Version 9.1.272 (9 November 2026)

General

Add people group switching to pending access page (#158054)

Problem

Cannot switch to another people group when the user has no access The user must retry every so often to see if the user is calculated The differential of people group check only the first load of Edit

Solution

Pending access page now shows the active people group and lets users switch to another shared group via a new SwitchPendingAccessPeopleGroup action (local retry URLs only). The page auto-retries every 10 seconds with a visible countdown. The bypass TempData key is now a shared BypassKey constant. A new IsBypassActive helper keeps a per-user, session-backed bypass window so the check survives across requests. The appoint-existing-user step no longer sets All People as the active group. Also adds unit tests for IsBypassActive and updates the pending access message and labels in the en-GB, en-US and en-ZA locales.

HR Processes|V9-Identity and Authorisation

Re-add Landbot authorisation that was removed during a merge (#157325)

Problem

Some users spend a lot of time using Landbot/Signibot, which causes the access token used to authenticate Landbot to expire while they are still busy.

Solution

Changes were previously made to allow an expired access token to be authenticated. This was reverted because it would require updating each Landbot bot manually. It was then changed to be optional, but that change was lost during a merge.

HR Processes

Unable to approve some items where I am not able to approve others as a Fallback Approver (#157955)

Problem

Later approval levels could remain unclickable when the same approver appeared at multiple levels.

Solution

Updated the fallback tab to allow access as earlier levels are completed; awaiting verification in the application.

Identity and Authorisation

Ensure that when the ruleset ID is not available during the authorisation process, the user is forbidden to continue (#152148)

Problem

Identity is throwing an unhandled exception during /connect/authorize when an unauthenticated request does not contain a usable ruleset value. Instead of returning a controlled authorisation or validation response, AuthorizationController throws while appending the Identity. Ruleset cookie, producing 1197 unhandled request failures.

Solution

This pull request improves the validation logic for the ruleset ID in the Authorise endpoint of AuthorizationController. It now checks that the rulesetId is a valid, positive integer before proceeding, and returns a proper error response if the validation fails. This helps prevent unauthorised or malformed requests from being processed.

Resolved translation (#157541)

Problem

Generic translation is used and not descriptive of the next steps

Solution

Request to add a more descriptive translation

Job Profiler

Added label for Group fallback approvals (#157950)

Problem

Where an approval falls back to People Group, there should be an indicator that this is a group, as it is when a People Group has been deliberately set on an approval level.

Solution

Add label for People Group fallback approvals

Learning Management

Add filter to make creation of attendance more robust and prevent unique DB constraint exceptions (#152146)

Problem

System.ArgumentException: Bulk operation completed with some errors: Id 0: Cannot insert duplicate key row in object 'LearningManagement.Attendances' with unique index 'IX_Attendances_AttendanceDate_StartTime_EndTime_UserId_ClassSubjectGroupId'. The duplicate key value is (2026-10-14,

Solution

This pull request improves how attendance items are processed in the CreateUpdateAttendancesCommandHandler by deduplicating attendance entries before creating or updating records. This ensures that only the most relevant attendance entry per user and time slot is used, preventing duplicate records and potential data inconsistencies. Attendance item processing improvements: Deduplicated AttendanceItems in the request by grouping on AttendanceDate, StartTime, EndTime, and UserId, and selecting the most relevant entry (preferencing those with non-zero Id and latest in the list). Updated logic for creating new and updating existing Attendance entities to use the deduplicated list, ensuring no duplicate attendances are processed.

HR Process Automation

Request to add name and surname part of dialogue title for auto doc (#158128)

Solution

Request to add Name and surname to the dialogue title and not just username when breaking out from onboarding

People Groups|V9-Learning Management

Delete Subject People Group When Subject Is Deleted (#157900)

Problem

When a Subject is deleted, the linked PG should also be deleted.

Solution

Ensure PG is deleted when Subject is deleted.

People groups

Filter user people group permissions on active people group (#156932)

Problem

When a people group is inactive, it can still be linked to a user with permissions. When a people group already linked to a user becomes inactive, the user can still use the people group on the people group dashboard and see it on the people group permissions page

Solution

Limit the list of people groups to only active people groups. When a people group is inactive, do not show it on the user screen or people management dashboard even though it is linked to the user

Performance Management

Resolved internal evaluation list of users' performance (#155620)

Problem

The controller pulled all the data of the ruleset and then sent that list of user IDs to fetch only the email data; this could be well over 20k+ records

Solution

Added a change to return the email part of the materialised data and removed the second gRPC call; also implemented paging to be used so that it does not return all 20k+ records, as this mapping affects the gRPC response size

Corrected translation for identity register page (#157960)

Problem

Translation was just showing the path and not the actual translation

Solution

Corrected in the Translate method, as during page navigation the translation library can get lost, so reload to populate

Implemented fix for jQuery table clear (#158072)

Problem

Clicking Link Item accessed DataTables’ private property oFeatures.bServerSide, which was undefined in the running version, causing the JavaScript error.

Solution

Removed the manual clearing code and used ajax.url(ajaxUrl).load() to reload the items. Selected items are cleared before loading to prevent selections carrying over between sections.

Added missing delimiters for userIds in bulk action (#155047)

Problem

The subtext on the UI makes use of more possible delimiters that are being used in the gRPC to actually split

Solution

Added the missing delimiters

Resolved People group user status and to be used in PM (#157660)

Problem

When a user’s status changed, a people-group refresh only updated their status in the groups being refreshed. This could leave the same user showing as Active in some groups and Terminated in others.

Solution

The refresh now updates the affected user’s status across all their existing people groups, keeping it consistent. The date rules remain unchanged: a user stays Active on their last service day and becomes Terminated the following day.

Fix review Period header for My Agreement not aligned (#157981)

Problem

Review Period header for My Agreement not aligned

Solution

Fix styling to ensure aligned Co-authored-by: William

Report Builder

Set General Category as default and correct copy functionality on ruleset creation (#157840)

Problem

General category needs to be set as the default and first category. When creating a new report, General should be the 1st option returned. When copying Category Masterdata to a new ruleset, DisplayOrder is set to 0 for all categories

Solution

Migration to add missing General category and amend display order. Change report folder category selection to order by DisplayOrder. Ensure displayorder and default category values are set when master data is copied.

Corrected tooltips showing nonstop after hover (#157956)

Problem

Two tooltip systems were responding to the same editor buttons, causing the tooltips to stay visible after you moved your mouse away.

Solution

Updated the page so only the editor’s own tooltip system handles those buttons. This should allow the tooltips to disappear normally.

Resolved the export on count of subreport console errors (#155593)

Problem

Exporting the count modal from View Report failed because its export data was missing the header and footer structures required by the Excel exporter.

Solution

Added the missing structures in view-subreport.js, matching the working editor export. Excel export now generates successfully.

System Access

Correct mapping for user dates (#150818)

Problem

InvalidOperationException in JobProfiler UserQueries.GetUserDatesAsync — UserDatesPreview record type missing parameterless constructor for Dapper materialisation

Solution

This pull request refactors the UserDatesPreview record in UserViewModel.cs to use an object initialiser style with properties instead of positional parameters. This change improves code clarity and future extensibility. Refactoring for clarity and extensibility: Changed UserDatesPreview from a positional record to a record with init-only properties for Birthday and WorkAnniversary, allowing for more explicit property initialisation and easier future modifications.

Align 2FA lock period with password failure lock period (#156908)

Problem

The lock period on 2FA is longer than the password lock. Causing unexpected wait periods

Solution

Align the lock period of 2FA with the lock period of password failure for consistency