Version 9.1.272 (9 November 2026)

General

Add people group switching to pending access page (#158054)

Problem

• Cannot switch to another people group when the user has no access 
• The user must retry every so often to see if the user is calculated
• The differential of people group check only the first load of Edit

 

Solution

• Pending access page now shows the active people group and lets users switch to another shared group via a new SwitchPendingAccessPeopleGroup action (local retry URLs only). The page auto-retries every 10 seconds with a visible countdown. The bypass TempData key is now a shared BypassKey constant. A new IsBypassActive helper keeps a per-user, session-backed bypass window so the check survives across requests. The appoint-existing-user step no longer sets All People as the active group. Also adds unit tests for IsBypassActive and updates the pending access message and labels in the en-GB, en-US and en-ZA locales.

---

HR Processes|V9-Identity and Authorisation

Re-add Landbot authorisation that was removed during a merge (#157325)

Problem

• Some users spend a lot of time using Landbot/Signibot, which causes the access token used to authenticate Landbot to expire while they are still busy.

 

Solution

• Changes were previously made to allow an expired access token to be authenticated.
• This was reverted because it would require updating each Landbot bot manually.
• It was then changed to be optional, but that change was lost during a merge. 
  

 

---

HR Processes

Unable to approve some items where I am not able to approve others as a Fallback Approver (#157955)

Problem

• Later approval levels could remain unclickable when the same approver appeared at multiple levels.

 

Solution

• Updated the fallback tab to allow access as earlier levels are completed; awaiting verification in the application. 

---

Identity and Authorisation

Ensure that when the ruleset ID is not available during the authorisation process, the user is forbidden to continue (#152148)

Problem

• Identity is throwing an unhandled exception during /connect/authorize when an unauthenticated request does not contain a usable ruleset value. Instead of returning a controlled authorisation or validation response, AuthorizationController throws while appending the Identity. Ruleset cookie, producing 1197 unhandled request failures.

Solution

• This pull request improves the validation logic for the ruleset ID in the Authorise endpoint of AuthorizationController. It now checks that the rulesetId is a valid, positive integer before proceeding, and returns a proper error response if the validation fails. This helps prevent unauthorised or malformed requests from being processed.

Resolved translation (#157541)

Problem

• Generic translation is used and not descriptive of the next steps

 

Solution

• Request to add a more descriptive translation

---

Job Profiler

Added label for Group fallback approvals (#157950)

Problem

• Where an approval falls back to People Group, there should be an indicator that this is a group, as it is when a People Group has been deliberately set on an approval level.

 

Solution

• Add label for People Group fallback approvals

---

Learning Management

Add filter to make creation of attendance more robust and prevent unique DB constraint exceptions (#152146)

Problem

• System.ArgumentException: Bulk operation completed with some errors: Id 0: Cannot insert duplicate key row in object 'LearningManagement.Attendances' with unique index 'IX_Attendances_AttendanceDate_StartTime_EndTime_UserId_ClassSubjectGroupId'. The duplicate key value is (2026-10-14,

 

Solution

• This pull request improves how attendance items are processed in the CreateUpdateAttendancesCommandHandler by deduplicating attendance entries before creating or updating records. This ensures that only the most relevant attendance entry per user and time slot is used, preventing duplicate records and potential data inconsistencies. Attendance item processing improvements: Deduplicated AttendanceItems in the request by grouping on AttendanceDate, StartTime, EndTime, and UserId, and selecting the most relevant entry (preferencing those with non-zero Id and latest in the list). Updated logic for creating new and updating existing Attendance entities to use the deduplicated list, ensuring no duplicate attendances are processed.

---

HR Process Automation 

Request to add name and surname part of dialogue title for auto doc (#158128)

Solution

• Request to add Name and surname to the dialogue title and not just username when breaking out from onboarding

---

People Groups|V9-Learning Management

Delete Subject People Group When Subject Is Deleted (#157900)

Problem

• When a Subject is deleted, the linked PG should also be deleted.

 

Solution

• Ensure PG is deleted when Subject is deleted.

---

People groups

Filter user people group permissions on active people group (#156932)

Problem

• When a people group is inactive, it can still be linked to a user with permissions. When a people group already linked to a user becomes inactive, the user can still use the people group on the people group dashboard and see it on the people group permissions page

 

Solution

• Limit the list of people groups to only active people groups. When a people group is inactive, do not show it on the user screen or people management dashboard even though it is linked to the user

---

Performance Management

Resolved internal evaluation list of users' performance (#155620)

Problem

• The controller pulled all the data of the ruleset and then sent that list of user IDs to fetch only the email data; this could be well over 20k+ records

 

Solution

• Added a change to return the email part of the materialised data and removed the second gRPC call; also implemented paging to be used so that it does not return all 20k+ records, as this mapping affects the gRPC response size

Corrected translation for identity register page (#157960)

Problem

• Translation was just showing the path and not the actual translation

 

Solution

• Corrected in the Translate method, as during page navigation the translation library can get lost, so reload to populate

Implemented fix for jQuery table clear (#158072)

Problem

• Clicking Link Item accessed DataTables’ private property oFeatures.bServerSide, which was undefined in the running version, causing the JavaScript error.

 

Solution

• Removed the manual clearing code and used ajax.url(ajaxUrl).load() to reload the items. Selected items are cleared before loading to prevent selections carrying over between sections.

Added missing delimiters for userIds in bulk action (#155047)

Problem

• The subtext on the UI makes use of more possible delimiters that are being used in the gRPC to actually split

 

Solution

• Added the missing delimiters

Resolved People group user status and to be used in PM (#157660)

Problem

• When a user’s status changed, a people-group refresh only updated their status in the groups being refreshed. This could leave the same user showing as Active in some groups and Terminated in others.

 

Solution

• The refresh now updates the affected user’s status across all their existing people groups, keeping it consistent. The date rules remain unchanged: a user stays Active on their last service day and becomes Terminated the following day.

 

Fix review Period header for My Agreement not aligned (#157981)

Problem

• Review Period header for My Agreement not aligned

 

Solution

• Fix styling to ensure aligned Co-authored-by: William

---

Report Builder

Set General Category as default and correct copy functionality on ruleset creation (#157840)

Problem

• General category needs to be set as the default and first category. When creating a new report, General should be the 1st option returned. When copying Category Masterdata to a new ruleset, DisplayOrder is set to 0 for all categories

 

Solution

• Migration to add missing General category and amend display order. Change report folder category selection to order by DisplayOrder. Ensure displayorder and default category values are set when master data is copied.

Corrected tooltips showing nonstop after hover (#157956)

Problem

• Two tooltip systems were responding to the same editor buttons, causing the tooltips to stay visible after you moved your mouse away.

 

Solution

• Updated the page so only the editor’s own tooltip system handles those buttons. This should allow the tooltips to disappear normally.

Resolved the export on count of subreport console errors (#155593)

Problem

• Exporting the count modal from View Report failed because its export data was missing the header and footer structures required by the Excel exporter.

 

Solution

• Added the missing structures in view-subreport.js, matching the working editor export. Excel export now generates successfully.

---

System Access

Correct mapping for user dates (#150818)

Problem

• InvalidOperationException in JobProfiler UserQueries.GetUserDatesAsync — UserDatesPreview record type missing parameterless constructor for Dapper materialisation

 

Solution

• This pull request refactors the UserDatesPreview record in UserViewModel.cs to use an object initialiser style with properties instead of positional parameters. This change improves code clarity and future extensibility. Refactoring for clarity and extensibility: Changed UserDatesPreview from a positional record to a record with init-only properties for Birthday and WorkAnniversary, allowing for more explicit property initialisation and easier future modifications.

Align 2FA lock period with password failure lock period (#156908)

Problem

• The lock period on 2FA is longer than the password lock. Causing unexpected wait periods

 

Solution

• Align the lock period of 2FA with the lock period of password failure for consistency

 

---