text search with many conditions BPC-9635

    OpenSearch exceptions now also display triggers, if available. A more detailed error message is shown in the monitor grid if full-text search is enabled.

    For limitations when filtering, Komplexe Suche has been added.

  • SetFormState mit Combobox funktioniert nur beim ersten mal BPC-9650

    Affects: Forms |

  • Process Monitor: Manage View does not save changes BPC-9660

    Affects: Process Monitoring |

  • Monitor: Datensatzzähler zeigt bei erreichen von Limit (Monitor_DataViewLimit) nicht >= an. BPC-9664

    Affects: Process Monitoring |

  • Fehlerhafte Bedingung bei Prüfung von childId durch encodeURIComponent BPC-9722

    File downloads are now possible in both parent and child data.

    Affects: Process Monitoring |

  • Deaktivieren des Dashboard Refresh hat keine Auswirkung auf Analysis Widgets BPC-9723

    Affects: Data Analysis |

  • Dashboard zeigt ungespeicherte Änderungen, obwohl nichts gespeichert werden muss BPC-9731

    Affects: Process Dashboard |

  • Frontend: Notification Filter "Nur ungelesene anzeigen" geht für neue nachrichten nicht. BPC-9754

    A bug was fixed where newly arriving notifications were incorrectly hidden by the "Show only unread" filter.

    Affects: BPC Core |

  • Automatisches aktualisieren von Charts setzt Editor-Stand beim schreiben zurück BPC-9757

    Affects: Data Analysis |

  • Replikation hängt in einer Endlosschleife fest BPC-9796

    Affects: BPC Core |

  • Maintenance Modus lässt sich über UI aktivieren aber nicht wieder deaktivieren. Error: "Not allowed to set local server properties" BPC-9799

    If the BPC is operated in a cluster, it was sometimes not possible to deactivate maintenance mode via the GUI.

    Affects: BPC Core |

  • FileViewer ObjectUrl kann nicht erzeugt werden (für PDF und Image) BPC-9831

    Affects: Process Monitoring |

  • Error when closing or resizing displayed images in the monitor detail view BPC-9832

    Affects: Process Monitoring |

  • Tooltip des Sprungs am Module-Link ist immer Deutsch BPC-9902

    Affects: BPC Core |

  • Monitor-Export: keine Übersetzung von MultipleGrids-Titeln in der Export-Auswahl BPC-9903

    Affects: Process Monitoring |

  • Incorrect display of the notification list with a very large number of notifications BPC-9755

    Affects: BPC Core |

  • hasUserAnyRole - Aufruf mit einzelner Rolle als String führt zu Fehler BPC-9784

    Affects: BPC Core |

  • Konfiguration Process Monitoring: Wert von "inubit_proxyId" wird im Editor teilweise nicht angezeigt BPC-9818

    Affects: BPC Core |

Documentation

Dependency Updates

  • Update de.virtimo.bpc:nimbusLib BPC-9764

    Affects: BPC Core |

  • Update CXF BPC-9852

    Affects: BPC Core | Karaf |

  • Update graalvm.version BPC-9873

    Affects: Data Analysis |

  • Update com.networknt:json-schema-validator BPC-9874

    Affects: BPC Core |

  • Update com.nimbusds:oauth2-oidc-sdk BPC-9876

    Affects:

  • Update ace-builds BPC-9882

    Affects: BPC Core |

  • Update froala-editor BPC-9887

    Affects: BPC Core |

  • Update java BPC-9896

    Affects:

  • Update bpc.version BPC-9914

    Affects: BPC Core |

  • Update com.zaxxer:HikariCP BPC-9915

    Affects: BPC Core |

  • Update com.zaxxer:HikariCP BPC-9916

    Affects: BPC Core |

  • Update @vaadin/avatar BPC-9958

    Affects: BPC Core |

Other

  • Update Froala Key BPC-9990

    In the HTML editor, "Expired copy of the Froala Editor" was sometimes displayed.

    Affects: BPC Core |

BPC 4.1.24

Release date: 2025-06-02

The following components must be updated with this update: BPC modules | Java

Improvements

  • Loglevel INFO statt WARN wenn ein aktiver Backup Job auf einen noch nicht angelegten Index verweist BPC-9579

    Affects: BPC Core |

  • Multilanguage im Prozessstarter BPC-9582

  • Behandlung von Primärschlüsseln in der Log Service UI BPC-9599

    The setting of the ID columns in the log service configuration interface is now done via combo boxes. The configuration can only be saved if at least one ID column is defined. Additionally, it is checked whether all ID columns are included in the field configuration. If this is not the case, the form is marked as invalid and saving is prevented.

    Affects: BPC Core |

  • Charts im Analysis Modul an BPC-Sprache anpassen BPC-9626

    Affects: Data Analysis |

  • Forms Backend Exception wegen fehlender JSON Schema Datei BPC-9628

    Affects: Forms |

Security

  • Filter session cookie content from log file BPC-9533

    The logging configuration has been changed so that session tokens are masked. For new installations of Karaf, this happens automatically. For existing installations, please adjust the configuration file [KARAF]/etc/org.ops4j.pax.logging.cfg. Replace the old line

    log4j2.maskpasswords.pattern = %replace{${log4j2.pattern}}{(password=[^\\s,]+)|("password"\\s*:\\s*"\\w+")}{******}

    with the following lines

    # Chained replacement patterns to mask sensitive information
    # Filter out UUIDs as these are used as session cookies (keycloak+oidc)
    log4j2.maskuuids.pattern = %replace{${log4j2.pattern}}{(?i)([a-f0-9]{4})[a-f0-9]{4}(-[a-f0-9]{4}){3}-[a-f0-9]{8}(([a-f0-9]{4}))(?-i)}{$1****-****-****-****-********$3}
    # Filter out JWT Tokens that might contain session ids
    log4j2.maskjwt.pattern = %replace{${log4j2.maskuuids.pattern}}{ey[\\w-]+\\.ey[\\w-]+\\.[\\w-]+}{***(JWT)***}
    log4j2.maskunsecuredjwt.pattern = %replace{${log4j2.maskjwt.pattern}}{ey[\\w-]+\\.ey[\\w-]+\\.}{***(JWT)***}
    # Filter out 256bit (64 hex digits) UUIDs used for karaf session cookies and API keys
    log4j2.maskkarafsessioncookie.pattern = %replace{${log4j2.maskunsecuredjwt.pattern}}{[0-9a-fA-F]{64}}{******}
    # Filter out passwords
    log4j2.maskpasswords.pattern = %replace{${log4j2.maskkarafsessioncookie.pattern}}{(password=[^\\s,]+)|("password"\\s*:\\s*"\\w+")}{******}

    Since with Keycloak and OIDC the session tokens are UUIDs that are also used elsewhere, we log the first and last four characters here.

    Affects: BPC Core | Dokumentation | Karaf |

Bugs

  • Timing Problem mit setData direkt nach setFormConfig BPC-9530

    Affects: Forms |

  • Statuswechsel-Button im Menü immer ausgegraut BPC-9570

    Affects: Process Monitoring |

  • Monitor - FileViewer - Select all - macht nichts BPC-8465

    Affects: Process Monitoring |

  • Tabbed Navigationsleiste: Pfeil für Untermenü passt nicht in den Tab BPC-8833

    Affects: BPC Core |

  • Fehler beim Verarbeiten / Schreiben von FE - Logs BPC-8923

    Affects: BPC Core |

  • requireComment zeigt confirmationText nicht an BPC-8969

    The confirmationText of a process action is now displayed if either requireComment or requireConfirmation is true.

  • PDF kann im Prozessmonitor nicht über INUBIT zum Download und für den Fileviewer angeboten werden BPC-9105

    If binary files were loaded via INUBIT or another backend system, it could happen that the files were corrupted when downloading or viewing them.

    Affects: Process Monitoring |

  • Fehler im Monitor beim Wechseln der Zustände BPC-9187

    A bug was fixed when switching between states in the monitor that affected the tooltip update, which occurred when multiple grids are disabled.

    Affects: Process Monitoring |

  • Monitor-Filter über "X" nicht löschbar, wenn Filter über Klick auf exportierten Link gesetzt sind BPC-9451

    When calling up a monitor via a deeplink including filters, it could happen that these filters were still displayed in the column header even after being removed.

    Affects: Process Monitoring |

  • Falscher Datumsfilter bei exportiertem Monitor-Filter-Link BPC-9452

    A bug was fixed where the date filter in the monitor was not displayed correctly.

    Affects: BPC Core |

  • Deaktivieren des Dashboard Refresh wird nicht berücksichtigt BPC-9481

  • Consideration of different initial states during the migration of the internal configuration BPC-9503

    Affects: BPC Core |

  • Monitor gui_showFilterBar versteckt Filterleiste nicht, wenn deaktiviert BPC-9520

    Affects: Process Monitoring |

  • Error during index migration for the audit log BPC-9543

    Affects: BPC Core |

  • Prozessstarter Window wird hinter Detailview Window angezeigt BPC-9544

    Affects: Process Monitoring |

  • Replikation kann nicht gesichert werden, wenn im Schemanamen Bindestriche verwendet werden. BPC-9566

    When replicating MSSQL tables, schema and table names masked with square brackets and quotation marks, such as [kunde-abc].logging or "kunde-abc".[logging], are now also supported.

    Affects: BPC Core |

  • Darstellung der Buttons in der vertikalen Navbar ist rechtsbündig BPC-9584

    Affects: BPC Core |

  • Fehler bei Änderung von Monitor-Ansichten trotz vorhandener Berechtigung BPC-9620

    A bug was fixed that prevented users from editing a monitor view even though they had the bpcMonitor_editMonitorViews permission and the necessary write access.

    Affects: BPC Core | Dokumentation |

  • Fehlender Name wird als null angezeigt BPC-8758

    The missing first or last name of a user is no longer displayed as "null".

    Affects: BPC Core |

Documentation

Dependency Updates

  • Update apache-poi monorepo BPC-9493

    Affects: Process Monitoring |

  • Update graalvm.version BPC-9521

    Affects: Data Analysis |

  • Update ExtJS BPC-9564

    Affects:

  • Update ExtJS BPC-9591

    Affects: BPC Core |

  • Update ExtJS BPC-9641

    Affects: BPC Core |

  • Update ExtJS BPC-9643

    Affects: BPC Core | Forms |

  • Update ExtJS BPC-9644

    Affects: BPC Core |

  • Update groovy monorepo BPC-9666

    Affects: Data Analysis |

  • Update com.nimbusds:oauth2-oidc-sdk BPC-9669

    Affects:

  • Update @vaadin/avatar BPC-9676

    Affects: BPC Core |

BPC 4.1.23

Release date: 2025-04-08

The following components must be updated with this update: BPC modules

Breaking Changes

You should read the descriptions in this section carefully. It may contain instructions that you must follow for an update.

  • Restriction of the visibility of the gear icon for widget configuration in the dashboard BPC-9087

    Dashboard widgets now only display the configuration icon if the user is allowed to edit the dashboard. For this, they need the bpcDashboard_editDashboard permission. Users without this permission can no longer edit dashboard widgets. If editing options (e.g., for custom widgets) should still be offered, the corresponding permission must either be granted or the configuration must be provided through alternative means (e.g., via the widget header).

    Affects: Process Dashboard |

Improvements

  • In the monitor export, CustomRenderer and the `translate` formatter are applied BPC-9100

    Affects: Process Monitoring |

  • Berücksichtigung aller Renderer in Filter-Auswahlliste BPC-8112

    Affects: Process Monitoring |

  • Anzahl der selektierten Zeilen bei Statusänderungen anzeigen BPC-8673

    Affects: Process Monitoring |

  • Anzeige der Anzahl selektierter Prozesse/Zeilen BPC-8722

    In the setting moduleHeaderContent, the parameter showSelectionCounter in the metablock can be used to control whether the number of selected records is displayed.

    [
        {
          "id": "metadata",
          "config": {
            "showFilter": false,
            "showSorter": false,
            "showSelectionCounter" : true
            }
        }
    ]
  • Forms: Value mit sprachabhängigen Werten, analog zum Label BPC-9085

    Forms now correctly translates the labels for all components, including in the state. This makes it possible to set bindings on labels. See Mehrsprachige Inhalte.

    setFormState can now also handle labels in multiple languages correctly. In this context, a bug was fixed that caused bindings to be removed when using setFormState, so that after setFormState, only data from before setFormState was present in the submit. In addition, all components can now be used in combination with setFormState, including Combobox and Table.

    Affects: Forms |

  • Forms: Verbesserung der Mehrsprachigkeit BPC-9086

    The current language is now stored under /language. The date formats are now handled the same way by the date field and the table and are formatted appropriately for the user depending on the language.

    Affects: Forms |

  • Restriction of the visibility of the gear icon for widget configuration in the dashboard BPC-9087

    Dashboard widgets now only display the configuration icon if the user is allowed to edit the dashboard. For this, they need the bpcDashboard_editDashboard permission. Users without this permission can no longer edit dashboard widgets. If editing options (e.g., for custom widgets) should still be offered, the corresponding permission must either be granted or the configuration must be provided through alternative means (e.g., via the widget header).

    Affects: Process Dashboard |

  • BPC Start-Skript sollte nicht jeweils 30 Sekunden warten (nach OpenSearch Start und nach Karaf Start) BPC-9332

    The start script no longer waits 30 seconds after starting OpenSearch and Karaf. If problems occur where OpenSearch is not available in time, the Watchdog should be used.

    Affects:

  • BPC Start-Skript von Setup-Funktionen trennen BPC-9372

    The start script no longer makes any changes to the environment. Directories must be configured according to the installation instructions, and JAVA_HOME must also be configured correctly.

    Affects:

  • User Experience beim Monitor-Export BPC-9397

    For the period during which the export takes place, a loading animation is now displayed. In addition, error messages are now also shown in the event of an error.

    Affects: Process Monitoring |

  • Adjusted message for monitor widgets without available data in the configured period BPC-9437

  • Refactoring des Monitor Export Fensters BPC-9467

    Affects: Process Monitoring |

  • The bpcComboRenderedValue component now supports `emptyText` BPC-9471

    Affects: BPC Core |

  • Zeilen in den "Navigationseinstellung" einfärben BPC-9486

    In the navigation settings, the rows are now alternately colored differently to improve readability.

    Affects: BPC Core |

  • No longer needed workaround for old Log4J vulnerability removed BPC-9107

    Affects: OpenSearch |

  • Applikationsbereiche sollen nur unterhalb des Root Elements verschoben werden dürfen BPC-9368

    Affects: BPC Core |

  • Upload of modules, license and DB drivers BPC-9369

    The descriptive texts during upload have been adjusted to accommodate the different contents (modules, license, and DB driver).

    Affects: BPC Core |

Bugs

  • ProzessStarter: "windowWidth" und "windowHeight" wirken sich nicht auf Fenster aus BPC-9042

    The ProzessStarter configuration for windowWidth and windowHeight now correctly affects the window.

    Affects: Process Monitoring |

  • Invalid operators for numeric column filters BPC-9082

    The selection of an operator for "number" filters has been restricted to the operator list. The default operator is defined as "=" and, additionally, the default operator can be changed in the filter configuration within the column configuration. See also Konfiguration der Monitor-Spalten

  • Tabbed Navigationsleiste: Pfeil für Untermenü passt nicht in den Tab BPC-8833

    Affects: BPC Core |

  • ProcessStarter table: Fehlermeldung wird abgeschnitten BPC-9039

    The error message for validating the entries in the ProcessStarter table is no longer being truncated.

  • Form-Reset funktioniert nicht korrekt BPC-9143

    The reset function previously removed bindings. As a result, after a reset, the current state could no longer be submitted. This problem has been fixed.

    Affects: Forms |

  • Form components combobox and table BPC-9152

    The components Table and Combobox have been improved and now behave like the other components.

    Affects: Forms |

  • Filterung mit globaler Suche schränkt nicht die möglichen Werte + Anzahlen auf die bereits gefilterten Daten ein BPC-9262

    Affects: Process Monitoring |

  • Recht bpcMonitor_editMonitorViews lässt sich nicht auf einzelne Modul-IDs einschränken BPC-9329

    The right bpcMonitor_editMonitorViews can be set for specific instances to create and modify views in certain monitors by appending the module ID at the end.

  • FE Core: "beautifyContent: me.editor is undefined" BPC-9375

    Affects: BPC Core |

  • Änderung in karaf/etc/de.virtimo.bpc.core.cfg werden zur Laufzeit nicht umgesetzt BPC-9413

    Affects: BPC Core |

  • Correction of spelling in the interface BPC-9438

    Affects: BPC Core |

  • Toolbar Buttons in Statuswechsel Fenster abgeschnitten BPC-9465

    Affects: Process Monitoring |

Documentation

Dependency Updates

  • Update @amcharts/amcharts4 BPC-9411

    Affects: BPC Core |

  • Update @vaadin/avatar BPC-9430

    Affects: BPC Core |

  • Update org.apache.karaf.decanter.version BPC-9454

    Affects: BPC Core |

  • Update ace-builds BPC-9457

    Affects: BPC Core |

BPC 4.1.22

Release date: 2025-03-10

The following components must be updated with this update: BPC modules | OpenSearch | OpenSearch Plugin

You should read the descriptions in this section carefully. These are recommended instructions that are advised during an update.

New features

Improvements

  • Optimized use of OpenSearch to avoid misleading warnings BPC-9175

    In the OpenSearch log, there are many logs such as "QueryGroup _id can’t be null, It should be set before accessing it." This is a known bug in OpenSearch that was introduced with version 2.18.0. We have reduced the output as much as we could from our side.

    Affects: BPC Core |

  • Dark Theme invertiert die Farben der ACE Editoren nicht BPC-9247

  • Default Charts im Analyse Modul kompatibel für das Dark Theme gestalten BPC-9293

    Note: If users already have existing installations of the default instance (BPC Default Reports) in the Analysis Module, it is recommended to set the chart background color to full transparency (RGBA alpha value: 0) under Chart Configuration → Settings → Background Color. This improves visualization when used with the Dark Theme.

    Affects: Data Analysis |

Security

  • net.minidev:json-smart:2.5.1 | CVE-2024-57699 BPC-9313

  • org.bouncycastle:bcprov-jdk18on:1.76 | CVE-2024-30172 BPC-9315

    Affects: Karaf |

Bugs

  • Es werden keine OpenSearch Backups ausgeführt BPC-9334

    Snapshots whose names do not conform to the current naming scheme have blocked the execution of the backups.

    Affects: BPC Core |

  • HTTP Proxy setzt ungültige Header bei Verwendung von HTTP/2 BPC-9337

    If the HTTP proxy used an HTTP/2 connection, the pseudo-header ":status" was forwarded to the client. This leads to an error if interpreted strictly. For example, in this case, nginx reported a 502 Bad Gateway error to the client.

    Affects:

  • View Mode "Tabbed" zeigt Tabs nicht mehr an BPC-9366

    Affects: BPC Core |

  • Plugins - Reihenfolge greift nicht BPC-8299

    Different loading times of plugins led to a deviating order. Now, regardless of loading time, the order from the configuration is maintained.

  • Deployment error BPC-9221

    If a deployment was carried out from a BPC with existing monitor views to a BPC that did not yet have any views, an error occurred.

    This error has been fixed.

    Affects: BPC Core |

  • Instanzspezifisches Recht zum Editieren von HTML Content BPC-9365

    A bug was fixed that prevented instance-specific HTML content editing rights from being granted via the role htmlcontent_editor_<MODULE-ID>.

    Affects: BPC Core |

  • Träge Navigation bei geschachtelten Modulen BPC-9402

    If an element with sub-elements was created in the navigation, short pauses could occur in the application if a sub-element pointed to the same module as the element above it.

    Affects: BPC Core |

Dependency Updates

BPC 4.1.21

Release date: 2025-02-10

The following components must be updated with this update: BPC modules | Karaf | Java

You should read the descriptions in this section carefully. These are recommended instructions that are advised during an update.

  • Aktualisierung der TLS Härtung BPC-9256

    For the hardening of the TLS settings, properties were set in custom.java.security.

    If you are not yet using a custom.java.security file via Zentrale Konfigurationsdatei, you should do so.

    Existing custom.java.security files should be supplemented with the following entry:

    jdk.tls.disabledAlgorithms=X448, secp521r1, SHA1, include jdk.disabled.namedCurves

    Affects:

  • Custom Java Security Einstellungen via bpc.env für OpenSearch BPC-9259

    The bpc.env files now also set the security.properties for OpenSearch from the custom.java.security file. As a result, changes in the file affect both Karaf and OpenSearch.

    When using a bpc.env, it is recommended to update it. If not already present, the file custom.java.security should be added. The following must be added for this purpose.

    bpc.env.sh
    export OPENSEARCH_JAVA_OPTS="$OPENSEARCH_JAVA_OPTS -Djava.security.properties=../custom.java.security"
    bpc.env.cmd
    SET OPENSEARCH_JAVA_OPTS=%OPENSEARCH_JAVA_OPTS% -Djava.security.properties=..\\custom.java.security

    Affects: Dokumentation |

Improvements

  • Monitor Data Filter logische UND Verknüpfung zwischen Organisationen, Rollen, …​ BPC-6456

    The "Data Filter Operator" setting can now be used to configure how different data filters (for organizations, roles, permissions, or users) are linked together.

    With OR (default), all data that meets any of the filter settings is displayed. With AND, only data that meets all filter settings is displayed.

  • JVM security.properties BPC-8185

    The JVM security.properties can now be set (e.g. DNS cache TTL for cloud environments, see link). To do this, the entry in bpc.env.sh/bpc.env.cmd must be entered as follows:

    • Linux (bpc.env.sh)

     export EXTRA_JAVA_OPTS="-Djava.security.properties=../custom.java.security"

    • Windows (bpc.env.cmd)

     SET EXTRA_JAVA_OPTS=-Djava.security.properties=..\custom.java.security

    In addition, the custom.java.security file must be downloaded. You can find the file in the download-area Download - Virtimo Fileserver.

    More information under: Zentrale Konfigurationsdatei

    Affects: BPC Core | Dokumentation | Karaf |

  • Statische Settings BPC-8614

    With the BPC license, settings can now be protected from modification. This will primarily be used in our cloud installations (K8s). For example, we use the core setting 'backupRepository' to define the configuration of OpenSearch backups in an Amazon S3 bucket, and this should not be changeable via the BPC frontend.

    To achieve this, the XML can be extended with the list element NON_WRITEABLE_SETTINGS containing the IDs of the non-editable settings when creating the license.

    Excerpt from a sample license:

    <?xml version="1.0" encoding="UTF-8" ?>
    <license>
        <bpc>
            <licenseKeys>
            ...
            </licenseKeys>
            <licenseMaps>
            ...
            </licenseMaps>
            <licenseLists>
                <NON_WRITEABLE_SETTINGS>
                    <_core_noinstance_backupRepository/>
                    <_core_noinstance_identityProviderBackendConnection/>
                </NON_WRITEABLE_SETTINGS>
            </licenseLists>
        </bpc>
    </license>

    The settings (example: _core_noinstance_backupRepository) are the same as those used in the OpenSearch index 'bpc-configuration'.

    The structure is as follows: <ModuleId>_<InstanceId>_<SettingName>

    If it is a setting of a module and not of an instance/component, then the value noinstance is to be used for <InstanceId>. You can find the <SettingName> by displaying the "ID" column in the settings grid in the BPC frontend.

    Example: _core_noinstance_backupRepository

    • <ModuleId> = _core

    • <InstanceId> = noinstance

    • <SettingName> = backupRepository

    Affects: BPC Core |

  • Anzahl der Shards von neu anzulegenden OpenSearch Indices reduzieren BPC-9049

    We have reduced the number of shards in the Core_IndexTemplates setting to 1. This is also the default setting that Elasticsearch/OpenSearch has been using for new indexes for a few years. This only affects newly created indices. Indices that have already been created are not affected.

    Affects: BPC Core |

  • Reduktion der Zugriffe auf die OpenSearch Backup-API BPC-9189

    By optimizing access to the OpenSearch Backup API, fewer accesses to the data storage are performed. This reduces the corresponding costs, for example, when using Amazon S3.

    Affects: BPC Core | OpenSearch |

  • dedizierte Oberfläche für die Konfiguration des Analysis Modul BPC-9202

    The interface for configuring and creating analysis components has been standardized.

    Affects: Data Analysis |

  • JSON Daten sollen nicht automatisch sortiert werden BPC-9227

    When saving JSON settings, attributes within objects were automatically sorted. This behavior has been disabled. This makes it possible to arrange the order according to your own criteria.

    Affects: BPC Core |

  • font-family als CSS Variable bereitstellen. BPC-9232

    The currently set font can be read out via the CSS variable --font-family.

    Affects:

  • Custom Java Security Einstellungen via bpc.env für OpenSearch BPC-9259

    The bpc.env files now also set the security.properties for OpenSearch from the custom.java.security file. As a result, changes in the file affect both Karaf and OpenSearch.

    When using a bpc.env, it is recommended to update it. If not already present, the file custom.java.security should be added. The following must be added for this purpose.

    bpc.env.sh
    export OPENSEARCH_JAVA_OPTS="$OPENSEARCH_JAVA_OPTS -Djava.security.properties=../custom.java.security"
    bpc.env.cmd
    SET OPENSEARCH_JAVA_OPTS=%OPENSEARCH_JAVA_OPTS% -Djava.security.properties=..\\custom.java.security

    Affects: Dokumentation |

  • The BPC license filename should allow an additional .virtimo file extension for joining BPC & inubit licenses. BPC-7813

    The file name of the license can now also be license.xml.virtimo. Previously, it had to be license.xml.bpc. This makes it possible to use a license that is also a valid INUBIT license file at the same time.

    Affects: BPC Core |

  • Generierung des Config-JSON für das BPC Frontend beschleunigen BPC-9263

    The loading of the BPC configuration in the client is accelerated by the change.

Security

  • org.apache.cxf:cxf-core:3.5.9 | CVE-2025-23184 BPC-9251

  • Aktualisierung der TLS Härtung BPC-9256

    For the hardening of the TLS settings, properties were set in custom.java.security.

    If you are not yet using a custom.java.security file via Zentrale Konfigurationsdatei, you should do so.

    Existing custom.java.security files should be supplemented with the following entry:

    jdk.tls.disabledAlgorithms=X448, secp521r1, SHA1, include jdk.disabled.namedCurves

    Affects:

  • jetty-server:9.4.54.v20240208 Affected By: CVE-2024-13009 (NVD) BPC-9607

Bugs

  • Data_Filter: Keine Platzhalter-Ersetzung bei roles und Verwendung von "#" BPC-9110

    The placeholder #user.loginName# is now correctly replaced in the Data_Filter when the dynamic filter # is used.

    Affects: Process Monitoring |

  • Umgang mit mehreren Session Cookies BPC-9164

    If the client sends multiple session cookies because several BPCs may be installed on the server, the appropriate session cookie is now taken into account.

    Affects: BPC Core |

  • Detail View Update Problem BPC-9252

    In cases with frequent changes to the data, errors could occur in the monitor when displaying detail views. As a result, the entire rendering of the application was disrupted and the page had to be manually reloaded.

    Affects: Process Monitoring |

  • Monitorfilter-Felder sind plötzlich mit der Headerfarbe hinterlegt BPC-9253

    Filters at the column header of the monitor are now displayed correctly again.

    Affects: Process Monitoring |

  • Modul Upload führt zu OOM Exception BPC-9266

    Uploaded files are no longer kept entirely in memory. This reduces memory usage and prevents "OutOfMemoryException".

    Affects: BPC Core |

Documentation

Dependency Updates

  • Update dompurify BPC-9206

    Affects: Forms |

  • Update com.networknt:json-schema-validator BPC-9236

    Affects: BPC Core |

  • Update org.postgresql:postgresql BPC-9237

    Affects: BPC Core |

  • Update de.virtimo.bpc:nimbusLib BPC-9239

    Affects: BPC Core |

  • Update Java BPC-9260

    Affects:

  • Update Karaf, CXF und Jackson BPC-9264

    We used CXF version 3.5.4 in our previous Karaf releases. This CXF version provides Jackson in version 2.14.3. Now we ship Karaf with CXF 3.6.5, which provides Jackson in the version 2.17.2.

    Please update the CXF version (3.6.5) in your pom.xml. And more important is to update also the used Jackson version (2.17.2). For this check if you have an Import-Package statement for it. This must be added or adjusted when you use Jackson functionality like the ObjectMapper class.

    Replace

    <Import-Package>
    ...
    com.fasterxml.jackson.*;version="[2.13.4,2.15.0)",
    ...
    </Import-Package>

    with

    <Import-Package>
    ...
    com.fasterxml.jackson.*;version="[2.17.2,3.0.0)",
    ...
    </Import-Package>
  • Update ExtJS BPC-9270

    Affects: Data Analysis |

  • Update ExtJS BPC-9272

    Affects: Process Monitoring |

  • Update ExtJS BPC-9278

    Affects: BPC Core |

  • Update ExtJS BPC-9299

    Affects: BPC Core |

BPC 4.1.20

Release date: 2025-01-13

The following components must be updated with this update: BPC modules | OpenSearch | OpenSearch Plugin

You should read the descriptions in this section carefully. These are recommended instructions that are advised during an update.

New features

  • Websocket Nachrichten bei Änderung am Frontend-Log Index BPC-8295

    New data in the "Frontend Log Monitor" monitor is now displayed directly or loaded subsequently.

    Affects: BPC Core |

Improvements

  • Reduced log level BPC-8660

    The log level for the BPC plugin in OpenSearch has been reduced from trace to info. This setting can be found in the file opensearch/config/log4j2.properties.

    Affects: OpenSearch |

  • Refresh-Event für Plugin-Hooks BPC-8963

    Modules can now send updates to the plugins loaded there via their hooks. See also: BPC Plugins entwickeln

  • Grid Header Filter besser gestalten BPC-8983

    Affects: Process Monitoring |

  • Angepasste IGUASU HTTP Header berücksichtigen BPC-9148

    Affects: BPC Core |

  • Filter für DeepLinks via Log Service generischer gestalten BPC-9159

    The LogService API for generating deep links to monitors can now handle various query parameters to set appropriate filters in the monitor.

    Affects: BPC Core |

  • Auditlog API - Endpunkt für den Sprung in den Auditlog Monitor BPC-9160

    A deeplink to the audit log monitor can be retrieved via the Auditlog API.

    Affects: BPC Core | Dokumentation |

  • Commit-Datum anstatt Build-Datum in Bundle Info BPC-9174

    In the bundle info, which can be accessed via the Karaf console, the time of the last change to the underlying source code is now displayed instead of the build time.

  • Forms innerhalb der Detailansicht im Monitor erhält aktualisierte Daten BPC-9199

    Forms in the detail view now receive changed data when the monitor reloads. To suppress this behavior—because the changes to the data may not be relevant for the form—the option ignoreUpdates can be set on the form in the detail configuration. See also: Konfiguration der Monitor-Detailansichten

Security

  • ClientSessionManagerImpl logt die sessionId BPC-8986

    Affects: BPC Core |

Bugs

  • Hinzufügen eines neuen DataModifier schließt das Browserfenster BPC-9184

    Affects: Data Analysis |

  • PDF kann in der Monitor Detailansicht nicht angezeigt werden BPC-9104

    Affects: Process Monitoring |

Documentation

  • Mögliche IGUASU HTTP Header BPC-9195

    AuditLog and LogService API documentation supplemented. See: BPC API

    Affects: BPC Core | Dokumentation |

  • Documentation of the query parameters for opening monitors BPC-9196

    The possible query parameters for the AuditLog and LogService API for opening a monitor via deeplink have been added to the documentation.

    See BPC API

    Affects: BPC Core | Dokumentation |

  • Beispiele für parametersEndpoint des ProcessStarter BPC-7117

    Affects: Dokumentation |

Dependency Updates

BPC 4.1.19

Release date: 2024-12-16

The following components must be updated with this update: BPC modules | OpenSearch Plugin

New features

  • Aktualisierung der Einstellungen für IGUASU Instanztyp in Flow BPC-8863

    From IGUASU version 3.0.6, it is possible to jump directly from the BPC Flow Processor overview to the IGUASU processor. “Frontend URL” and “System ID” are now available in the Flow Manager. “URL” has been renamed to “Service URL.” Username and password are no longer required. Long descriptions of the processors are displayed in a shortened form, with the full text shown in the tooltip.

    Affects: BPC Core |

  • Exportfunktion für Diagramme BPC-9101

    For some chart types, it is now possible to enable an export function.

Improvements

  • Bundle-SymbolicName müssen ohne Parameter wie "blueprint.aries.xml-validation:=false" gesetzt sein BPC-8482

    Module developers must ensure that no additional parameters are specified in the Bundle-SymbolicName.

    Incorrect: de.virtimo.bpc.module-id;blueprint.aries.xml-validation:=false

    Correct: de.virtimo.bpc.module-id

    The incorrect variant was included in earlier templates for BPC modules.

    Affects: BPC Core | Forms |

  • Auswahl der Datenbank-Treiber auf die Verwendbaren eingeschränkt BPC-8796

    Affects: BPC Core |

  • Einheitliches Verhalten der Parameter validateOnBlur und validateOnChange BPC-8823

    The behavior of validateOnChange has been adjusted so that validation is now only triggered when the user shifts focus elsewhere.

    Affects: Dokumentation | Forms |

  • OpenSearch Einstellung zum verschieben von Shards auf andere Nodes bei geringem Plattenplatz BPC-9011

    If the available disk space falls below defined thresholds, shards are redistributed to other nodes. It can also happen that indices are set to read-only to prevent the disk from filling up.

    The value of cluster.routing.allocation.disk.threshold_enabled is now true. This corresponds to the OpenSearch default value.

    Affects: OpenSearch |

  • Unpassende Stylings für dunkle Themes BPC-9061

    Affects: BPC Core |

  • IGUASU spezifische Header Information mappen BPC-9070

    If the HTTP headers system.id and instance.id are set, the values are written into a new JSON object externalReference under the fields iguasuSystemId and iguasuInstanceId.

    Affects: BPC Core |

  • Forms action setProperty BPC-9120

    The function setProperty - Setzen des Wertes einer Variable is now available.

    Affects: Dokumentation | Forms |

  • Felder mit dem Typ "object" und "flat_object" sollen durch die Standardkonfiguration im Monitor korrekt dargestellt werden BPC-9144

    Fields that contain nested JSON objects receive "formatter": "jsonStringify" in the initial column configuration. This converts the contents into text and displays them in the monitor.

    Affects: Process Monitoring |

  • JSON Stringify Formatter BPC-9146

    This allows it to be easily used in various places to convert JSON into text.

    Example as a formatter in a column configuration
    {
        "formatter": "jsonStringify",
        "dataIndex": "aFieldWithJsonValue",
        "text": "JSON Value as String"
    }
    Example in an XTemplate in a column configuration
    {
        "xtype": "templatecolumn",
        "tpl": "{aFieldWithJsonValue:jsonStringify}",
        "text": "JSON Value as String"
    }

    Affects: BPC Core |

  • Monitor Editor: Rechtschreibfehler im Tooltip Text beheben (+ Dokumentation) BPC-9121

Security

  • DOMPurify:2.4.0 | CVE-2024-45801 BPC-8899

Bugs

  • Print im iFrame Kontext nicht möglich BPC-8417

    The print dialog can now be triggered externally.

    Affects: Dokumentation | Forms |

  • Neu Verteilung von Replikationen im Cluster wird nicht immer ausgelöst BPC-8504

    A bug was fixed that caused individual replication jobs not to be correctly distributed across all available nodes when changes were made to the nodes in the BPC cluster.

    Affects: OpenSearch |

  • A service URL and frontend URL must always be configured in Flow. BPC-8729

    Both URL configurations must be filled in to enable the jump to the processor (e.g., in IGUASU)

  • Password für IGUASU Verbindungen muss optional sein BPC-8731

  • OpenSearch kann nicht per HTTP angesprochen werden BPC-8800

    Although the OpenSearch connection was configured with http, an attempt was made to establish the TLS context based on the configuration. However, if this configuration was incorrect, an error occurred.

    The configuration is now ignored, as it is not relevant for http connections.

    Nevertheless, it is recommended to use secure connections at this point.

    Affects: BPC Core |

  • Leere Applikationsbereiche in der Navigation als inaktive Elemente anzeigen BPC-8907

    An application area can now only be switched if it is not empty and the user has permission to view the contents of the application area.

    Affects: BPC Core |

  • Wert der HTML Komponente kann nur über data-binding gesetzt werden BPC-8910

    It is now possible again to use value to set the content of the HTML components.

    Affects: Forms |

  • [Logservice API] DELETE mit parentFilter läuft auf timeout BPC-8911

    Affects: BPC Core |

  • Horizontal navigation toolbar (view mode: tabbed) can be shown and hidden BPC-8938

    Affects: BPC Core |

  • LocalStorage Zugriff verbessern BPC-9027

    A dedicated prefix is now used for the values in LocalStorage. As a result, the contents of other applications are not deleted.

  • Monitor ChildLog Daten werden nicht geladen, wenn die ID des Datensatzes Zeichen wie "/" enthält BPC-9073

    Affects: Process Monitoring |

  • Replikation und Tail Sync sorgen für inkonsistenten Datenbestand BPC-9088

    There were various problems when the time zone of the "last update column" in the database table is set to UTC: - The tail sync did not always delete all records. - Instead, it updated all records on each run. - The interaction with replication also became confused.

    Affects: BPC Core |

  • Frontend JSON Editor lädt bei Moduleinstellungen das falsche JSON Validierungsschema BPC-9091

    Affects: BPC Core |

  • Nicht alle Deployment (JSON Exporte) werden importiert BPC-9098

    If several deployment files were placed in karaf/deploy, not all of them were sometimes processed. The cause was the automatic backup of the existing configuration. The names of the backups are now unique to the millisecond.

    Affects: BPC Core |

  • Beim Organisationswechsel wird die Session des Benutzers am Identity Provider abgemeldet BPC-9118

    Affects: BPC Core |

  • BPC prometheus Metrik bpc_module exportiert falsche Versionsinfos BPC-9119

    Affects: BPC Core |

  • ExtJS ComponentQuery schlägt fehlt, wenn ein Chart mit SpriteLegend eingesetzt wird BPC-9141

    The error in the ExtJS framework was fixed by an override.

    At Sencha, the issue is tracked under EXTJS-29685.

    Affects: BPC Core |

  • DynamicList Filter funktioniert nicht in Verbindung mit Template-Columns BPC-9142

    Affects: Process Monitoring |

  • Validierung des Wertebereichs von Number-Variablen BPC-10117

    Changes to the valid value range have a direct impact on the validation of the default value.

    Affects: Data Analysis |

  • Required und Readonly gebunden an checkboxgroup/radiogroup haben keinen Effekt. BPC-8476

    Affects: Forms |

Documentation

Dependency Updates

  • Update @vaadin/avatar BPC-9052

    Affects: BPC Core |

  • Update org.quartz-scheduler:quartz BPC-9075

    Affects: BPC Core |

  • Update org.mariadb.jdbc:mariadb-java-client BPC-9095

    Affects: BPC Core |

  • Update com.networknt:json-schema-validator BPC-9111

    Affects: BPC Core |

  • Update org.json:json BPC-9139

    Affects: BPC Core |

BPC 4.1.18

Release date: 2024-11-18

The following components must be updated with this update: BPC modules | OpenSearch | OpenSearch Plugin | Java

Update of the internal configuration

In this version there have been changes to the internal configuration of the BPC. This affects deployments between BPCs with different versions. Additional steps are also required when downgrading the BPC.

Further information can be found on the page Versionierung der internen BPC Konfiguration.

You should read the descriptions in this section carefully. These are recommended instructions that are advised during an update.

New features

  • Rückmeldung Prozessstarter und Prozessaktion per Fenster BPC-7057

    The mode for notifications about feedback from process starters and actions can be set in the “Function_ProcessNotificationDisplayMode” (“function_processNotificationDisplayMode”) setting: Toast: Short overlay PopUp: Window that must be confirmed Silent: No visual notification (notification appears in the list when you click on the bell at the top right) See also: Konfiguration des Process Monitorings

    The setting applies to all processes (process starters and actions), but not to status changes. In “Function_ProcessStarterConfig”, the notificationDisplayMode can be changed for individual processes (toast, popup, or silent). (Case sensitivity does not matter) See also: Prozess Starter

  • Dark Theme BPC-6813

    A dark theme is available for the BPC. It can be downloaded from the download page.

    To switch between installed themes, you can use, for example, the plugin Theme Switcher.

Improvements

  • Case sensitivity removed in remote DynamicList filter BPC-8391

    The dynamicList filter with "queryMode": "remote" is now case-insensitive

    Affects: Process Monitoring |

  • Bei der Gruppierung im Process Monitoring sollte eine DESC sortierung der Gruppen möglich sein. BPC-8556

    Via the context menu in the monitor, it is now possible to change the sorting of the grouping.

    Affects: Process Monitoring |

  • ProcessStarter table options: label statt key anzeigen BPC-8591

    Affects: Process Monitoring |

  • Unnötige Fehlerlogs mit MaintenanceModeEnabledException BPC-8784

    Affects: BPC Core |

  • Dashboard Status-Filter sollen persistent sein BPC-8865

    Affects: Process Monitoring |

  • Übersetzungen der Instanztypen auch im bpcPromptWindow anwenden BPC-9021

    Affects: BPC Core |

  • API Dokumentation Status Codes BPC-9037

    The HTTP status codes for responses to the REST API have been documented in greater detail. See: BPC API

    Affects: BPC Core | Dokumentation |

  • Nutzung der Bulk Operationen im OpenSearch über OpenSearchService BPC-9043

    Affects: BPC Core |

  • managed_indices.json automatisch vom Core verarbeiten (Indices anlegen) BPC-9044

    The core now automatically searches for a configuration for indices that are to be created and managed.

    Affects: BPC Core | Dokumentation |

Security

  • froala:4.1.2 | CVE-2023-41592 BPC-9034

Bugs

  • Button UI bei Plugin Buttons im Module Header BPC-8137

    Plugins in the monitor module header were partially displayed with an incorrect colored background.

    Affects: BPC Core |

  • Die linke Leiste im BPC kann über den unteren Pfeil ein-/ausgeklappt werden, aber nicht vollständig ausgeblendet werden. BPC-8488

    Affects: BPC Core |

  • Umgang mit Pfaden in Themes auf verschiedenen Umgebungen BPC-8489

    Paths in themes should now always be specified as absolute.

    Correct: $CompanyIcon: "/bpc-theme-customer/resources/images/favicon.png"

    Incorrect: $CompanyIcon: "../resources/images/favicon.png"

    Affects: BPC Core |

  • Monitor Plugins werden nicht nachträglich geladen bei Monitorwechsel BPC-8628

    Affects: Process Monitoring |

  • Beim Imitieren wird die Sprache des imitierenden Nutzers im imitierten Nutzer gespeichert BPC-8864

    When impersonating other users, the language can no longer be changed in the Keycloak profile of the impersonated user. For this to work, Keycloak must be correctly configured so that impersonator information is passed along via an active scope.

    Affects: BPC Core |

  • Removal of obsolete grid_showHeader configuration BPC-8912

    The configuration grid_showHeader is obsolete as it causes errors. The behavior of the header has been controlled for quite a while using the parameter moduleHeader_enabled.

  • Error log in the client when the user language in Keycloak cannot be updated. BPC-7981

    Affects: BPC Core |

Documentation

Dependency Updates

Other

  • Update Java BPC-9016

    Affects:

BPC 4.1.17

Release date: 2024-10-18

The following components must be updated with this update: BPC modules | Java

New features

  • LocalStorage soll beim BPC Update automatisch verworfen werden BPC-6268

    While loading the BPC, the version number of the Core Common Package (Fe-Core) is determined and stored in the local storage. If this version number differs from the one stored during the previous load, the local storage is cleared.

    Affects: BPC Core |

  • Core Endpunkt zum Versenden von Events bereitstellen BPC-8472

    An endpoint for sending events has been provided See also: Event API

    Affects: BPC Core | Dokumentation |

  • Referenz im Auditlog BPC-8824

    It is now possible to specify references to external resources when writing audit information. For example, it is possible to refer to the IGUASU instance that created the entry.

    Affects: BPC Core | Dokumentation |

Improvements

  • Aktionen im PM, die als target eine Form angegeben haben, sollten nicht im Kontextmenü des PM Grids auftauchen- BPC-8655

    Affects: Process Monitoring |

  • Rahmen am Menu in der Navigation dezenter gestalten BPC-8979

    Affects:

  • Benachrichtigungsanzeige: Zeilenumbruch für "Metadaten"-Zeile BPC-8102

    Affects: BPC Core |

  • Datumsformat Tooltips Charts fix ISO-Format BPC-8825

    Date format setting added. See also Monitor-Widgets für das Dashboard

Bugs

  • Bei ungültiger Suche in Volltextsuche am Monitoren erscheint ein Ladefehler BPC-8101

    Affects: Process Monitoring |

  • TreeView lädt nicht wenn Kommentar vor dem ersten XML knoten steht BPC-8915

    Affects: Process Monitoring |

  • Ace Editor wirft Uncaught Exception BPC-8970

    Affects: BPC Core |

  • Beim Ändern der Sprache im BPC gehen FirstName, LastName und Email im Keycloak (>= 24) verloren BPC-8985

    Affects: BPC Core |

Documentation

  • The navigation of the "Process Monitoring" module is now organized more clearly. BPC-8921

    The large number of subpages has now mostly been divided under "Processes" and "Data View."

    Affects: Dokumentation |

  • Extension of the documentation for multilingualism BPC-8419

    Affects: Dokumentation |

Dependency Updates

  • Update de.virtimo.bpc:nimbusLib BPC-8933

    Affects: BPC Core |

  • Update de.virtimo.bpc:nimbusLib BPC-8978

    Affects: BPC Core |

Other

  • Update Java BPC-8962

    Affects:

BPC 4.1.16

Release date: 2024-09-23

The following components must be updated with this update: BPC modules | OpenSearch Plugin

New features

Improvements

  • Secondary buttons sollten ihren "pressed" Zustand besser darstellen BPC-8627

    Affects:

  • Labels für Instanztypen BPC-8804

    For instance types, labels can be defined using language keys. The language key is composed as follows: "<MODULE_ID>_INSTANCE_TYPE_<INSTANCE_TYPE>" The language key for core modules is composed as follows: "CORE_<MODULE_ID>_INSTANCE_TYPE_<INSTANCE_TYPE>" or, for example: "CORE_BACKENDCONNECTION_INSTANCE_TYPE_HTTP_PROXY": "HTTP Proxy"

    Affects: BPC Core |

  • Log Service: Performance bei Abfrage der Log Daten verbessern BPC-8850

    Affects: BPC Core |

  • Avatar als Benutzermenu BPC-8866

    It is now possible to replace the "User Account Menu" with an avatar. This is a circular display of the user’s initials or, if configured correctly, an image stored with the identity provider. See also User Account Menu

    Affects: BPC Core | Dokumentation |

  • Versionsinformationen als prometheus Metriken BPC-8871

    Affects: BPC Core | Dokumentation |

  • Prometheus Metrik: BPC Status (Gesamtstatus aller BPC Module) BPC-8904

    Affects: BPC Core | Dokumentation |

  • Logservice API : Löschen von Child Einträgen per childQuery bzw. childFilter BPC-8905

    Affects: BPC Core | Dokumentation |

  • HTML Content Modul - Schreibrechte je Instanz vergeben BPC-8699

    For the HTML Content module, instance-specific roles can now be assigned for editing: htmlcontent_editor_<MODUL_ID> See also: HTML Content Modul (Benutzerdefinierte Inhalte)

    Affects: BPC Core | Dokumentation |

Security

  • dompurify | CVE-2024-45801 BPC-8895

Bugs

  • [Logservice API] DELETE mit parentFilter läuft auf timeout BPC-8794

    Affects: BPC Core |

  • OpenSearch Indices werden nicht immer BPC konform angelegt BPC-8848

    Affects: BPC Core |

  • Opensearch: BpcPlugin - ConcurrentModificationException BPC-8852

    Affects: OpenSearch |

  • Probleme beim Vergleichen von unbekannten Settings BPC-8889

    Affects: BPC Core |

Documentation

Dependency Updates

  • Update dompurify BPC-8603

    Affects: BPC Core |

  • Update ExtJS BPC-8855

    Affects:

  • Update ExtJS BPC-8857

    Affects: BPC Core |

  • Update ExtJS BPC-8868

    Affects: BPC Core |

  • Update ExtJS BPC-8902

    Affects: BPC Core |

BPC 4.1.15

Release date: 2024-08-26

The following components must be updated with this update: BPC modules | Karaf | OpenSearch

Improvements

  • Karaf Cluster legt unter Umständen unseren Configuration Index mehrfach an -> BPC nicht aufrufbar BPC-8764

    Affects: BPC Core |

  • Custom JAAS Login Module: SessionToken Interface in die API verschieben BPC-8830

    Affects: BPC Core |

Security

Bugs

  • cascadingDynamicListFilter zeigt leere Werte BPC-8389

    Fixed: An error where the list of available filters was displayed as empty even though a selection should have been available.

    Affects: Process Monitoring |

  • Monitor-Ansichten berücksichtigen Gruppierung nicht korrekt BPC-8393

    Affects: Process Monitoring |

  • In der Tab-Leiste wird eine Buttons-Componente gerendert, die eine feste Breite hat BPC-8500

    Affects: BPC Core |

  • Änderungen an Backupkonfiguration werden nicht übernommen BPC-8612

    Affects: BPC Core |

  • Karaf Start: Jetty RewriteHandler kann nicht registriert werden BPC-8719

  • Jackson kann Java 8 date/time type nicht serialisieren BPC-8720

    Affects: BPC Core |

  • Änderung des globalen Datumsformat führt zu Fehlverhalten BPC-8744

    Affects: BPC Core |

  • Frontend Fehler: "BPC Konfiguration konnte nicht geladen werden." BPC-8769

    Affects: Process Monitoring |

Documentation

Dependency Updates

BPC 4.1.14

Release date: 2024-07-02

The following components must be updated with this update: BPC modules

New features

  • Dashboard Table Layout Option BPC-5919

    The Process Dashboard has a new layout setting that allows you to switch between a column and table layout.

    Affects: Process Dashboard |

Improvements

  • Neuanmeldung bei IP Pinning Problemen ermöglichen BPC-8179

    If an IP pinning error occurs, you can now log in normally in the browser after reloading the page. The error will not be displayed again (unless the IP changes again).

    Affects: BPC Core |

  • Split View automatisch beim öffnen des Process Monitoring anzeigen. BPC-8555

    Split View in Process Monitoring can now be displayed automatically when opened by setting DetailView_EastInitialShow to true. (DetailView_East must also be true) Konfiguration des Process Monitorings

  • Organisationswechsel soll Landingpage Konfiguration berücksichtigen BPC-8634

    When switching organizations, you can now configure that the user lands on their homepage instead of staying on the current page.

    Affects: BPC Core | Dokumentation |

Security

  • index.jsp wird auch als nicht verarbeitete HTML Seite ausgeliefert BPC-8646

    Affects: BPC Core |

Bugs

  • Fehlender bpc-storage-monitor-views Index führt zum Problem an verschiedenen Stellen BPC-8128

    The Storage API now returns an empty result set when requesting content for stores that have not yet been created.

    See also: Storage API

    Affects: BPC Core | Dokumentation |

  • Anzahl der Sortierungen zeigt immer 0 an BPC-8624

    Affects: Process Monitoring |

  • Organisationswechsel Plugin zeigt keine Organisationen an BPC-8633

    In the selection list for organization change, it is now possible to set that already active organizations are displayed as deactivated elements.

    Affects: BPC Core | Dokumentation |

  • Directly after creating a monitor, the INUBIT Proxy cannot be selected BPC-8639

  • Custom Fields Attribute in Settings kommen ins Frontend BPC-8653

    Affects: BPC Core |

  • BPC Frontend Modul Einstellungen-Grid aktualisiert sich nicht mehr automatisch BPC-8666

    Affects: BPC Core |

  • Dashboard: Trennlinie/Bereich der Tabs sichtbar, auch wenn keine Tabs angezeigt werden BPC-8502

    Affects: Process Monitoring |

Documentation

  • Log Service Doku: OpenSearch Einstellungen haben falsche Namen BPC-8647

    Corrected names of configuration parameters in Log Service.

    Affects: Dokumentation |

BPC 4.1.13

Release date: 2024-06-04

The following components must be updated with this update: BPC modules

Breaking Changes

You should read the descriptions in this section carefully. It may contain instructions that you must follow for an update.

  • Maximum memory for Karaf is configured differently BPC-8542

    In current Karaf versions, Karaf-specific environment variables for setting JVM memory have been removed and must be replaced with an alternative.

    Linux

    Please replace in bpc.env.sh

    # Karaf
    export JAVA_MIN_MEM=128M
    export JAVA_MAX_MEM=512M

    with

    # Karaf
    export EXTRA_JAVA_OPTS="$EXTRA_JAVA_OPTS -Xms128m -Xmx512m"

    and adopt the values accordingly.

    Windows

    Please replace in bpc.env.cmd

    rem *** Karaf ***
    SET JAVA_MIN_MEM=128M
    SET JAVA_MAX_MEM=512M

    with

    rem *** Karaf ***
    SET EXTRA_JAVA_OPTS=%EXTRA_JAVA_OPTS% -Xms128m -Xmx512m

    and adopt the values accordingly.

    Affects: Dokumentation |

Improvements

  • Improved arrangement of icon and arrow for submenu in navigation bar BPC-8084

    When the navigation bar is collapsed, the icon no longer shifts to the left if there is a submenu.

    Affects: BPC Core |

  • Maximum memory for Karaf is configured differently BPC-8542

    In current Karaf versions, Karaf-specific environment variables for setting JVM memory have been removed and must be replaced with an alternative.

    Linux

    Please replace in bpc.env.sh

    # Karaf
    export JAVA_MIN_MEM=128M
    export JAVA_MAX_MEM=512M

    with

    # Karaf
    export EXTRA_JAVA_OPTS="$EXTRA_JAVA_OPTS -Xms128m -Xmx512m"

    and adopt the values accordingly.

    Windows

    Please replace in bpc.env.cmd

    rem *** Karaf ***
    SET JAVA_MIN_MEM=128M
    SET JAVA_MAX_MEM=512M

    with

    rem *** Karaf ***
    SET EXTRA_JAVA_OPTS=%EXTRA_JAVA_OPTS% -Xms128m -Xmx512m

    and adopt the values accordingly.

    Affects: Dokumentation |

  • Issue URL: https://virtimo.atlassian.net/browse/BPC-8467 BPC-8467

    • Added appropriate icons next to the title for different notification types

    • Adjusted the title in notifications depending on the notification type

    Affects: BPC Core |

Bugs

  • Auswahl leerer Werte in einer Combobox zeigt &amp;nbsp; an BPC-8543

    Empty values in a combobox are no longer displayed as  

    Affects: BPC Core |

  • Index Selector in der Monitor UI wirft Exception BPC-8806

    Affects: BPC Core |

  • Global Application Toolbar: HTML text nicht mehr vertikal zentriert BPC-8222

    Components are now automatically centered when inserted into the Application Toolbar. This affects, among others, HTML Content Plugins that use the Hook Global Application Toolbar left/right. As a result, components that have padding and margins defined only on one side are no longer centered. For these elements, padding and margins can now be set to 0.

    Affects: BPC Core |

  • Exportaufrufe von Monitor-Daten innerhalb kurzer Zeit führen zu OpenSearch Fehlern BPC-8458

    Affects: Process Monitoring |

Dependency Updates

BPC 4.1.12

Release date: 2024-05-06

The following components must be updated with this update: BPC modules | Karaf

New features

  • BOM Download BPC-7987

    It is now possible, via GUI or API, to download an SBOM file for each module.

    Affects: BPC Core | Dokumentation |

Improvements

  • Unsachgemäße Benutzung vom Modulupload verhindern BPC-8449

    When uploading modules, it is now checked whether a potentially affected module can actually be updated by an upload. If this is not the case, the download is rejected.

    Additionally, it is prevented that modules are deployed multiple times in parallel when different file names are used during upload.

    Affects: BPC Core |

  • BPC Bundle erweitern BPC-8508

    The BPC Bundle now contains additional content. For details, see Download - Virtimo Fileserver

    Affects: Dokumentation |

Security

  • org.apache.sshd:sshd-osgi:2.11.0 | CVE-2023-48795 BPC-8411

Bugs

  • bpc.env.cmd Beispiele für nicht numerische Werte sind falsch BPC-8459

    Only numeric environment variables in bpc.env.cmd may be set using SET /a. The /a parameter has been removed from the template and the examples for non-numeric values.

    Affects: BPC Core | Dokumentation |

  • Required und Readonly gebunden an einen Container haben keinen Effekt. BPC-8468

    Like hidden and disabled, required and readOnly can now also be bound to a container or fieldset. See Beispiele.

    Affects: Forms |

  • Abweichungen in der Konsistenzprüfung der Replikation BPC-8494

    Affects: BPC Core |

  • Übersetzungen für einige UI Komponenten und lokale Formate werden nicht geladen BPC-8498

    Affects: BPC Core |

  • Fehler beim Bundle-Update wird ignoriert BPC-8180

    Affects: BPC Core |

Documentation

Dependency Updates

BPC 4.1.11

Release date: 2024-04-08

The following components must be updated with this update: BPC modules | Karaf | OpenSearch | OpenSearch Plugin

Breaking Changes

You should read the descriptions in this section carefully. It may contain instructions that you must follow for an update.

You should read the descriptions in this section carefully. These are recommended instructions that are advised during an update.

Improvements

  • Adjust the über/about icon BPC-8282

    Adjust the über/about icon (from round to square)

    Affects: BPC Core |

  • Ablage des Truststore und der TLS-Dateien ausserhalb des Karafs ermöglichen BPC-8309

    It is recommended to move customized keystore and truststore files from the Karaf and OpenSearch folders.

    Affects: Dokumentation | Karaf |

  • Session ID Name ( BPC cookie name ) - configurable via setting BPC-8457

    The BPC cookie name can now be set in [karaf]/etc/de.virtimo.bpc.core.cfg via the property de.virtimo.bpc.core.cookieName (also via bpc.env.sh). The default, as before, is BPC_J_S.

    Affects: BPC Core | Dokumentation |

  • Events when restoring indices BPC-8461

    BPC modules can now react to restored indices via events.

    Affects: BPC Core | Dokumentation |

  • Automatic index creation for managed indices during writing is avoided BPC-8462

    If a managed index was deleted during or shortly before a write access, it was automatically recreated. However, the general index configuration was not taken into account in this process. This behavior is now avoided.

    Affects: BPC Core | Dokumentation | Forms |

  • Refactoring des Monitor Export Fensters BPC-9467

    Affects: Process Monitoring |

Security

  • org.apache.cxf:cxf-core:3.5.7 | CVE-2024-28752 BPC-8455

  • opensearch:2.11.0 | GHSA-6g3j-p5g6-992f BPC-8410

Bugs

  • OSGI Component Registrierung via Annotations verhindert Core Start als vorinstalliertes Feature BPC-8442

    Affects: BPC Core |

  • BPC Lizenz läuft zu früh ab BPC-8382

    Affects: BPC Core |

  • Data-Binding BPC-8415

    Data binding within forms has been revised. The combination of several data bindings now requires an operator such as +. Further information: Attribute von Formular-Komponenten binden

    Affects: Dokumentation | Forms |

  • BPC kann nicht gestartet werden BPC-8441

    Due to an interaction with the PAX JDBC Feature Installer, it could happen that the BPC did not start correctly after a Karaf update.

    Affects: BPC Core |

  • Ersetzung der Default Passwörter in der users.properties führt zur Exception BPC-8454

    When starting a Karaf with plaintext passwords in the users.properties, a java.lang.IllegalArgumentException: Detected a Non-hex character at 1 or 2 position error could occur.

    Affects: BPC Core |

Documentation

Dependency Updates

BPC 4.1.10

Release date: 2024-03-11

The following components must be updated with this update: BPC modules | Karaf | OpenSearch | Java

Update of the internal configuration

In this version there have been changes to the internal configuration of the BPC. This affects deployments between BPCs with different versions. Additional steps are also required when downgrading the BPC.

Further information can be found on the page Versionierung der internen BPC Konfiguration.

Breaking Changes

You should read the descriptions in this section carefully. It may contain instructions that you must follow for an update.

  • Karaf Log Monitor BPC-7550

    The additional component of Karaf called 'Decanter' is used to write the Karaf logs to the OpenSearch index 'bpc-logs'. With a new installation of Karaf, this component is already pre-installed and nothing needs to be done. If an existing Karaf installation cannot or should not be replaced, it can also be installed using the Karaf console (Internet connection required).

    virtimo@bpc [virtimo@bpc]()> feature:repo-add decanter
    virtimo@bpc [virtimo@bpc]()> feature:install decanter-collector-log

    Affects: BPC Core | Dokumentation | Karaf |

  • Kompilierung nach Java 17 BPC-8333

    Due to this change, the use of Java 17 is now mandatory and support for Java 11 has ended.

  • Update Karaf BPC-8353

    Karaf must be updated with this update.

    Affects: BPC Core | Karaf |

New features

  • BPC Watchdog BPC-8319

    At Download - Virtimo Fileserver, a "Watchdog" module is now offered. This monitors the core application (Core module) and attempts to start it if necessary. This is only relevant in scenarios where it may happen that Karaf is started at a time when no connection to OpenSearch is yet possible. The core module tries to establish the connection for about 90 seconds and then enters an error state from which it cannot recover on its own. The watchdog ensures that even afterwards, a start is regularly attempted or an attempt is made to establish an OpenSearch connection.

    Affects: BPC Core | Dokumentation |

  • Karaf Log Monitor BPC-7550

    The additional component of Karaf called 'Decanter' is used to write the Karaf logs to the OpenSearch index 'bpc-logs'. With a new installation of Karaf, this component is already pre-installed and nothing needs to be done. If an existing Karaf installation cannot or should not be replaced, it can also be installed using the Karaf console (Internet connection required).

    virtimo@bpc [virtimo@bpc]()> feature:repo-add decanter
    virtimo@bpc [virtimo@bpc]()> feature:install decanter-collector-log

    Affects: BPC Core | Dokumentation | Karaf |

  • Health-Endpunkt für Cluster-Master BPC-7915

    New status endpoint for querying the role of individual nodes in cluster operation. This endpoint can now be used to check whether a node has the "master" role or not. See also BPC API /cxf/bpc-core/status/clustermaster

    Affects: BPC Core | Dokumentation |

Improvements

  • Better error handling for WebSocket connection interruptions BPC-8343

    Affects: BPC Core | Dokumentation |

  • Redundante Werte in Keycloak IdP Konfiguration entfernt BPC-7983

    Affects: BPC Core | Dokumentation |

  • Index kann nicht deployed werden BPC-8277

    Affects: BPC Core |

  • Prozessstarter-Parameter "anyMatch" für den Datentyp choice BPC-8317

    A new parameter anyMatch makes it possible to filter options differently for combo boxes. See Prozess Starter.

  • Kompilierung nach Java 17 BPC-8333

    Due to this change, the use of Java 17 is now mandatory and support for Java 11 has ended.

  • Artifactory npm Abhängigkeiten entfernen BPC-8334

    Only relevant for BPC module developers

    BPC modules previously obtained the ExtJS framework either via our own NPM repository or it had to be provided separately. Now, ExtJS can be obtained directly from Bitbucket via npm. For this, the dependency "@virtimo/sencha-extjs-sdk": "git+ssh://git@bitbucket.org/virtimo/sencha-extjs-sdk#c728d7e2 [git+ssh://git@bitbucket.org/virtimo/sencha-extjs-sdk#c728d7e2]" must be set in the package.json. It should be noted that the part at the end #c728d7e2 corresponds to a GIT commit ID. This should be chosen so that it matches the current branch or BPC version. c728d7e2 corresponds to the current BPC 4.1 branch "support/4.1.x". Alternatively, you can also specify the branch name. However, this is not recommended, as it has been shown that npm does not consider newer commits in this case when updating.

    After entering the dependency, the path to the ExtJS framework in the workspace.json file can be set as follows:

    ...
        "frameworks": {
            "ext": {
                "path":"node_modules/@virtimo/sencha-extjs-sdk/ext"
            }
        },
    ...

    A directory or symlink "ext" is no longer necessary.

  • Empty string in the "rdmsTimeZone" configuration does not result in an error BPC-8356

    Affects: BPC Core |

  • Verbesserungen am Plugin für die Auswahl aktiver bzw. inaktiver Organisationen BPC-8372

    Affects: BPC Core |

  • Text "Aktuelle Ansicht berücksichtigen" ist missverständlich BPC-8103

    Implemented the Radiogroup

    Affects: Process Monitoring |

  • Automatische Aktualisierung auch bei Änderung in den Lookup-Join-Daten BPC-8145

    Affects: BPC Core |

  • Code Bundle Watchdog: NPE im Log unterbinden falls die optionale Config nicht existiert BPC-8387

    Affects: BPC Core |

  • Null values are now permitted for WebSocket messages BPC-8392

    Affects: BPC Core |

  • Lokale URL und konfigurierte URL besser kenntlich BPC-7476

    The status page now provides a better description when it is a configured base URL.

    Affects: BPC Core |

Bugs

  • Favoriten Ansicht im Monitor wird von lokalen Änderungen überschrieben BPC-8386

    Affects: Process Monitoring |

  • User(außer BpcAdmin) können das Dashboard nicht bearbeiten. BPC-8395

    Affects: Process Dashboard |

  • Filter for licenses in "About Business Process Center" now works BPC-8290

    Filter for licenses in "About Business Process Center" now works

    Affects: BPC Core |

  • value Object in instance settings works again BPC-8330

    Objects for values in instance settings no longer cause existing instances to be unable to load and prevent new instances of a module from being created.

    Affects: BPC Core |

  • HTTPS Verbindung zu OpenSearch funktioniert nicht (nur Windows) BPC-8376

    Affects: BPC Core | Karaf | OpenSearch |

  • Memory Leaks im Backend Core entfernt BPC-8414

    Affects: BPC Core |

  • Emojis im Html Content Modul werden nicht dargestellt BPC-8239

    The emojis of the Froala Editor have been removed. You can still use the emojis from your keyboard or operating system.

    Affects: BPC Core |

  • Fehler in der Deployment API Dokumentation BPC-8358

    Affects: BPC Core | Dokumentation |

Documentation

Dependency Updates

  • Update Karaf BPC-8353

    Karaf must be updated with this update.

    Affects: BPC Core | Karaf |

  • Update Java BPC-8378

    Affects:

  • Update org.apache.commons:commons-compress BPC-8409

    Affects: Process Monitoring |

BPC 4.1.9

Release date: 2023-12-15

The following components must be updated with this update: BPC modules | Karaf | OpenSearch | OpenSearch Plugin

Breaking Changes

You should read the descriptions in this section carefully. It may contain instructions that you must follow for an update.

  • Karaf Version auf Statusseite anzeigen BPC-8260

    An update of the OpenSearch plugin (os-bpc-plugin) is necessary.

    Affects: BPC Core | OpenSearch |

New features

Improvements

  • Consideration of X-Forwarded-For header in session overview BPC-8224

    Affects: BPC Core |

  • Karaf Version auf Statusseite anzeigen BPC-8260

    An update of the OpenSearch plugin (os-bpc-plugin) is necessary.

    Affects: BPC Core | OpenSearch |

  • Display of "null" values in combobox lists BPC-8278

    "null" values in combobox lists are displayed better

    Affects: BPC Core |

  • Dashboard module reduced on frontend BPC-8279

    For existing installations, the file bpc-be-dashboard.jar can be removed without replacement and deleted from the KARAF/deploy directory. The dashboard module now consists only of the file bpc-fe-dashboard.war.

  • Monitor access check as an internal service BPC-8313

    At de.virtimo.bpc.module.monitor.api.service.MonitorService, it is now possible to check via isAcccessible(…​) whether a user is allowed to access certain monitor functions.

    Affects: Process Monitoring |

  • Obsolete Spalte "lastStateUpdateInUtcMilli" auf Statusseite unter "BPC Server" entfernt BPC-8321

    Affects: BPC Core |

Security

  • org.eclipse.jetty:jetty-http:9.4.52.v20230823 | CVE-2023-36478 BPC-8245

    Affects: BPC Core | Karaf |

  • org.eclipse.jetty:jetty-io:9.4.52.v20230823 | CVE-2023-44487 BPC-8261

  • Default https Verbindung zu OpenSearch BPC-7771

    Affects: BPC Core | Forms | Karaf | OpenSearch |

Bugs

  • Issue in Deployment of multiple modules to BPC from INUBIT BPC-8365

    Affects: BPC Core |

  • Autorefresh zerschießt den Monitor BPC-8316

    Affects: Process Monitoring |

  • BPC Login nicht möglich nach KeyCloak 23 Update BPC-8320

    Affects: BPC Core |

  • Navigation verschwindet nach Patch BPC-8281

    Bug fixed where navigation was no longer displayed due to old configuration

    Affects: BPC Core |

  • Backend connection - http - gibt body nicht zurück BPC-8315

    Affects: BPC Core |

  • URL serialization is not working properly while redirecting from Keycloak login BPC-8323

    Affects: BPC Core |

  • Das Karaf Shell Kommando: os:delete zeigt keine Info wenn der zu löschende Index nicht existiert BPC-8325

    Affects: BPC Core |

  • Deployment Dialog: Modul Instanzen werden als unterschiedlich markiert obwohl sie es gar nicht sind BPC-8335

    Affects: BPC Core |

  • Behandlung von null Werten in Monitor Settings an der REST API BPC-7548

    Affects: Process Monitoring |

  • BPC Default Zertifikat abgelaufen BPC-8062

    Affects: Karaf |

  • Replikation repliziert nicht alle Sätze einer Datenbanktabelle BPC-8285

    If the timestamp of a record lies exactly on the boundary of the current replication window, it may happen that it is not replicated. Depending on the precision of the timestamp field and the size of the replication window, however, this is very unlikely.

    Affects: BPC Core |

Documentation

  • Routing Entwickler-Dokumentation BPC-8230

    Added another routing example with card layout to the documentation

    Affects: Dokumentation |

  • Bilder-Links anpassen für große Bilder BPC-6416

    Affects: Dokumentation |

BPC 4.1.8

Release date: 2023-11-21

The following components must be updated with this update: BPC modules | Karaf

New features

  • Beim Kopieren von Komponenten auch Pluginzuweisungen kopieren BPC-5117

    If a component is copied that has plugins directly assigned to it, you can select in a subsequent dialog whether you also want to assign these plugins to the copy.

    Affects: BPC Core |

  • Replication Status Plugin BPC-7854

    • added Replication Status Plugin

    Affects: BPC Core | Dokumentation |

Improvements

  • Reduktion der eingebundenen CXF Features BPC-7992

    Affects: Karaf |

  • Cluster-Betrieb: Multiple OpenSearch Nodes hinterlegen BPC-8000

    See also de.virtimo.bpc.core.opensearch.hosts in BPC Konfigurationsdatei

    Affects: BPC Core | Dokumentation | Forms |

  • Verpflichtende Rolle für die Verwendung vom BPC BPC-8174

    See also 'mandatoryRoleToAccessBPC' in Core Services

    Affects: BPC Core | Dokumentation |

  • Websocket nachrichten bei Änderung des Performance Indexes BPC-8237

    Affects: BPC Core |

  • IP Pinning über verschiedene Proxies BPC-8242

    See also IP Pinning

    Affects: BPC Core | Dokumentation |

  • org.json:json entfernen BPC-8255

    Affects: Data Analysis |

  • "Über BPC" Fenster via BpcCommon.Api anbieten BPC-8264

    Affects: BPC Core |

  • Organisationswechsel: Benachrichtigung deaktivierbar machen BPC-8272

    removed notification about session refresh

    Affects: BPC Core |

  • BPC Setting vom Typ text soll die Möglichkeit haben das automatische htmlEncoding im Adminbereich zu deaktivieren BPC-8298

    BPC settings of type text can now use the attribute disableEncoding to control whether HTML encoding should be implicitly used in the admin area.

    Unless otherwise specified, HTML encoding is applied to the values of these settings in the admin area.

    Affects: BPC Core |

  • Setzen von data-testid via testId Attribut BPC-8304

    Affects: BPC Core |

Security

  • Default Passwörter durch starke Zufallspasswörter ersetzen BPC-6881

    From this version onwards, no default passwords will be delivered with Karaf. When starting BPC, random passwords are generated for the default users.

    See also: Installation

    Affects: BPC Core | Dokumentation | Karaf |

Bugs

  • Rest API cxf/bpc-core/im/roles not working with INUBIT idp BPC-8302

    Affects: BPC Core |

  • Passwort Ändern Funktion mit karaf default funktioniert nicht BPC-8061

    Affects: BPC Core |

  • Aktuellster MS SQL JDBC Treiber wird installiert, obwohl eine bestimmte Version verwendet werden soll BPC-8219

    Affects: Dokumentation |

  • Ändern der Plugin Konfiguration funktioniert teilweise nicht BPC-8228

    Affects: BPC Core |

  • BPC Navigation: Hauptmenupunkt kann nicht ausgewählt werden, wenn es Untermenupunkte gibt BPC-8257

    Affects: BPC Core |

  • Auswahl von Navigationselementen für die Landingpage geht nicht BPC-8259

    • Fixed a bug where setting landing pages does not work because the configuration is not set

    Affects: BPC Core |

  • Forms Editor zeigt keine Schema Fehler mehr im Editor an BPC-8269

    Affects: Forms |

  • Vom Core forcierte Setting-Gruppen werden nicht mit Setting-Gruppen vom Modul gemerged BPC-8273

    Affects: BPC Core |

  • Replikation: Konsistenzcheck funktioniert nicht, wenn keine Daten repliziert werden BPC-8276

    Affects: BPC Core |

  • Passwortprüfung gegen regulären Ausdruck speichert falsche Zeichen BPC-8284

    Affects: BPC Core | Dokumentation |

  • Core ist von der Joda-DateTime Bibliothek abhängig und startet nicht BPC-8291

    Affects: BPC Core |

  • Leerer Filter in MultipleGridsConfig führt zu einem Fehler beim Daten laden BPC-8300

    Affects: Process Monitoring |

  • Monitoransichten werden ohne Änderung als geändert markiert BPC-8301

    Affects: Process Monitoring |

  • Sprung in Adminbereich zeigt bei wiederholten Aufrufen nicht die richtige Ansicht an BPC-7726

    Affects: BPC Core |

  • Anpassungen der LookupJoins-Konfigurationen (Replikation & Log Service) bleiben unberücksichtigt BPC-7785

    Affects: BPC Core |

Documentation

Dependency Updates

BPC 4.1.7

Release date: 2023-10-23

The following components must be updated with this update: BPC modules | OpenSearch | OpenSearch Plugin

Breaking Changes

You should read the descriptions in this section carefully. It may contain instructions that you must follow for an update.

You should read the descriptions in this section carefully. These are recommended instructions that are advised during an update.

New features

Improvements

  • In der Index Übersicht (FE & Karaf Shell Kommando) die Anzahl Shards und Replikas mit anzeigen BPC-8045

    Affects: BPC Core | Dokumentation |

  • Informations Button im Core Common Paket bereitstellen BPC-6675

    Affects: BPC Core |

  • Datei "froala_style.min.css" kann nicht geladen werden BPC-6837

    Affects: BPC Core |

  • ExtJS Workaround entfernen BPC-7887

    Affects: BPC Core |

  • OpenSearch Cluster-Betrieb: Durchführung des Reindex optimieren BPC-8047

    Affects: BPC Core |

  • Core_IndexTemplates Einstellung kann nicht bei allen Indices angewendet werden BPC-8050

    Affects: BPC Core |

  • bpc-notification Index kann nicht für den Cluster Betrieb optimiert werden BPC-8051

    Affects: BPC Core |

  • Repository-Typ der OpenSearch Snapshots/Backups konfigurabel machen BPC-8054

    Affects: BPC Core | Dokumentation |

  • Diff-Anzeige beim Aufruf der Reindizierung hat öfters Probleme Unterschiede zu erkennen BPC-8232

    Affects: BPC Core |

  • Beim anlegen von OpenSearch Indices den Typ von "number_of_shards" und "number_of_replicas" anpassen BPC-8212

    Affects: BPC Core | Dokumentation |

Security

  • net.minidev:json-smart:2.4.8 | CVE-2023-1370 BPC-8024

  • OpenSearch | CVE-2023-31419 BPC-8226

Bugs

  • JSON Responses created with Duplicate keys for “cxf/bpc-core/configuration" BPC-8111

    Affects: BPC Core |

  • FIle upload im Prozessstarter führt zu Fehler BPC-8243

  • Auswahl für ausgeblendete Graphen enthält mehr als die möglichen Graphen BPC-8171

    Affects: Process Monitoring |

  • User-Settings im Dashboard sind nicht mehr stateful BPC-8181

  • Monitoransichten gehen verloren BPC-8207

    Affects: Process Monitoring |

  • Hochladen von Modulen funktioniert nicht BPC-8221

    BpcCommon.Util.sanitizeHtml() checks the input. If it is not a string, the input will not be processed.

    Affects: BPC Core |

  • Issue URL: https://virtimo.atlassian.net/browse/BPC-8233 BPC-8233

    Affects: BPC Core |

  • OIDC/Keycloak: Komma separierte Werte in Claims werden nicht korrekt gelesen BPC-8244

    Affects: BPC Core |

  • Nicht Admin User erhalten Passwortwechsel Option im Menu, auch wenn diese am IdP deaktiviert ist BPC-5859

    Affects: BPC Core |

Documentation

  • Anwenderdoku einbetten in Admindoku BPC-7999

    Affects: Dokumentation |

Dependency Updates

BPC 4.1.6

Release date: 2023-09-25

The following components must be updated with this update: BPC modules | Karaf

You should read the descriptions in this section carefully. These are recommended instructions that are advised during an update.

  • Update Karaf BPC-8077

    Karaf must be updated with this update.

    Logging into the Karaf console via SSH is no longer allowed by default for users from the users.properties. To allow users to log in via SSH, add the ssh role to individual users in the KARAF/etc/users.properties file or add the role to the admingroup.

    Affects: BPC Core | Karaf |

  • Entfernen vom BPC default Public Key aus keys.properties BPC-8210

    Entries in the file KARAF/etc/keys.properties that you do not use for login with a public/private key can be removed.

    Affects: Karaf |

New features

  • Gelöschte Instanzen aus Navigation entfernen BPC-8029

    Functionality to delete navigation entries when deleting instances

    Affects: BPC Core | Dokumentation |

Improvements

  • Instanzspezifische Rechte BPC-7937

    Component-specific permissions for the Monitor, Analysis, and Dashboard modules.

  • AdditionalInformation für UserSession soll auch inactiveOrganisations setzen können und mehr SessionInformationen erhalten BPC-8211

    Affects: BPC Core |

Security

  • com.google.guava:guava:30.1-jre | CVE-2023-2976 BPC-8074

  • Apache CXF | CVE-2022-46363 + CVE-2022-46364 BPC-7545

  • org.eclipse.jetty:jetty-client:9.4.50.v20221201 | CVE-2023-26048 BPC-8011

  • org.codehaus.jettison:jettison:1.5.3 | CVE-2023-1436 BPC-8075

  • org.eclipse.jetty:jetty-client:9.4.50.v20221201 | CVE-2023-26049 BPC-8078

  • Entfernen vom BPC default Public Key aus keys.properties BPC-8210

    Entries in the file KARAF/etc/keys.properties that you do not use for login with a public/private key can be removed.

    Affects: Karaf |

  • Hinzufügen der bpcadmin Rolle über AdditionalInfo verhindern BPC-8213

    If the role bpcadmin is set via the UserInfo endpoint configured on the IdP, this will be ignored.

    Affects: BPC Core |

  • org.springframework:spring-core:5.3.22 | CVE-2023-20860 BPC-8022

  • org.eclipse.jetty:jetty-server:9.4.50.v20221201 | CVE-2023-26048 BPC-8076

Bugs

  • Binding auf Arrays zeigt [Object object] als Wert BPC-8204

    Affects: Forms |

  • Replication berücksichtigt nicht die Gross/Kleinschreibung bei Postgresql Tabellen BPC-7818

    Affects: BPC Core |

  • eine leere Number in der DB wird als 0 repliziert BPC-7836

    Affects: BPC Core |

  • Sanitizer entfernt Tabellen-Fragmente, wenn beim Rendern das table-Element fehlt BPC-8189

    Affects: BPC Core |

  • BPC_PM_configureBPC Workflow funktioniert nicht mit 4.1 BPC-8200

    BPC_PM_configureBpc - Variable var.csrfToken is now initially created. Additionally, a case distinction is made when creating HttpProxy / BackendConnections depending on the version.

Dependency Updates

  • Update CXF BPC-8023

    Affects: BPC Core | Data Analysis | Karaf |

  • Update Karaf BPC-8077

    Karaf must be updated with this update.

    Logging into the Karaf console via SSH is no longer allowed by default for users from the users.properties. To allow users to log in via SSH, add the ssh role to individual users in the KARAF/etc/users.properties file or add the role to the admingroup.

    Affects: BPC Core | Karaf |

  • Update Jetty BPC-8209

    Affects: BPC Core |

BPC 4.1.5

Release date: 2023-08-28

The following components must be updated with this update: BPC modules

New features

  • Datenfelder für die Übertragung an den Monitor ausschließen BPC-6196

    On the monitor, individual fields can be excluded from transmission to the client via the Data_ProcessExcludedFields (data_excludedFields) setting. This allows, for example, unused or sensitive data to be suppressed.

Improvements

  • Global Date Range optional nur für das aktuelle Modul setzen BPC-6417

    The global date filter now offers a local mode. With this, a different time period can now be set for a module, deviating from the global setting. See also Globaler Datumsfilter

  • Alternative Account-Seiten eines externen IdP (wie z.B. Keycloak) zulassen BPC-6718

    Affects: BPC Core | Dokumentation |

  • Forms Plugin mit Konfigurations Template ausstatten BPC-8069

    • added default configuration to forms-plugin

    Affects: Forms |

  • Mouseover Text der VOLLTEXTSUCHE anpassen BPC-8089

    • fixed operator and example for multiple words as phrase in mouseover text at full text search in monitor

    • added note about backslashes in full text search in monitor

    Affects: Process Monitoring |

  • Verzögertes Hinzufügen von Plugins zu Hooks BPC-8188

    Affects: BPC Core |

Bugs

  • Monitor Widget blendet Elemente nach Datenaktualisierung aus BPC-8182

    Affects: Process Monitoring |

  • Änderung der automatischen Datenaktualisierung über die Oberfläche hat keine Auswirkung BPC-8183

    Affects: Process Monitoring |

Documentation

  • Analysis Anwender Dokumentation BPC-5404

    Affects: Dokumentation |

  • Empfohlene Systemarchitektur inkl. Hardening BPC-5865

    Affects: Dokumentation |

  • Process Dashboard: Konfigurationsmöglichkeiten im Administrationsbereich ergänzen BPC-6983

    Affects: Dokumentation |

  • Aktive BPC Sessions BPC-7128

    Affects: Dokumentation |

  • Status Seite BPC-7129

    Affects: Dokumentation |

  • Mitteilung BPC-7131

    Affects: Dokumentation |

  • Darstellung von Zahlen mit Komma (bspw. Geldbeträge) in Monitorspalten BPC-7721

    Affects: Dokumentation |

  • Dokumentation Monitor Widgets auf Ansicht referenzierbar machen BPC-7731

    Affects: Dokumentation |

  • DynamicList Filter nicht mit source analyzed verwenden BPC-7772

    Affects: Dokumentation |

  • Dynamische Filterwerte in Data_Filter BPC-7956

    • new page about configuration of data filter for monitor data

    Affects: Dokumentation |

  • Vollständige Dokumentation der Monitor Widgets BPC-7968

    Affects: Dokumentation |

  • Monitor Deeplink BPC-7986

    Affects: Dokumentation |

  • Dev Doku Events BPC-3335

    Affects: BPC Core | Dokumentation |

BPC 4.1.4

Release date: 2023-08-14

The following components must be updated with this update: BPC modules | OpenSearch | OpenSearch Plugin | Java

Breaking Changes

You should read the descriptions in this section carefully. It may contain instructions that you must follow for an update.

  • OpenSearch Cluster Betrieb: Socket Timeouts im os-bpc-plugin BPC-8059

    If set, remove the following no longer needed os-bpc-plugin specific settings from conf/opensearch.yml.

    • os-bpc-plugin.opensearch.basicauth.username

    • os-bpc-plugin.opensearch.basicauth.password

    • os-bpc-plugin.trust_certificates

    • os-bpc-plugin.verify_hostnames

    • os-bpc-plugin.truststore.path

    • os-bpc-plugin.truststore.type

    • os-bpc-plugin.truststore.password

    If this is not done, OpenSearch will not start and will display the error "please check that any required plugins are installed, or check the breaking changes documentation for removed settings".

    Affects: Dokumentation | OpenSearch |

  • JSON Schema vom Backend laden und zur Validierung von JSON Settings verwenden BPC-6607

    Only relevant for module developers When using the BPC JsonEditor (xtype bpcJsonField or bpcCodeEditorWindow.json), the optional JSON schema is now passed via schema and no longer via jsonSchema.

    Affects: BPC Core |

  • ungewolltes trim bei Sprung BPC-7961

    The content of the Monitor jump column was previously trimmed (removal of spaces at the beginning and end) when filtering in the target monitor. This is no longer done, so that you can specifically filter for values with spaces at the beginning or end.
    If you use values with additional spaces in your Monitor jump column (e.g. also in connection with the separator) that do not match the target values in the target monitor, these may need to be removed.

    Affects: Process Monitoring |

New features

  • Dateiupload Funktion BPC-5266

    A new type filefield is now offered. With this, it is possible to send files via the form. See also: File Field

    Affects: Dokumentation | Forms |

  • JSON Schema vom Backend laden und zur Validierung von JSON Settings verwenden BPC-6607

    Only relevant for module developers When using the BPC JsonEditor (xtype bpcJsonField or bpcCodeEditorWindow.json), the optional JSON schema is now passed via schema and no longer via jsonSchema.

    Affects: BPC Core |

  • Deployment-Funktion als Plugin BPC-7848

    • Deployment function available through plugin on different hooks

    Affects: BPC Core | Dokumentation |

Improvements

  • Zirkuläre Referenz in Jump-Params beseitigen BPC-7888

    Affects: Process Monitoring |

  • Bessere Darstellung für Elemente im "Springe zu" Kontextmenu BPC-7930

    It is now possible to customize the appearance of the menu item of a jump column. See also jumpMenuIconCls and jumpMenuText under Configuration Parameters. Additionally, it is also possible to disable the jump options menu. After deactivation, only the jump option Jump in the same tab is available.

  • Navigationseintrag vom Typ Ordner und Tabbed View Mode wird nicht selektiert BPC-7959

    Affects: BPC Core |

  • Implementierung des Sharing Interface BPC-7980

  • Einstellung "Datumsformat" im Monitor-Widget nach "Data" verschieben BPC-8030

    Affects: Process Monitoring |

  • Mehrere Referenzen im Binding zulassen BPC-8037

    Now it is possible to use multiple binding references in a bind string. See also: Attribute von Formular-Komponenten binden

    Affects: Dokumentation | Forms |

  • Tooltip an Tabs BPC-8053

  • Custom-Row-Limit BPC-8055

    Added setting option for limiting data/rows (Monitor_DataCountLimit and Monitor_DataViewLimit) to instance-specific settings

    Affects: Process Monitoring |

  • Einstellung "Ausrichtung" im Monitor-Widget nach "Data" verschieben BPC-8067

    Affects: Process Monitoring |

  • Entfernen von alten Polyfill BPC-8083

    Adjustments that were necessary to support the Firefox 60 ESR and Internet Explorer 11 browsers have been removed. These browsers are no longer supported by BPC and should no longer be used, as the manufacturers have already discontinued support for them.

    Affects: BPC Core |

  • Anpassung Tooltip Darstellung BPC-8086

    Tooltips are now displayed as long as the mouse pointer is on the affected element. Previously, tooltips were automatically hidden again after 5 seconds.

    Affects: BPC Core |

  • HTML in Tooltips im SettingPanel zulassen BPC-8147

    Affects: BPC Core |

Bugs

  • opensearch cluster stürtzt teilweise ab, wenn ein karaf gestoppt wird. BPC-8020

    Affects: OpenSearch |

  • OpenSearch Cluster Betrieb: Socket Timeouts im os-bpc-plugin BPC-8059

    If set, remove the following no longer needed os-bpc-plugin specific settings from conf/opensearch.yml.

    • os-bpc-plugin.opensearch.basicauth.username

    • os-bpc-plugin.opensearch.basicauth.password

    • os-bpc-plugin.trust_certificates

    • os-bpc-plugin.verify_hostnames

    • os-bpc-plugin.truststore.path

    • os-bpc-plugin.truststore.type

    • os-bpc-plugin.truststore.password

    If this is not done, OpenSearch will not start and will display the error "please check that any required plugins are installed, or check the breaking changes documentation for removed settings".

    Affects: Dokumentation | OpenSearch |

  • Auto-Refresh von Child-Monitor funktioniert nicht mehr BPC-8090

    Affects: Process Monitoring |

  • Vertikale Tabs sind bei verschiedenen Browser Zoom Level nicht sichtbar BPC-6420

    Affects: BPC Core |

  • ungewolltes trim bei Sprung BPC-7961

    The content of the Monitor jump column was previously trimmed (removal of spaces at the beginning and end) when filtering in the target monitor. This is no longer done, so that you can specifically filter for values with spaces at the beginning or end.
    If you use values with additional spaces in your Monitor jump column (e.g. also in connection with the separator) that do not match the target values in the target monitor, these may need to be removed.

    Affects: Process Monitoring |

  • Excel-Export Monitor: java.lang.NoSuchMethodError: 'void org.apache.xmlbeans.XmlCursor.close()' BPC-8060

    Affects: Process Monitoring |

  • Laut Monitor-Oberfläche ist "Automatisches Update" aktiv, in Konfiguration aber deaktiviert BPC-8071

    Affects: Process Monitoring |

  • Monitor-Sprungmarken funktionieren nicht mit Rechtsklick BPC-8073

    Affects: BPC Core |

  • Beim Laden des BPC fehlt kurzzeitig die Ladeanimation BPC-8079

    Affects: BPC Core |

  • Setzen einer actioncolumn funktioniert nicht über den Spaltenkonfigurator BPC-8080

    Affects: Process Monitoring |

  • Fehler beim Rendern/Sizing in Toolbars BPC-8082

    Affects: BPC Core |

  • Monitor Widget Konfiguration kann trotz bpcDashboard_editDashboard Berechtigung nicht bearbeitet werden BPC-8104

  • Aktualisieren des Monitor-Widgets im Dashboard funktioniert nicht mehr BPC-8125

    Affects: Process Monitoring |

  • Cluster : BPC Monitorinstanzen fehlen im zweiten Karaf BPC-8126

    Affects: BPC Core |

  • Theme Auswahl nicht möglich BPC-8170

    Affects: BPC Core |

  • Adminbereich Setting Panel "not default" ist nach Filteranwendung deaktiviert BPC-7960

    Affects: BPC Core |

  • Beschreibungs-Checkbox "Ungelesene anzeigen" ungenau BPC-8096

    • Notification checkbox label for unread messages improved

    Affects: BPC Core |

Documentation

  • Feedback zu der Dokumentation - Update-Guide BPC-6294

    Affects: Dokumentation |

  • Doku für die Core Services Einstellung "appToolbar_globalMenuShowLogout" BPC-6180

    Affects: Dokumentation |

  • Monitor Dateidownload BPC-7720

  • Verwendung von Platzhaltern anstelle von Umgebungsvariablen in Default-Config des Win Services BPC-7900

    Affects: Dokumentation |

  • "Zeilenumbruch" und Beispielwerte in Konfiguration für Monitor Spalten BPC-8006

    Affects: Dokumentation |

  • Liferay als IdP entfernen BPC-8056

    Affects: Dokumentation |

  • Dokumentation neue custom data limit settings - Process Monitor BPC-8169

    Affects: Dokumentation |

Dependency Updates

  • Update Java BPC-8115

    Affects:

  • Update froala-editor BPC-8117

    Affects: BPC Core |

  • Update Java BPC-8139

    Affects:

BPC 4.1.3

Release date: 2023-07-03

The following components must be updated with this update: BPC modules | OpenSearch Plugin

New features

  • Monitor Child-Aktionen BPC-6109

    Process actions can now also be used in the grid of the detail view (Child Log).

  • Custom OpenSearch Client via BPC OS Service BPC-8036

    Affects: BPC Core |

Improvements

  • Anbindung von Keycloak mit minimalen Konfigurationsaufwand BPC-7913

    The default values in BPC have been adjusted so that they now directly match the default values of Keycloak. The instructions have been simplified and a preconfigured realm is no longer offered.

    Affects: BPC Core | Dokumentation |

  • Share Process im Kontextmenu soll mehrfach Selektion berücksichtigen BPC-7940

    Now multiple monitor processes can be shared through the context menu.

    Affects: Process Monitoring |

  • Die Komponente Stateselection menu wird initial als aktiv angezeigt. BPC-7985

    Affects: Process Monitoring |

  • Bezeichnung "Instanz" beim Duplizieren von Modulkomponenten BPC-8007

    • Terms were chosen more precisely: Instance → Componente duplicate → copy

    Affects: BPC Core |

  • API Funktion zum Laden von User Infos soll auf bestehende UserSessions zurückgreifen BPC-8035

    The REST API /user/info/{accessTokenType}/token now accesses the existing user sessions and tries to find the corresponding user session there. Only if no user session is found, a pseudo user session is created from the access token, which corresponds to the old behavior.

    Affects: BPC Core |

Security

Bugs

  • Monitor: Tooltip der Filter/Sortierung nicht aktuell BPC-7868

    Bug fix: Tooltip in the module header is now updated correctly

    Affects: Process Monitoring |

  • ThemeSwitcher - custom Themes für normalo User nicht sichtbar BPC-7890

    Affects: BPC Core |

  • Zeilen im Spaltenkonfigurator-Grid lassen sich nicht verschieben BPC-7982

    Affects: Process Monitoring |

  • Replikation interpretiert Zeitzonen nicht gem. Konfiguration BPC-7988

    Affects: BPC Core |

  • Fehler beim Erzeugen einer neuen Instanz, die direkt der Navigation hinzugefügt wird BPC-8010

    Affects: BPC Core |

  • Impersonation im Keycloak 21 schlägt fehl BPC-8027

    Affects: BPC Core |

  • os-bpc-plugin: Im Cluster Betrieb Probleme mit dem internen Modell BPC-8032

    Affects: OpenSearch |

  • API Funktion zum laden von User Infos anhand eines accessTokens führt zu einem Fehler BPC-8033

    Affects: BPC Core |

  • Datumsfilter im Monitor setzen - das Jahr kann nicht ausgewählt werden (Jahr zur Auswahl nicht sichtbar) bei Zoom unter 100% BPC-6835

  • Sprung vom Spaltenkonfigurator in die Monitor-Instanz aktualisiert die Ansicht nicht BPC-7416

    Affects: Process Monitoring |

  • Typo in language keys BPC-7994

    Affects: Process Dashboard |

BPC 4.1.2

Release date: 2023-06-05

The following components must be updated with this update: BPC modules | OpenSearch | OpenSearch Plugin

You should read the descriptions in this section carefully. These are recommended instructions that are advised during an update.

  • Im OpenSearch Cluster werden die Daten des os-bpc-plugin nicht zuverlässig zwischen den Nodes synchronisiert BPC-7768

    An update of OpenSearch or the os-bpc-plugin is required.

    Affects: BPC Core | OpenSearch |

Improvements

Bugs

  • Nach dem wiederherstellen eines bpc-configuration Index müssen die Replication Jobs etc. neu gestartet werden BPC-7100

    Affects: BPC Core | OpenSearch |

  • Im Dashboard Monitor Widget wird initial die ausgewählte View(Benutzer definierte Ansicht) nicht richt angezeigt. BPC-7730

    Affects: Process Monitoring |

  • Dashboard: Konfigurierter Titel im External content Widget wird ignoriert BPC-7748

  • HTTP 500 wird falsch interpretiert BPC-7756

    Affects: BPC Core |

  • Im OpenSearch Cluster werden die Daten des os-bpc-plugin nicht zuverlässig zwischen den Nodes synchronisiert BPC-7768

    An update of OpenSearch or the os-bpc-plugin is required.

    Affects: BPC Core | OpenSearch |

  • Benutzerlogout nach Änderung des IdentityProvider_Mappings BPC-7787

    Affects: BPC Core |

  • Migration 3.4.5->4.0.14 Datasource not found BPC-7799

    Affects: BPC Core |

  • Prozessvorschau-Widget nutzt nicht das am Monitor konfigurierte Datumsformat BPC-7862

    Affects: Process Monitoring |

  • IP Pinning Fehler wird im Frontend nicht korrekt angezeigt BPC-7863

    Affects: BPC Core |

  • Theme forciert Farben im Grid, so dass diese nicht verändert werden können BPC-7884

    Affects:

  • Im Prozessvorschau-Monitor Widget greift der Custom Renderer nicht. BPC-7912

    Affects: Process Monitoring |

  • IP Pinning Fehler beim Imitieren BPC-7918

    Affects: BPC Core |

  • Monitor Widgets Initale Ansicht wird mehrfach gesetzt BPC-7919

  • Monitor Grid ohne Multiple Views Config erhält fehlerhafte Parameter BPC-7931

    Affects: Process Monitoring |

  • Vimon dashboard Widget führt zu Problemen mit der Websocketverbindung BPC-7935

  • Default Dashboard Instanz Einstellungen nicht vorhanden BPC-7943

    Affects: Process Dashboard |

  • Monitor PieChart Widget Klick auf Overview Header führt zu Fehler in der Konsole BPC-7947

    Affects: Process Monitoring |

  • Monitor Pie Chart Widget Setting ausgeblendete Graphen hat keine Auswirkung BPC-7948

    Affects: Process Monitoring |

  • VIMON initialParams Konfiguration funktioniert nicht BPC-7952

    Affects: Dokumentation |

  • BPC Navigation: in BPC 4.1 werden keine MessageKeys in der Unternavigation übersetzt BPC-7954

    Affects: BPC Core |

  • *search-bpc-plugin Endpunkt liefert Platzhalter-Text "${project.version}" anstatt der Versionsnummer BPC-7963

    Affects: OpenSearch |

  • Änderungen am Model werden nicht angezeigt - ie BackendConnection module_name BPC-6767

    Affects: BPC Core |

  • Status mit Text im Detailfenster erzeugt hässlichen Zeilenumbruch bei ungünstiger Aufösung BPC-7783

    Affects: Process Monitoring |

Documentation

  • BPC-7390 Changelog zur Verwendung des alten Verschlüsselungsverfahrens anpassen BPC-7881

    Affects: Dokumentation |

  • BPC-Migrationsdoku BPC-7932

    Affects: Dokumentation |

  • Migration ES -> OpenSearch BPC-7933

    Affects: Dokumentation |

  • Fix inkorrekter Link zur Seite: Plugin - Teilen BPC-7936

    Affects: Dokumentation |

  • Doku von Notification API anpassen BPC-7962

    Affects: BPC Core | Dokumentation |

BPC 4.1.1

Release date: 2023-05-08

The following components must be updated with this update: BPC modules | Karaf | OpenSearch Plugin | Java

Breaking Changes

You should read the descriptions in this section carefully. It may contain instructions that you must follow for an update.

  • Umbenennung der Funktion BpcCommon.Api.getInstanceUrl in BpcCommon.Api.getModuleUrl BPC-7902

    The name of the common function "getInstanceUrl" (introduced with BPC 4.1.0) is being replaced by "getModuleUrl".

You should read the descriptions in this section carefully. These are recommended instructions that are advised during an update.

New features

Improvements

  • Umbenennung der Funktion BpcCommon.Api.getInstanceUrl in BpcCommon.Api.getModuleUrl BPC-7902

    The name of the common function "getInstanceUrl" (introduced with BPC 4.1.0) is being replaced by "getModuleUrl".

  • Share Process via Kontextmenü BPC-1104

    In the monitor you now have the possibility to split a process. In the context menu of the currently selected process there is an option "Share process". If you select this option, a URL to the current monitor is created, in which the currently selected process is focused.

  • Jetty Konfiguration außerhalb vom Karaf BPC-7780

    To configure jetty.xml in a central place see the central configuration file.

    Affects: Dokumentation |

  • DatePicker Monat-Auswahlbox soll kein Hintergrundfarbe haben BPC-7840

    Affects: BPC Core |

  • os-bpc-plugin: Elasticsearch xpack ersetzen BPC-7849

  • Dashboard - AutoUpdate - Forcieren (auch mit WS) BPC-7853

    Affects: Process Dashboard |

  • BPC Notifikation Typ "link" auch mit externer URL BPC-7858

    Affects: BPC Core | Dokumentation |

  • BPC Notifikation Typ "link", Sprungmöglichkeit im PopUp Mode anbieten BPC-7859

    Affects: BPC Core |

  • VIMON Texte anpassen BPC-7866

    Product name adjusted in English and German as well as widget name

  • Teilen Funktion soll nur angeboten werden, wenn das Modul die Funktion unterstützt BPC-7870

    Affects: BPC Core |

  • External Content Default Settings URL anpassen BPC-7875

    A new instance of the External Content module initially points by default to the Virtimo documentation

    Affects: BPC Core |

Bugs

  • JSON Editor springt bei Verwendung an den Start des Dokumentes BPC-7865

    Affects: BPC Core |

  • Scrolling in der Navigationsleiste BPC-6672

    Affects: BPC Core |

  • Darstellung Locked Grid im BPC-Theme BPC-7413

    Affects:

  • Ansichten Buttons sehen aktiv aus, obwohl die Ansicht nicht aktiv ist BPC-7725

    Affects: Process Monitoring |

  • Monitor (Plugin) Inlineview verschwindet einfach BPC-7732

  • Deeplink mit Login führt nicht zum Ziel BPC-7795

    Affects: BPC Core |

  • Process Preview Widget zeigt an, dass keine Daten verfügbar sind, wenn in einem der Grids keine Daten verfügbar sind BPC-7851

    Affects: Process Monitoring |

  • Monitor Widget - Click auf "Gesamt" Zeile setzt Wert der aggregierten Spalte als "null" BPC-7856

    Affects: Process Monitoring |

  • Hintergrundfarbe vom Info-Button im Notifikation-Zentral-Fenster nicht korrekt BPC-7860

    Affects: BPC Core |

  • Im relativen Zeitpicker beginnen die Jahre am 23.12 um 23h00 BPC-7861

    Affects: BPC Core |

  • Notification über API wird im Notification Central Fenster zwei Mal angezeigt BPC-7864

    Affects: BPC Core |

  • Ansichten Verwalten sperrt bei persönlicher Ansicht nicht die zusätzlichen Felder BPC-7871

    Affects: Process Monitoring |

  • Passwörter werden unverschlüsselt in der DB abgelegt, wenn jaas jdbc auf das alte Verschlüsselungsverfahren umgestellt wird BPC-7880

    Affects: BPC Core | Karaf |

  • Fehler beim Hinzufügen von Plugins wenn der Hook bereits wieder entfernt wurde (Timing Problem) BPC-7889

    Affects: BPC Core |

  • Fehlende PluginHook Anpassungen BPC-7901

  • CSS & JS Code Feld kaputt BPC-7905

    Affects: BPC Core |

  • Performance Issues (catched) - obwohl Performance Tracing off BPC-7716

    Affects: BPC Core |

  • BPC theme setzt Grid cellEditing auf feste Höhe BPC-7826

    Affects:

Documentation

  • Notification API - Vollständige liste möglicher "type" Werte BPC-7873

    Affects: Dokumentation |

  • Form Binding Doku-Seite ins Navigationsmenü hinzufügen. BPC-7450

    Affects: Dokumentation |

  • Doku von Notification API anpassen BPC-7857

    Affects: Dokumentation |

  • Korrektur BPC Doku: Installation BPC-7882

    • Typo corrected

    • Added information on how BPC can be opened locally

    Affects: Dokumentation |

Dependency Updates

BPC 4.1.0

Release date: 2023-03-27

The following components must be updated with this update: BPC modules | Karaf | OpenSearch | Java

Update of the internal configuration

In this version there have been changes to the internal configuration of the BPC. This affects deployments between BPCs with different versions. Additional steps are also required when downgrading the BPC.

Further information can be found on the page Versionierung der internen BPC Konfiguration.

Breaking Changes

You should read the descriptions in this section carefully. It may contain instructions that you must follow for an update.

  • ChildLog soll kein "eval" für Filter und Renderer verwenden BPC-5375

    To avoid scripting attacks, renderers can now no longer be defined as JavaScript in text form on the columns. Custom renderer functions can be referenced as described here. Formatting functions from Ext.util.Format can be used by specifying the formatter. See: column_configuration.

    Affects: Process Monitoring |

  • Umstellung auf OpenSearch BPC-5819

  • Update Karaf BPC-6709

    An update of the Karaf is mandatory for this BPC update.

    Customer themes and custom BPC modules must be adapted so that the Web-ContextPath and Webapp-Context in the manifest file must begin with a /. To achieve this usually the file build.gradle can be adapted. An example can be seen https://bitbucket.org/virtimo/bpc-theme-template/commits/469a13171aa82655b6f0475b38a561d2ebceee52 [https://bitbucket.org/virtimo/bpc-theme-template/commits/469a13171aa82655b6f0475b38a561d2ebceee52][here].

    In the configuration file [karaf]/etc/org.ops4j.pax.web.cfg parameters have been renamed:

    org.ops4j.pax.web.ssl.password -> org.ops4j.pax.web.ssl.keystore.password
    org.ops4j.pax.web.ssl.keypassword -> org.ops4j.pax.web.ssl.key.password
  • Unsere Backend API als Maven Modul BPC-6872

    We had to move some interfaces/classes from the de.virtimo.bpc.core to the de.virtimo.bpc.api package.

    If you compile your code for 4.0.8 or 4.1 and get errors, then please adjust the Java imports. In most cases you just have to replace .core. by .api.. Otherwise delete the import and let the IDE find it for you.

    And please be sure that you do not have <Import-Package> statements in your pom.xml to the following packages:

    • de.virtimo.bpc.core.exception

    • de.virtimo.bpc.auth.*

    • de.virtimo.bpc.core.es.querybuilder

  • Package der Util-Klassen aus dem 'util'-Modul anpassen BPC-6886

    In case you used BPC Core utils classes.

    Please adjust your Java import statements

    • OLD : de.virtimo.bpc.core.utils.*

    • NEW : de.virtimo.bpc.util.*

    And your pom.xml (<Import-Package>)

    • OLD : de.virtimo.bpc.core.utils;version="[4.0,5.0)",

    • NEW : de.virtimo.bpc.util;version="[4.0,5.0)",

  • BpcTrustStoreUtil ins util-Modul verschieben BPC-6924

    In case you used

    de.virtimo.bpc.core.utils.BpcTrustStoreUtil.setTo(…​)

    then please replace it with

    de.virtimo.bpc.util.BpcTrustStore.getInstance().setTo(…​)

    Affects: BPC Core |

  • Umbenennung von Attributen im Context der Plugin Hooks BPC-7379

    For BPC developers Plugins are passed a context when called. Two attributes in the context object have been renamed. moduleId became baseModuleId and instanceId became moduleId.

  • Notwendige Anpassung der Backend-Module bei Verwendung der BPC Annotations: @BpcUserSessionRequired, …​ BPC-7384

    Relevant for BPC Module Developers / Important for BPC Developers.

    This is only necessary, when you use one of the following annotations in your backend modules/bundles:

    • @BpcUserSessionRequired

    • @BpcRoleRequired

    • @BpcRightRequired

    • @BpcRoleOrRightRequired

    • @BpcHardcodedBasicAuthentication

    If this is the case, then please update your resources/OSGI-INF/blueprint/context.xml

    and replace

     <bean id="bpcJAXRSInvoker" class="en.virtimo.bpc.jaxrs.BpcJAXRSInvoker"/>

    with

     <bean id="bpcJAXRSInvoker" class="en.virtimo.bpc.jaxrs.BpcJAXRSInvoker" init-method="onStartup" destroy-method="onShutdown">     <argument ref="blueprintBundleContext"/>  </bean>

  • Starke Passwort Verschlüsselung BPC-7390

    JAAS Karaf Passwords

    For the passwords in the [karaf]/etc/users.properties a stronger encryption is used by default from this Karaf version on.

    If these passwords cannot be adjusted, then make the following adjustments to the [karaf]/etc/org.apache.karaf.jaas.cfg configuration file. This will revert to using the previous (weak) encryption.

     encryption.name = basic  encryption.algorithm = SHA-512

    JAAS JDBC passwords

    The Virtimo JAAS JDBC implementation now uses the password encryption settings of the file: [karaf]/etc/org.apache.karaf.jaas.cfg These do not match the previously used password encryption.

    So if JAAS JDBC was already used and the existing (weak) hashes should be used further, please create the following file: [karaf]/etc/de.virtimo.bpc.core.auth.jaas.jdbc.cfg

    The following content sets the previous (weak) configuration:

    • until BPC 4.0.15

       encryption.enabled = true
       encryption.name = basic
       encryption.algorithm = SHA-512
       encryption.encoding = hexadecimal
       encryption.prefix = {CRYPT}
       encryption.suffix = {CRYPT}

      Unfortunately, all password hashes must then be supplemented with the prefix and suffix in the database table. Example: PasswordHash{CRYPT}PasswordHash{CRYPT}. As of BPC version 4.0.15 this adjustment is no longer necessary.

    • from BPC 4.0.15

       encryption.enabled = true
       encryption.name = basic
       encryption.algorithm = SHA-512
       encryption.encoding = hexadecimal
       encryption.prefix =
       encryption.suffix =

      Thus, as before, the passwords are stored in the database table without a prefix and suffix.

    To use a more secure hash algorithm like argon2, all user passwords must be recreated and thus reset.

    In both cases, restart the Karaf.

    Affects: BPC Core | Dokumentation | Karaf |

  • Content Security Policy BPC-7443

    A Content Security Policy(CSP) is set via HTTP header. This can affect custom modules, INUBIT WebApps or integrated third-party applications. To customize the CSP see Content Security Policy.

  • Apache CXF BPC-7546

    We used CXF version 3.5.4 in our previous Karaf releases. This CXF version provides Jackson in version 2.13.4. Now we ship Karaf with CXF 3.5.5, which provides Jackson in the version 2.14.1.

    Please update the CXF version (3.5.4 → 3.5.5) in your pom.xml. And more important is to update also the used Jackson version. For this check if you have an Import-Package statement for it. This must be added or adjusted when you use Jackson functionality like the ObjectMapper class.

    Replace

    <Import-Package>
      ...
      com.fasterxml.jackson.*;version="[2.11.0,2.14.0)",
      ...
    </Import-Package>

    with

    <import package>
      ...
      com.fasterxml.jackson.*;version="[2.13.4,2.15.0)",
      ...
    </Import-Package>
  • Weitere Dashboard (Widget) Zustände sollen lokal vorgehalten werden BPC-7809

    Dashboard setting Dashboard_Responsive(ID: module_isResponsive) and Dashboard_Layout(ID: layout_config) are omitted. Dashboards are now "responsive" by default and take advantage of the available space in their column. Widget can now be adjusted in height and width by the user. These changes are kept in the browser, but can also be saved to the dashboard by authorized users. Resetting local change is no longer possible on the widget, but is offered via a button in one of the toolbars. For the button to appear, the value "resetUserState" must be added to one of the settings ModuleHeader_Content, Toolbar_LeftContent or Toolbar_RightContent.

  • ReplicationInfoService durch einen Endpunkt ersetzen BPC-7822

    Replication status information is no longer displayed on the monitor. This status information will be added via plugin in a future release.

  • Unser 'Checker' und 'BpcService' Interface verschieben BPC-6864

    In case you used

    de.virtimo.bpc.core.utils.ServiceUtil.unregisterService(bundleContext, ServiceRegistration, Class);

    then please use

    de.virtimo.bpc.api.BpcService.unregister(bundleContext, ServiceRegistration, Class);

    instead.

    Affects: BPC Core |

  • Core Module wie die Benutzerverwaltung funktionieren in Untermenüs der Navigation nicht BPC-7784

    For BPC module developers

    There was an undocumented function that reacted globally, on all components with the attribute targetModule, to the event click. This passed the value of targetModule to the BpcCommon.Api.showModule method, triggering navigation to that module. This function has now been removed. If you have used the attribute targetModule, e.g. on buttons, for navigation, you have to set this up by a separate handler that only affects your components.

    Affects: BPC Core |

You should read the descriptions in this section carefully. These are recommended instructions that are advised during an update.

  • Relevante Karaf Konfigurationen aus Karaf Ordner "ziehen" BPC-6681

    A big request, when updating Karaf do not simply copy all etc files from the old installation to the new one. This may result in new Karaf options not being set and in the worst case the Karaf will not start.

    And if somehow possible, do not change any [karaf]/etc files manually and instead make the adjustments via bpc.env.sh (Linux/macOS) or bpc.env.cmd (Windows). This makes Karaf updates much easier and can be used in BPC versions >= 3.4. See Zentrale Konfigurationsdatei.

    Per override values of etc files most customizations can be done without editing an etc file.

    For example, if the path to the keystore and truststore files should be set differently: The definition of the paths are in the configuration file [karaf]/etc/org.ops4j.pax.web.cfg in the options org.ops4j.pax.web.ssl.keystore and org.ops4j.pax.web.ssl.truststore.

    Now to set the paths of the two options differently, two environment variables can be added in the bpc.env.sh:

     export ORG_OPS4J_PAX_WEB_ORG_OPS4J_PAX_WEB_SSL_KEYSTORE=/opt/bpc.env/ssl/virtimo_keystore.jks  export ORG_OPS4J_PAX_WEB_ORG_OPS4J_PAX_WEB_SSL_TRUSTSTORE=/opt/bpc.env/ssl/virtimo_truststore.jks

    Another example how to set the option en.virtimo.bpc.core.cfg in the [karaf]/etc/de.virtimo.bpc.core.maintenancemode.fileSystemLimitInMB:

     export DE_VIRTIMO_BPC_CORE_DE_VIRTIMO_BPC_CORE_MAINTENANCEMODE_FILESYSTEMLIMITINMB=4096

    One limitation will be fixed with the next Karaf update. The deploy directory ([karaf]/deploy) cannot currently be set by environment variable due to a "bug". This affects the felix.fileinstall.dir option in the [karaf]/etc/org.apache.felix.fileinstall-deploy.cfg configuration file.

    Three files should be copied or replaced with symbolic links depending on how they are used:

    • [karaf]/etc/users.properties

    • [karaf]/etc/org.ops4j.pax.logging.cfg

    • [karaf]/etc/en.virtimo.bpc.core.auth.jaas.jdbc.queries.cfg

    Of course, this is only necessary if they have been customized at all. The options in the two cfg files could also be set via environment variables, but then some environment variables would have to be set.

    Affects: Dokumentation |

  • Karaf Update BPC-7374

    An update of the Karaf is strongly recommended for security reasons.

    Affects: BPC Core | Karaf |

New features

  • BPC Sharing BPC-144

  • Externe Anwendungen als Plugin bereitstellen BPC-596

  • External Content Url mit dynamischen URL Parametern ausstatten BPC-1729

    Affects: BPC Core | Dokumentation |

  • BPC Storage Service BPC-3367

  • Personalisierte Monitor Ansichten BPC-5331

    Monitor views created with a BPC version < 2.1.6 are no longer supported. To preserve these views, they must be opened and saved once in the "Manage Views" dialog. This process will save the views in the correct format.

  • Deeplink-Button BPC-6729

  • Editor für die Backup Jobs BPC-6768

    Affects: BPC Core |

  • VIMON Modul BPC-6936

    Affects: Dokumentation |

  • Setting Filter BPC-6949

    Affects: BPC Core |

  • pax-jdbc Features automatisch per bpc.env.sh installieren BPC-7260

    Affects: BPC Core | Dokumentation | Karaf |

  • Passwortprüfung gegen regulären Ausdruck BPC-7440

    Affects: BPC Core | Dokumentation |

  • DynamicFieldLabel Plugin für Textfelder BPC-7815

    For BPC module developers

    ExtJS components that use the mixin Ext.form.Labelable and thus the attributes labelWidth and fieldLabel can have the plugin dynamically set the labelWidth based on the actual text width.

    example
         {
             xtype : "textfield",
             plugins : ["bpcDynamicFieldLabel"],
             fieldLabel : "label"
          }

    If required, the additional spacing can be configured using labelOffset on the plugin:

    example with configured labelOffset
         {
             xtype : "textfield",
             plugins: {
                 bpcDynamicFieldLabel: {
                     labelOffset: 10
                 }
             },
             fieldLabel: "label"
          }

    Affects: BPC Core | Dokumentation |

  • Reihenfolge der Spalten beim Prozessvorschau Widget konfigurieren BPC-2224

    Affects: Process Monitoring |

  • Sprungspalte soll es ermöglichen einen Link zu kopieren ohne direkt dort hin zu springen BPC-4152

Improvements

  • Option zum Abschalten des CSRF Token Checks an Backendconnections vom Typ httpproxy BPC-7370

    Affects: BPC Core | Dokumentation |

  • Spaltenreferenzen aufräumen BPC-2747

    Affects: Process Monitoring |

  • Jumps im neuen Browsertab öffnen BPC-3136

    Affects: Dokumentation |

  • Monitor Widgets auf Ansicht referenzierbar machen BPC-5154

  • Berechtigungen an Modulen bei Navigation berücksichtigen BPC-6139

    Affects: BPC Core |

  • Analysis Modul Widget Variablen und Update View umbauen BPC-6146

    Affects: Data Analysis |

  • Refactoring von Report Varibalen Detailansicht BPC-6649

    Affects: Data Analysis |

  • API Key ID BPC-6666

    Affects: BPC Core | Dokumentation |

  • Relevante Karaf Konfigurationen aus Karaf Ordner "ziehen" BPC-6681

    A big request, when updating Karaf do not simply copy all etc files from the old installation to the new one. This may result in new Karaf options not being set and in the worst case the Karaf will not start.

    And if somehow possible, do not change any [karaf]/etc files manually and instead make the adjustments via bpc.env.sh (Linux/macOS) or bpc.env.cmd (Windows). This makes Karaf updates much easier and can be used in BPC versions >= 3.4. See Zentrale Konfigurationsdatei.

    Per override values of etc files most customizations can be done without editing an etc file.

    For example, if the path to the keystore and truststore files should be set differently: The definition of the paths are in the configuration file [karaf]/etc/org.ops4j.pax.web.cfg in the options org.ops4j.pax.web.ssl.keystore and org.ops4j.pax.web.ssl.truststore.

    Now to set the paths of the two options differently, two environment variables can be added in the bpc.env.sh:

     export ORG_OPS4J_PAX_WEB_ORG_OPS4J_PAX_WEB_SSL_KEYSTORE=/opt/bpc.env/ssl/virtimo_keystore.jks  export ORG_OPS4J_PAX_WEB_ORG_OPS4J_PAX_WEB_SSL_TRUSTSTORE=/opt/bpc.env/ssl/virtimo_truststore.jks

    Another example how to set the option en.virtimo.bpc.core.cfg in the [karaf]/etc/de.virtimo.bpc.core.maintenancemode.fileSystemLimitInMB:

     export DE_VIRTIMO_BPC_CORE_DE_VIRTIMO_BPC_CORE_MAINTENANCEMODE_FILESYSTEMLIMITINMB=4096

    One limitation will be fixed with the next Karaf update. The deploy directory ([karaf]/deploy) cannot currently be set by environment variable due to a "bug". This affects the felix.fileinstall.dir option in the [karaf]/etc/org.apache.felix.fileinstall-deploy.cfg configuration file.

    Three files should be copied or replaced with symbolic links depending on how they are used:

    • [karaf]/etc/users.properties

    • [karaf]/etc/org.ops4j.pax.logging.cfg

    • [karaf]/etc/en.virtimo.bpc.core.auth.jaas.jdbc.queries.cfg

    Of course, this is only necessary if they have been customized at all. The options in the two cfg files could also be set via environment variables, but then some environment variables would have to be set.

    Affects: Dokumentation |

  • DetailFenster im Chart Editor bei Tabellen und Template Charts ohne Funktion BPC-6699

    Affects: Data Analysis |

  • Indizes von Backupjobs initial alpahabetisch sortieren BPC-6844

    Affects: BPC Core |

  • User info wenn Navigationstoolbar ausgeblendet is BPC-6852

    Affects: BPC Core |

  • Icon Only Modus in Navigation vereinfachen BPC-6861

    Affects: BPC Core |

  • Unsere Backend API als Maven Modul BPC-6872

    We had to move some interfaces/classes from the de.virtimo.bpc.core to the de.virtimo.bpc.api package.

    If you compile your code for 4.0.8 or 4.1 and get errors, then please adjust the Java imports. In most cases you just have to replace .core. by .api.. Otherwise delete the import and let the IDE find it for you.

    And please be sure that you do not have <Import-Package> statements in your pom.xml to the following packages:

    • de.virtimo.bpc.core.exception

    • de.virtimo.bpc.auth.*

    • de.virtimo.bpc.core.es.querybuilder

  • Package der Util-Klassen aus dem 'util'-Modul anpassen BPC-6886

    In case you used BPC Core utils classes.

    Please adjust your Java import statements

    • OLD : de.virtimo.bpc.core.utils.*

    • NEW : de.virtimo.bpc.util.*

    And your pom.xml (<Import-Package>)

    • OLD : de.virtimo.bpc.core.utils;version="[4.0,5.0)",

    • NEW : de.virtimo.bpc.util;version="[4.0,5.0)",

  • Hochladen von Lizenzen im neuen Format BPC-6921

    Affects: BPC Core |

  • BpcTrustStoreUtil ins util-Modul verschieben BPC-6924

    In case you used

    de.virtimo.bpc.core.utils.BpcTrustStoreUtil.setTo(…​)

    then please replace it with

    de.virtimo.bpc.util.BpcTrustStore.getInstance().setTo(…​)

    Affects: BPC Core |

  • Modul Navigator in Plugin überführen BPC-6938

    The module navigator is now provided as a plugin. The name of the plugin is: BPC Module Navigator, plugin ID: bpcModuleNavigator. Existing breadcrumb configuration is automatically migrated to plugin configuration.

    Affects: BPC Core | Dokumentation |

  • Lizenzinformationen aus Status entfernen BPC-6970

    Affects: BPC Core |

  • Backup-Editor: Bei der Backup-Historie funktioniert die Sortierung nach Datum nicht BPC-6977

    Affects: BPC Core |

  • Statuswechsel in Prozess Aktionen integrieren BPC-7124

    The "Change status" function has been moved to the "Actions" menu.

  • Umbenennung von Attributen im Context der Plugin Hooks BPC-7379

    For BPC developers Plugins are passed a context when called. Two attributes in the context object have been renamed. moduleId became baseModuleId and instanceId became moduleId.

  • Default-Instanz des External Content Moduls mit Url auf die BPC-Produkt-Dokumentation erstellen. BPC-7467

    Affects: BPC Core |

  • Interval selector im Backup editor robuster gestalten BPC-7484

    Affects: BPC Core |

  • OIDC Login Weiterleitung an CSP anpassen BPC-7552

    Affects: BPC Core |

  • IdP Mapping direkt an einem Benutzer BPC-7792

    Affects: BPC Core | Dokumentation |

  • Anzeige von Name für Plugin und Hook anstatt der ID mit Unterstützung von Language Keys als Namen BPC-7805

    Affects: BPC Core |

  • Weitere Dashboard (Widget) Zustände sollen lokal vorgehalten werden BPC-7809

    Dashboard setting Dashboard_Responsive(ID: module_isResponsive) and Dashboard_Layout(ID: layout_config) are omitted. Dashboards are now "responsive" by default and take advantage of the available space in their column. Widget can now be adjusted in height and width by the user. These changes are kept in the browser, but can also be saved to the dashboard by authorized users. Resetting local change is no longer possible on the widget, but is offered via a button in one of the toolbars. For the button to appear, the value "resetUserState" must be added to one of the settings ModuleHeader_Content, Toolbar_LeftContent or Toolbar_RightContent.

  • ReplicationInfoService durch einen Endpunkt ersetzen BPC-7822

    Replication status information is no longer displayed on the monitor. This status information will be added via plugin in a future release.

  • Felder für Organisations-, Rollen-, Rechteauswahl soll Übersetzung von Werten in Basisklasse übernehmen BPC-7844

    Affects: BPC Core | Data Analysis |

  • Obsolete inubit Lizenz Einstellungen aus der Doku und cfg-Datei entfernen BPC-6728

    Affects: BPC Core | Dokumentation | Karaf |

  • Unser 'Checker' und 'BpcService' Interface verschieben BPC-6864

    In case you used

    de.virtimo.bpc.core.utils.ServiceUtil.unregisterService(bundleContext, ServiceRegistration, Class);

    then please use

    de.virtimo.bpc.api.BpcService.unregister(bundleContext, ServiceRegistration, Class);

    instead.

    Affects: BPC Core |

  • Login Monitoring - "Nutzer imitieren" - Audit Log vereinheitlichen BPC-6927

    Affects: BPC Core |

  • Backup-Editor: Buttons der Backup-Historie vereinheitlichen BPC-6976

    Affects: BPC Core |

  • Backup-Editor: Neuen Button-Typ zum Start eines Backups verwenden BPC-6978

    Affects: BPC Core |

  • Backup-Editor: Info wenn keine Backups vorliegen BPC-6979

    Affects: BPC Core |

  • Backup-Editor: BPC wird nach dem wiederherstellen neu geladen BPC-6980

    Affects: BPC Core |

  • Backup-Editor: UI beim Wiederherstellen sperren BPC-6981

    Affects: BPC Core |

  • Lizenz Einstellung 'License_Overview' (ID = licencedModules) wird immer wieder aktualisiert BPC-7076

    Affects: BPC Core |

  • de.virtimo.bpc.core.auth.jaas.jdbc.queries.cfg mit dem Karaf ausliefern BPC-7275

    Affects: BPC Core | Karaf |

Security

  • com.google.code.gson:gson:2.2.4 | CVE-2022-25647 BPC-6692

    Affects: Data Analysis |

  • Setzen von sameSite Attribut an Cookies BPC-4885

    Affects: BPC Core | Karaf |

  • ChildLog soll kein "eval" für Filter und Renderer verwenden BPC-5375

    To avoid scripting attacks, renderers can now no longer be defined as JavaScript in text form on the columns. Custom renderer functions can be referenced as described here. Formatting functions from Ext.util.Format can be used by specifying the formatter. See: column_configuration.

    Affects: Process Monitoring |

  • Incomplete or No Cache-Control Header Set BPC-6395

    Affects: Karaf |

  • org.ops4j.pax.logging:pax-logging-log4j2:2.0.16 | CVE-2017-5645 BPC-6714

    Affects: Karaf |

  • User Session IP pinning BPC-6947

    Please ensure that when using a proxy, the https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For [https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For][X-Forwarded-For] header is set. This also applies to the WebSocket. See also IP Pinning.

    Affects: BPC Core | Dokumentation |

  • Starke Passwort Verschlüsselung BPC-7390

    JAAS Karaf Passwords

    For the passwords in the [karaf]/etc/users.properties a stronger encryption is used by default from this Karaf version on.

    If these passwords cannot be adjusted, then make the following adjustments to the [karaf]/etc/org.apache.karaf.jaas.cfg configuration file. This will revert to using the previous (weak) encryption.

     encryption.name = basic  encryption.algorithm = SHA-512

    JAAS JDBC passwords

    The Virtimo JAAS JDBC implementation now uses the password encryption settings of the file: [karaf]/etc/org.apache.karaf.jaas.cfg These do not match the previously used password encryption.

    So if JAAS JDBC was already used and the existing (weak) hashes should be used further, please create the following file: [karaf]/etc/de.virtimo.bpc.core.auth.jaas.jdbc.cfg

    The following content sets the previous (weak) configuration:

    • until BPC 4.0.15

       encryption.enabled = true
       encryption.name = basic
       encryption.algorithm = SHA-512
       encryption.encoding = hexadecimal
       encryption.prefix = {CRYPT}
       encryption.suffix = {CRYPT}

      Unfortunately, all password hashes must then be supplemented with the prefix and suffix in the database table. Example: PasswordHash{CRYPT}PasswordHash{CRYPT}. As of BPC version 4.0.15 this adjustment is no longer necessary.

    • from BPC 4.0.15

       encryption.enabled = true
       encryption.name = basic
       encryption.algorithm = SHA-512
       encryption.encoding = hexadecimal
       encryption.prefix =
       encryption.suffix =

      Thus, as before, the passwords are stored in the database table without a prefix and suffix.

    To use a more secure hash algorithm like argon2, all user passwords must be recreated and thus reset.

    In both cases, restart the Karaf.

    Affects: BPC Core | Dokumentation | Karaf |

  • Content Security Policy BPC-7443

    A Content Security Policy(CSP) is set via HTTP header. This can affect custom modules, INUBIT WebApps or integrated third-party applications. To customize the CSP see Content Security Policy.

  • Host Key Algorithmus auf ECDSA umstellen BPC-7696

    Affects: Karaf |

  • org.apache.cxf.karaf:cxf-karaf-commands:3.5.4 | CVE-2018-11788 BPC-7265

    Affects: Karaf |

  • org.springframework:spring-core:5.3.22 | CVE-2016-1000027 BPC-7266

    Affects: Karaf |

  • org.apache.activemq:activemq-broker:5.16.5 | CVE-2015-3208 BPC-7267

    Affects: Karaf |

Bugs

  • Es können nicht alle Bundles gestartet werden BPC-7268

    Affects: Karaf |

  • API Keys gehen beim Speichern im Editor kaputt BPC-6770

    Affects: BPC Core |

  • Datenbankverbindungen werden ohne Pool angelegt BPC-6916

    Affects: BPC Core |

  • BPC: Prüfung auf abgelaufene Session funktioniert teilweise nicht korrekt BPC-6512

    Affects: BPC Core |

  • Module im Status Failure nach Serverreboot oder Karaf Restart BPC-6587

    For the BPC backend module developers. Please make sure in the src/main/resources/OSGI-INF/blueprint/context.xml (if used; do not create when it does not exist) that the cxf:bus is set as follows:

     <!-- BPC-6587 [/browse/BPC-6587] - org.apache.cxf.BusException: No DestinationFactory was found for the namespace http://cxf.apache.org/transports/http [http://cxf.apache.org/transports/http] -→  <!-- It seems that when set it waits for CXF first. -→  <!-- To get rid of the CXF loggings …​ Karaf-Konsole: log:set ERROR org.apache.cxf -→  <cxf:bus>    <cxf:features>      <cxf:logging />    </cxf:features>  </cxf:bus>

  • mariadb treiber lässt sich nicht auf offline server installieren BPC-6747

    Affects: Karaf |

  • Deployment BPC 3 nach BPC 4 geht nicht BPC-6759

    Deployment from BPC 3 to BPC 4 works only if the deployment is controlled/started from BPC 4.

    Affects: BPC Core |

  • Texte von unseren Bundles können unter Umständen nicht mehr von 3rd Party Modulen überschrieben werden BPC-6815

    Affects: BPC Core |

  • Exception bei jedem Start vom BE-Core (IllegalArgumentException: duplicate element:) BPC-6818

    Affects: BPC Core |

  • Temporäre Indizes sollten nicht im Backup editor aufgelistet werden BPC-6849

    Affects: BPC Core |

  • Keycloak : Refreshed accessToken is not getting updated in userSession BPC-6883

    Affects: BPC Core |

  • Updating user language failed BPC-6922

    Affects: BPC Core |

  • organisation mit JSON in BPC-Session führt zu Fehler bei DataFilter BPC-6958

    Affects: Process Monitoring |

  • Datensatzeditor bei Nicht-Admin-Usern defekt BPC-7111

    Affects: BPC Core |

  • Nach dem Passwortändern werden Rechte im Identity manager nicht mehr gezeigt BPC-7112

    Affects: BPC Core |

  • Replikation legt Index ohne Alias an BPC-7473

    Affects: BPC Core |

  • Deployment Export z.B. von API Keys werden beim Karaf Start nicht importiert (wenn er bereits läuft gibt es kein Problem) BPC-7487

    Affects: BPC Core |

  • CSP Header forciert https auf http Port BPC-7778

    Affects: Karaf |

  • Fix Text beim Kopieren in die Zwischenablage BPC-7791

  • Unterer Rand im Date-Range-Pickers abgeschnitten BPC-7838

    Affects: BPC Core |

  • Default Analysis Datensatz Modifier funktioniert nicht BPC-7842

    Affects: Data Analysis |

  • Karaf Anmeldung geht nicht über /bin/client -u virtimo BPC-7414

  • Core Module wie die Benutzerverwaltung funktionieren in Untermenüs der Navigation nicht BPC-7784

    For BPC module developers

    There was an undocumented function that reacted globally, on all components with the attribute targetModule, to the event click. This passed the value of targetModule to the BpcCommon.Api.showModule method, triggering navigation to that module. This function has now been removed. If you have used the attribute targetModule, e.g. on buttons, for navigation, you have to set this up by a separate handler that only affects your components.

    Affects: BPC Core |

Documentation

Dependency Updates

  • Update Karaf BPC-6709

    An update of the Karaf is mandatory for this BPC update.

    Customer themes and custom BPC modules must be adapted so that the Web-ContextPath and Webapp-Context in the manifest file must begin with a /. To achieve this usually the file build.gradle can be adapted. An example can be seen https://bitbucket.org/virtimo/bpc-theme-template/commits/469a13171aa82655b6f0475b38a561d2ebceee52 [https://bitbucket.org/virtimo/bpc-theme-template/commits/469a13171aa82655b6f0475b38a561d2ebceee52][here].

    In the configuration file [karaf]/etc/org.ops4j.pax.web.cfg parameters have been renamed:

    org.ops4j.pax.web.ssl.password -> org.ops4j.pax.web.ssl.keystore.password
    org.ops4j.pax.web.ssl.keypassword -> org.ops4j.pax.web.ssl.key.password
  • Karaf Update BPC-7374

    An update of the Karaf is strongly recommended for security reasons.

    Affects: BPC Core | Karaf |

  • Update Java 17 BPC-7378

    The BPC now runs under Java 17 and Java 11. It is recommended to switch to Java 17 as soon as possible, since the official support for Java 11 is expiring.

    Affects: BPC Core | Karaf |

  • Update Pax Web BPC-7412

    Affects: Karaf |

  • Apache CXF BPC-7546

    We used CXF version 3.5.4 in our previous Karaf releases. This CXF version provides Jackson in version 2.13.4. Now we ship Karaf with CXF 3.5.5, which provides Jackson in the version 2.14.1.

    Please update the CXF version (3.5.4 → 3.5.5) in your pom.xml. And more important is to update also the used Jackson version. For this check if you have an Import-Package statement for it. This must be added or adjusted when you use Jackson functionality like the ObjectMapper class.

    Replace

    <Import-Package>
      ...
      com.fasterxml.jackson.*;version="[2.11.0,2.14.0)",
      ...
    </Import-Package>

    with

    <import package>
      ...
      com.fasterxml.jackson.*;version="[2.13.4,2.15.0)",
      ...
    </Import-Package>
  • Update org.osgi.service.jdbc BPC-7711

    Affects: BPC Core |

  • Update DOMPurify BPC-7774

    Affects: BPC Core |

  • Update vibur-object-pool BPC-7697

    Affects: BPC Core |

  • Update Mockito BPC-7700

    Affects: BPC Core |

  • Update json-schema-validator BPC-7701

    Affects: BPC Core |

  • Update json BPC-7704

    Affects: BPC Core |

  • Update Prometheus BPC-7706

    Affects: BPC Core |

  • Update Apache POI (Excel Generierung) BPC-7707

    Affects: Process Monitoring |

  • Update/Remove javaee-web-api BPC-7710

    Affects: BPC Core |

Other

  • Umstellung auf OpenSearch BPC-5819

  • Backup Konfiguration vereinheitlichen BPC-6235

    Affects: BPC Core | Dokumentation | Forms |

  • Änderung der Schriftart für bessere Lesbarkeit bei komprimierter Übertragung BPC-6967

    The font has been changed from "Lato Light" to "Lato". This means that the font is not quite as fine and is thus better displayed during a compressed transfer (e.g.: when sharing the screen in meeting tools or using RDP).

    In order for customer themes to also adopt this change, they would need to be rebuilt with "bpc-theme" >= version 4.1.0.

    Affects: BPC Core |

  • Notwendige Anpassung der Backend-Module bei Verwendung der BPC Annotations: @BpcUserSessionRequired, …​ BPC-7384

    Relevant for BPC Module Developers / Important for BPC Developers.

    This is only necessary, when you use one of the following annotations in your backend modules/bundles:

    • @BpcUserSessionRequired

    • @BpcRoleRequired

    • @BpcRightRequired

    • @BpcRoleOrRightRequired

    • @BpcHardcodedBasicAuthentication

    If this is the case, then please update your resources/OSGI-INF/blueprint/context.xml

    and replace

     <bean id="bpcJAXRSInvoker" class="en.virtimo.bpc.jaxrs.BpcJAXRSInvoker"/>

    with

     <bean id="bpcJAXRSInvoker" class="en.virtimo.bpc.jaxrs.BpcJAXRSInvoker" init-method="onStartup" destroy-method="onShutdown">     <argument ref="blueprintBundleContext"/>  </bean>

  • Analysis: Elasticsearch durch OpenSearch ersetzen BPC-7454

    Affects: BPC Core | Data Analysis |

  • Umstellung von Nashorn Engine auf GraalVM BPC-7485

    Affects: Data Analysis | Forms |

  • Cypress-Test Logger Konfig Anpassung nach der Umstellung auf OpenSearch BPC-7695

  • Percolatoren werden nicht gelöscht BPC-7833

    Affects: BPC Core |