Release Notes

Release Notes - TopEase - Version 7.2.0
** Maintenance
  * [TOPEASE-5958] - Security issue within H2 library requires library update to new major version
  * [TOPEASE-6484] - Update JRE to version 8u362

** Bug
  * [TOPEASE-4235] - OWASP: fix potential zip-slip issue
  * [TOPEASE-6455] - Mail service with TLS does not work
  * [TOPEASE-6482] - SendMailRule.getXpathProperty returns wrong result when an array is expected
  * [TOPEASE-6506] - W3: Process Value-Flow Tab remains empty some time
  * [TOPEASE-6512] - Changes to LAT_WORKAROUND might produce delta markers where there are no deltas at all
  * [TOPEASE-6534] - Update org.json library
  * [TOPEASE-6542] - Replication does not synchronize T3D LAT
  * [TOPEASE-6556] - SendMailRule: object hyperlinks are not always rendered correctly
  * [TOPEASE-6571] - Import of values on T3D-LAT is not possible
  * [TOPEASE-6580] - Prevent duplicated creation of the same sequence flow between Gateway and following object
  * [TOPEASE-6610] - Designer does not save or load T3d LAT values
  * [TOPEASE-6619] - XPath Synthetic Relation function caching problem when Schema extensions are used

** New Feature
  * [TOPEASE-6583] - Use FTE from Responsible when aggregating a BIA
  * [TOPEASE-6692] - Support description for all CustomType and ResourceType settings

** Improvement
  * [TOPEASE-6347] - BPMN 2 Shape support improvements
  * [TOPEASE-6348] - BPMN: Provide support for an "Instantiating Receive Task"
  * [TOPEASE-6349] - BPMN: Combined Loop and Compensation Markers
  * [TOPEASE-6427] - BPMN: support selecting multiple trigger types on events
  * [TOPEASE-6452] - BPMN: Missing export of "ad-hoc" for subprocesses
  * [TOPEASE-6453] - BPMN: Missing import of "loop" (step-type)
  * [TOPEASE-6465] - W3-Performance: Many queries defined in app(-config) are far away from being efficient
  * [TOPEASE-6469] - Set Access Permissions on 3D-Relations in Designer
  * [TOPEASE-6479] - Ant Task: createAssessmentTask, support dateQuery as parameter
  * [TOPEASE-6503] - Use extended Evaluation tables in BCM Overview report
  * [TOPEASE-6509] - Ability to define RPO/RTO settings with a user-readable name while having the identifier be something convertible to integer
  * [TOPEASE-6537] - Improve performance of sort operations by using caches inside Comparators
  * [TOPEASE-6544] - Ability to provide checkbox filter items for Business View using an XPath query
  * [TOPEASE-6606] - UpdatePermissionsRule should work incrementally
  * [TOPEASE-6607] - The XPath Synthetic relation function still uses sorted access to peers
  * [TOPEASE-6617] - Write Rule version into logfile when loading it into the classpath
  * [TOPEASE-6632] - CsvToXml converter change breaks backward compatibility for leading and trailing whitespace
  * [TOPEASE-6641] - XPath descendant axis evaluation might get very slow
  * [TOPEASE-6651] - Service Wrapper fails to restart xchange server when it is in memory saturation situation
  * [TOPEASE-6707] - Repository converter does not preserve timestamps
  * [TOPEASE-6709] - Enable jump-to Predefined Value Setting from Predefined Value Editor

Release Notes - TopEase - Version 7.1.37
** Bug
  * [TOPEASE-5257] - Wrong placement of Link-Lables on UML Class Diagram 
  * [TOPEASE-5299] - Inconsistent resolve of inactive groups in ServerRegistry
  * [TOPEASE-6298] - q:map function does not work with NodeSets returned by using '//*'
  * [TOPEASE-6308] - q:sorted() function does not work with a union expression
  * [TOPEASE-6314] - NotificationRule Bug when evaluating certain XPath expression
  * [TOPEASE-6322] - BackendTask execution gets timeout in customer model
  * [TOPEASE-6325] - q:map function does not give correct result when using condition
  * [TOPEASE-6332] - BPMN data flow might use wrong target type on import
  * [TOPEASE-6346] - Exception when moving some "Diagram(Text)Element"s in an imported bpmn diagram
  * [TOPEASE-6357] - BPMN: coordinates of exported DI xml must not be negative
  * [TOPEASE-6359] - BPMN import with wrong coordinates for expanded Sub-Processes
  * [TOPEASE-6360] - Exception during Replication
  * [TOPEASE-6365] - A manually added Group Shape on a Model-Diagram might seem to be in front of other shapes when navigating
  * [TOPEASE-6367] - TopEase Designer: User Management does not work
  * [TOPEASE-6375] - Matrix Feature "Is Validation Point for" not available for Requirement
  * [TOPEASE-6390] - Unable to edit link attributes in Designer in multiple languages
  * [TOPEASE-6413] - Autohistory Rule: first edit of Facts&Figures value is not logged
  * [TOPEASE-6416] - CopyBehaviourRule: support setting new RiskAssessment
  * [TOPEASE-6440] - BPMN: Export does not consider intermediateThrowEvents at all
  * [TOPEASE-6442] - BPMN: Transactions and Event-Subprocesses should be shown as non-atomic always
  * [TOPEASE-6350] - BPMN: Subprocess Marker is shown on top instead of at bottom
  * [TOPEASE-6351] - BPMN Call Activity Shapes should show with thick line

** Improvement
  * [TOPEASE-6083] - Rule UpdateRiskAssessmentByPredefinedValues rule uses hardcoded identifier
  * [TOPEASE-6288] - W3: Provide Address for Resources of Type Location and Infrastructure
  * [TOPEASE-6328] - OWASP, CVE-2022-42003, CVE-2022-42004: security issues in Jackson-databind
  * [TOPEASE-6318] - OWASP: Issues with batik library
  * [TOPEASE-6372] - Excel .xlsx to XML converter for use in importers (Ant task)
  * [TOPEASE-6393] - Add ability to log a threaddump when w3-writelock is held for a too long time
  * [TOPEASE-6402] - Allow Java class calculation for Questionnaire indicators
  * [TOPEASE-6419] - Improve usability of Ant Runner UI
  * [TOPEASE-6423] - RuleTrigger Plugin with increased default size of the rule selection dialog
  * [TOPEASE-6424] - Rule Editor with increased default size
  * [TOPEASE-6352] - BPMN Call Activity, show correct Shape-Marker
  * [TOPEASE-6353] - BPMN: Intermediate throwing Events support completion
  * [TOPEASE-6355] - BPMN: Edit-Support for Call-Activity
  * [TOPEASE-6403] - Default name handling in a multi language setting should behave the same all the time
  * [TOPEASE-6426] - BPMN: rename "Exception" Event trigger to "Error" as defined in BPMN Spec

Release Notes - TopEase - Version 7.1.36
** Bug
  * [TOPEASE-6242] - BPMN import does not correctly import some Activity- and Event Types

** Improvement
  * [TOPEASE-6052] - Master-Diagram functionality needs support in w3 diagrams
  * [TOPEASE-6259] - Provide feedback when diagram-previews are loading
  * [TOPEASE-6261] - XML Exports of permissions are ambiguous
  * [TOPEASE-6285] - AntRunner UI in Designer gets very slow when log gets very large
  * [TOPEASE-6286] - CsvToXmlTask requires too much RAM for large files
  * [TOPEASE-6290] - Ability to filter XMLExport exported items using an xslt
  * [TOPEASE-5257] - Wrong placement of Link-Lables on UML Class Diagram

Release Notes - TopEase - Version 7.1.35
** Maintenance
  * [TOPEASE-6166] - OWASP: Update included xercesJ library to 2.12.2 due to security issue

** Bug
  * [TOPEASE-6190] - Repeated execution of LDAP Synchronizer fails
  * [TOPEASE-6212] - License can not be written if Installer-Instance-ID contains a Backslash
  * [TOPEASE-6215] - NPE while working with assessments in Designer

** New Feature
  * [TOPEASE-6043] - Write Ant-Runner log to a separate file
  * [TOPEASE-6233] - Provide XPath function to convert a java.time.LocalDate to a java.util.Date

** Improvement
  * [TOPEASE-6178] - Designer: Improve performance of User Management
  * [TOPEASE-6184] - WorkflowRules: support GenericAssessment in CounterRule

Release Notes - TopEase - Version 7.1.34
** Maintenance
  * [TOPEASE-6066] - Update JXBrowser to 7.24+ to fix move-cursor issue in designer

** Bug
  * [TOPEASE-5142] - Lines after Gateways often overlap in sequence diagrams
  * [TOPEASE-5903] - LicenseService is broken when server is only reachable through a http proxy or if port 80 is blocked
  * [TOPEASE-5936] - JSP Reports fail when using option 'Individual Reports'
  * [TOPEASE-6125] - Unable to change diagrams in TopEase Designer 7.1.33 
  * [TOPEASE-6127] - Workflow Rules: OnCreationChangeStatusRule creates all accountable entries as deputy
  * [TOPEASE-6130] - Wrong lane used sometimes after adding new activity in swimlane
  * [TOPEASE-6133] - Unneeded bend after gateway in swimlane diagrams
  * [TOPEASE-6143] - Error during XPath execution when date-expression delivers an empty node-set
  * [TOPEASE-6150] - Exception when aggregating certain BIAs
  * [TOPEASE-6154] - Designer editor for text PVs overwrites text when editing (insert mode)

** New Feature
  * [TOPEASE-6117] - WorkflowRules: allow to set Priority and Condition in ChangeAccessRule
  * [TOPEASE-6136] - WorkflowRules: copy assessment answers from previous assessment
  * [TOPEASE-6160] - WorkflowRules: support sending of workflow emails in CopyBehaviourRule

** Improvement
  * [TOPEASE-6012] - BCM-Values inheritance plugin needs enhancement for value flow on detail Activity level
  * [TOPEASE-6021] - WorkflowRules: Improve MoveObject executable for ExecuteOnChangeRule
  * [TOPEASE-6128] - WorkflowRules: support parameter copySubobjects in OnCreationRule
  * [TOPEASE-6165] - Ability to access timeseries in Key Figures (Facts and Figures) using XPath
  * [TOPEASE-6144] - Value flows between sub activities of the same Main-Activity are not relevant in a BIA

Release Notes - TopEase - Version 7.1.33
** Bug
  * [TOPEASE-6041] - SequenceDiagram: container shapes are not rendered expanded
  * [TOPEASE-6045] - Moving a shape in a diagram requires extra mouse-movement between shape selection and possible drag operation

** New Feature
  * [TOPEASE-6067] - Filter Assessment Questionnaires according to domain query (XPath) filter

** Improvement
  * [TOPEASE-6023] - Show object name in diagram tooltip
  * [TOPEASE-6040] - Reporting Interface should have indexed associations
  * [TOPEASE-6035] - Properly save link-points of newly created edges to related objects
  * [TOPEASE-6050] - Restrict drop of RelatedObjects to the "RelatedObjects" Lane

Release Notes - TopEase - Version 7.1.32
** Bug
  * [TOPEASE-6019] - constraint fix should run privileged
  * [TOPEASE-6031] - Ctrl-S in diagram does not work sometimes
  * [TOPEASE-6033] - Unable to fix missing VC flow-peer in diagram editor

** New Feature
  * [TOPEASE-5657] - BIA calculation of asymmetrically modeled process landscapes
  * [TOPEASE-5945] - Ability to edit "related objects" inside the diagram
  * [TOPEASE-5978] - support workflow state as a permission axis
  * [TOPEASE-5979] - support configurable permission priority

** Improvement
  * [TOPEASE-6004] - CopyBehaviourRule: support 3D relations in parameter 'removeRelations'
  * [TOPEASE-6024] - Enum's Name is not available in XPath
  * [TOPEASE-6018] - Add prio and condition to Permission Matrix report
  * [TOPEASE-6028] - Node- and Relation-Labels for the palette should be configurable

Release Notes - TopEase - Version 7.1.31
** Bug
  * [TOPEASE-5728] - W3 vulnerability 'Authentication bypass with UID' (CVE-2021-42115, CVE-2021-42545)
  * [TOPEASE-5735] - W3 vulnerability 'Invalid Datatype (numeric values) to Non-Editable Fields (Denial of  Service)' (CVE-2021-42122)
  * [TOPEASE-5919] - Exception when changing PV-date within different timezones
  * [TOPEASE-5944] - Exception during RepositorySynchronizer.receive() due to previous problem and attempt to reconnect inside web-context
  * [TOPEASE-5959] - Search in designer might fail due to readlock not immediately available
  * [TOPEASE-5960] - Omit excessive logging of PV "" being processed by PV formatter

** New Feature
  * [TOPEASE-5825] - TSM: add ability to profile XChange server using the Flight-Recorder API

** Improvement
  * [TOPEASE-5961] - Prevent TopEase Server start to be interrupted due to a timeout
  * [TOPEASE-5973] - Default Tomcat access log format does not show request duration

Release Notes - TopEase - Version 7.1.30
** Maintenance
  * [TOPEASE-5645] - Update JDOM 1.x to 2.x, then update to fixed 2.x (owasp)
  * [TOPEASE-5912] - log4j update required due to CVE-2021-44228

** New Feature
  * [TOPEASE-5901] - Allow escaping of HTML tags during XML import

** Improvement
  * [TOPEASE-2845] - BPMN Text Annotations should be able to attach to a SequenceObject
  * [TOPEASE-5907] - Unpleasant rendering of Events and Event Labels in BPMN diagrams
  * [TOPEASE-5911] - Renew Code Signing Certificate 2021
  * [TOPEASE-5915] - Autohistory Rule: Improve history log entries for assessments

Release Notes - TopEase - Version 7.1.29
** Maintenance
  * [TOPEASE-5823] - Update Java Runtime to recent version 1.8.0u312
NOTE: Due to the changed JRE, we do not provide a separate update-installer for this release.

** Bug
  * [TOPEASE-5849] - XMLImport uses wrong ChangeType
  * [TOPEASE-5873] - PredefinedValue Filter in ReportWizzard throws Exception
  * [TOPEASE-5877] - Cannot delete object having diagram layout information on some read-only diagram
  * [TOPEASE-5894] - GcAssessment properties are always provided in default language

** New Feature
  * [TOPEASE-5744] -  Execution of server tasks in w3

** Improvement
  * [TOPEASE-5883] - Risk-Map calculation should be able to calculate with %-values

Release Notes - TopEase - Version 7.1.28
** Bug
  * [TOPEASE-5651] - Adding new nodes into an expanded subprocess is visually possible, but fails when storing
  * [TOPEASE-5653] - Unable to save layout of sequence flow diagram with swimlanes in certain cases
  * [TOPEASE-5660] - W3 F&F: total value calculation fails if individual value has only a unit
  * [TOPEASE-5728] - W3 Security issues CVE-2021-42115, CVE-2021-42545
  * [TOPEASE-5729] - W3 Security issue CVE-2021-42116
  * [TOPEASE-5730] - W3 Security issue CVE-2021-42117
  * [TOPEASE-5731] - W3 Security issue CVE-2021-42118
  * [TOPEASE-5732] - W3 Security issue CVE-2021-42119
  * [TOPEASE-5733] - W3 Security issue CVE-2021-42120
  * [TOPEASE-5734] - W3 Security issue CVE-2021-42121
  * [TOPEASE-5735] - W3 Security issue CVE-2021-42122
  * [TOPEASE-5747] - W3 Security issue ID-011 Insufficient Session Timeout

** New Feature
  * [TOPEASE-5282] - TSM: Add ability to change log-levels at runtime
  * [TOPEASE-5738] - Provide ability to query the label of a schema object type incl. "subtypes"
  * [TOPEASE-5803] - Ability to see actual zoom level in diagrams

** Improvement
  * [TOPEASE-5656] - Ability to move objects from/to Subprocesses in BPMN Diagrams
  * [TOPEASE-5796] - Ask before rejecting changes when user presses "X" button
  * [TOPEASE-5801] - Enable the Diagram overview by default in edit mode
  * [TOPEASE-5696] - Enable having Risks with mixed RiskDefinitions on the same RiskMatrix
  * [TOPEASE-5746] - W3 Security issue CVE-2021-42123
  * [TOPEASE-5750] - W3 Security issue ID-014 Visible Detailed Error/Debug Page

Release Notes - TopEase - Version 7.1.27
** Bug
  * [TOPEASE-5508] - ArchitectureDiagram does not show transitive relations
  * [TOPEASE-5621] - JXBrowser timeout while loading diagram in Designer
  * [TOPEASE-5625] - Diagramming: Rendering of sequence flow diagram with expanded activities does not work correctly with default swimlane
  * [TOPEASE-5643] - SequenceFlow Diagram: sub-processes might be unintentionally deleted when using the property 'expanded' within a swimlane diagram

** New Feature
  * [TOPEASE-5489] - Conditional Format for F&F field values
  * [TOPEASE-5526] - Plugin to support inheritance of BCM values between Processes

** Improvement
  * [TOPEASE-5503] - Always ask for http(s) ports during installation
  * [TOPEASE-5515] - CopyWizard: Add Value-flows from/to Event and Gateway to process-scenario
  * [TOPEASE-5516] - CopyWizard: copy References along with Processes
  * [TOPEASE-5581] - Allow manual output messages in AntRunner log from XSLT
  * [TOPEASE-5646] - Assessment App: add state in folder overview table and chart

Release Notes - TopEase - Version 7.1.26
** Bug
  * [TOPEASE-5456] - Repeated error message dialogs when editing in context diagram options of the designer
  * [TOPEASE-5480] - BIA: NPE while aggregating evaluation resources after customer converted suppliers (Resource) to ExternalAgents
** New Feature
  * [TOPEASE-5439] - Specifying a shape-template for a container-node in a context diagram does not work
  * [TOPEASE-5442] - Diagram tile with navigation functionality
  * [TOPEASE-5454] - Change font style within shape-editor
** Improvement
  * [TOPEASE-5455] - Use graph-navigation component also in bdna-diagrams-panel, changes navigation behavior

Release Notes - TopEase - Version 7.1.25
** Bug
  * [TOPEASE-5367] - Unable to view relation overview in Designer on Activities when supported-by relation is used
  * [TOPEASE-5369] - Problem while editing Risk Definition Settings
  * [TOPEASE-5392] - Some of the model settings are missing a default identifier
  * [TOPEASE-5395] - Designer Settings UI allows for hierarchically nested Risk-Definition settings, but this is not intended
  * [TOPEASE-5420] - Diagram with other relations - don't show nil objects
  * [TOPEASE-5426] - Copy from model with valid fingerprint can block the access to the model
** New Feature
  * [TOPEASE-5222] - Add Risk-Indicator to Model-Diagrams in pseudo-3d
  * [TOPEASE-5399] - Use ExternalAgent supports relations in BIA Supplier Evaluation
  * [TOPEASE-5433] - Mail / NotificationRules change rendering of xpathProperties if it is a list of objects involved
** Improvement
  * [TOPEASE-5339] - In solutions show only diagram templates in diagram create dialog
  * [TOPEASE-5365] - TopEase Installer should ask before overwriting "TopEase XChange.conf" file in ProgramData
  * [TOPEASE-5381] - Order of diagram-templates when creating a new diagram
  * [TOPEASE-5396] - Stop excessive logging in case an Assessment-Indicator does not have a formula defined
  * [TOPEASE-5397] - Configure the membership of users to business roles only in TopEase model
  * [TOPEASE-5416] - Object converter from some object type to 'Folder' converts only the root object

** Maintenance
  * [TOPEASE-5341] - Security updates for dependend libraries
  * [TOPEASE-5343] - Security update for AntRunner Plugin
** Bug
  * [TOPEASE-5285] - W3: Number property cannot be deleted
  * [TOPEASE-5291] - Regression: Missing server configuration file may cause excessive logging
  * [TOPEASE-5307] - Diagram Editor may hang forever in javascript code execution
  * [TOPEASE-5309] - Synchronize error due to concurrent checkin
  * [TOPEASE-5313] - Gantt Diagram: Access deny on some task details prevents the displaying of all tasks
  * [TOPEASE-5338] - Workflow view can not be rendered due to missing permissions
  * [TOPEASE-5351] - Missing implicit access permissions for some Settings objects
** New Feature
  * [TOPEASE-5322] - Metamodel enhancements for BCM-App
** Improvement
  * [TOPEASE-5325] - Improve quality of detailed diagrams in pdf reports
  * [TOPEASE-5339] - Show only diagram templates in diagram create dialog
  * [TOPEASE-5350] - WorkflowRules: support update permissions in CopyBehaviourRule

** Bug
  * [TOPEASE-5150] - NPE during merge in designer
  * [TOPEASE-5179] - Predefined Values might not get cleaned up if not used anymore
  * [TOPEASE-5181] - Multiple predefined values can be created with the same name
  * [TOPEASE-5189] - W3: Predefined Values are not visible when their Settings-Container does not have an Identifier
  * [TOPEASE-5206] - W3: Diagram-Palette object names in wrong language
  * [TOPEASE-5213] - Diagramm push Template options issue
  * [TOPEASE-5224] - W3: F&F timeseries (discontinued) might show up like continued
  * [TOPEASE-5209] - More parts of Diagrams in wrong language
** New Feature
  * [TOPEASE-5242] - Schema Extension for W3 BIA
  * [TOPEASE-5215] - Support diagram rotation and elevation
** Improvement
  * [TOPEASE-5219] - Ability to set a date property during Import Soft Cleanup
  * [TOPEASE-5241] - IdentifierSetClear Plugin improvement
  * [TOPEASE-5250] - Add ability to use Predefined Values of type Date inside XPath expressions
  * [TOPEASE-5249] - Update spring from 5.2.6 to 5.2.9 to fix security issue

** Bug
  * [TOPEASE-5151] - Regression: Designer's Diagram Tab is unable to load shape-icons in built' version
  * [TOPEASE-5168] - MailServiceImpl continues to send already sent mails
  * [TOPEASE-5170] - MailQueueThread does not end when deactivated
  * [TOPEASE-5177] - Update-Installer removes too many files

** Bug
  * [TOPEASE-3878] - TopEase might be vulnerable against XXE attacks
  * [TOPEASE-4820] - Designer: load diagram on creation
  * [TOPEASE-4896] - When updating a server installation, the service-user gets reset to "system-user"
  * [TOPEASE-5028] - Designer: View Filter does not work for all main folders
  * [TOPEASE-5032] - High memory consumtion of Leaflet-Map integration
  * [TOPEASE-5044] - Missing Default-Folder Identifier on old/upgraded models
  * [TOPEASE-5054] - Chrome and Edge new Color Popup misses default colors
  * [TOPEASE-4933] - Gantchart: pressing ctrl-a and delete deletes all content without asking
  * [TOPEASE-5059] - JasperReports: Text inside curly braces {} is not rendered
  * [TOPEASE-5106] - Wrong format of ShapeEditor changes in Designer & misleading error message
  * [TOPEASE-5117] - ContextDiagram: on removing target object = model from entry, the model object is removed
  * [TOPEASE-5124] - NPE when scrolling in Modell Report Settings Table
  * [TOPEASE-5125] - Save JViews Diagrams as SVG not possible anymore after upgrading batik
  * [TOPEASE-5127] - Loading of custom bi-report i18n files does not work as specified for zipped reports
  * [TOPEASE-5139] - Nodes in swimlane loose their position
** New Feature
  * [TOPEASE-5068] - Add color to Predefined Values
  * [TOPEASE-5122] - Add a description property to Predefined Values
** Improvement
  * [TOPEASE-5057] - Inline-Edit of label in Diagram should auto-commit on focus lost
  * [TOPEASE-5136] - Add new value "On Demand" to "Frequency of Control/Change" property of BusinessRule Objects
** Maintenance
  * [TOPEASE-4980] - Update Jasperreports library to latest version
  * [TOPEASE-5149] - Designer: Show detail relations again in relation overview