Changelog

For user-facing changes, refer to the What’s New page.
For information on upgrading from previous versions, see the Atoti Sign-Off Migration Notes

Note on issue keys

Each update is referenced with an issue key which is an internal reference. You can quote this to ActiveViam support if you have any questions about an item listed below.

6.0.0

2025-03-19

Download the distribution files here

You can download the following zipped distribution files:

• UI source code.
• UI build that does not require an installation and can be directly deployed.
• Source files that can be used to build the module.
• Maven repository required to build the project and run the tests.
  

  note

  The Atoti Server 6.1.4 Maven repository files have been removed from this zip, so you’ll need to download them separately. Click here to locate them.

• Offline documentation that can be served by the module.

Summary

• Dedicated Sign-Off Task Configuration Screen: A dedicated screen for creating, managing, and performing actions on sign off task definitions. See Task Configuration screen.
• Dedicated Sign-Off Tasks Screen: A dedicated screen to complete all of your daily tasks. See Tasks screen.
• Streamlined adjustments: Sign-off tasks can be selected within the adjustment modal to streamline the adjustment process.
• Interactions with Sign-Off workflows: The way workflows change state (APPROVED, PENDING, and so on) has been updated to make customization easier.
• Workflow services moved: Both SignOffProcessInstanceWorkflowService.java and SignOffProcessDefinitionWorkflowService.java have been migrated from signoff-starter to signoff-activeviam module, along with their dependency classes.
• Adjustments-related classes: Adjustments are now using Lists instead of Sets to keep the locations fields ordered. This allows the UI to properly construct dashboards.
• Artifact relocation: The released artifacts are now released under the group id com.activeviam.solutions.signoff.
• Bulk Adjustment upload/download: Adjustments can now be created by uploading CSV files via the UI. Please see the Upload Adjustments section. In addition, you can export adjustments into a CSV file.
• Definition upload/download: Definitions can now be created by uploading CSV files. In addition, you can export definitions into a CSV file. See Upload tasks.
• Restart tasks with adjustments: Tasks can now be restarted while maintaining adjustments that were previously executed.
• More Spring Boot compliance: Atoti Sign-Off now aligns more closely with Spring Boot best practices in our aim to move towards using Spring Boot Starters to ease migrations.
• Dependency Upgrades: Atoti Sign-Off has been upgraded to Atoti Server version 6.1.4. Please see the Dependency versions section for more upgrade details.

Known issues

None.

Dependency versions

Component	Version
Adjustments Services API	4.1.0
Atoti Server	6.1.4
Atoti UI	~5.2.6
Audit Service	1.0.0
Common Dependencies BOM	2.2.1
Common Parent POM	2.2.1
Datastore Helper	3.4.0-AS6.1
Java	JDK21
Notification Service	1.0.0
Sign-Off API	4.2.0
UI Components	5.2.6
Workflow Common Library	2.5.0

Added

Issue Key	Details
SO-449	The newly developed Audit screen has been added to Atoti Sign-Off by default.
SO-575	Add the required logic to send available actions related to a given process. The Atoti UI fetches the task or task definition and collect the available action at time.
SO-578	Error responses are now reported as ProblemDetails.
SO-625	A dedicated screen to complete all of your tasks daily tasks.
SO-630	Upgraded the Workflow Common Library dependency to 2.4.1, which fixes a number of CVEs in dependencies.
SO-648	A button to the Tasks screen that generates a dashboard to show the before and after value of each adjustment.
SO-658	The default sign-off-process-definition workflow now creates JPA entities on creation. Previously, the entities were created on publish.
SO-661	The IRestApiConfiguration now includes two new methods to get the MDX query endpoint and the as-of-date levels for each cube on the application server.
SO-675	Added a workflow status manager service to characterize the different workflow statuses, including custom ones.
SO-682	A linked dashboard to each sign-off definition
SO-699	Atoti Sign-Off now embeds an H2 console for investigating connections to H2 databases, which is disabled by default. You can enable it using the spring.h2.console.enabled property in application.yml.
SO-707	Added the Notification Service to Atoti Sign-Off.
SO-714	Added a linkedDashboardId field for task definitions for linking a dashboard to a definition.
SO-715	A button to the Tasks screen that generates a dashboard to show the before and after value of each task.
SO-725	Added a feature to bulk upload definitions via CSV files. In addition, you can now export definitions into a CSV file from the Task configuration screen.
SO-726	You can now export adjustments into a CSV file from the Tasks screen.
SO-727	Added a feature to bulk upload adjustments via CSV files. Please see the Upload Adjustments section.
SO-737	Approvals for the default four-eyes workflows cannot be approved by the previous user in the workflow. This can be changed by setting sign-off.workflow.approver-can-be-same-as-previous-user=true.
SO-748	The newly developed Audit Service has been added and updated the version of workflow-core.
SO-753	Users can now restart tasks maintaining adjustments that were previously executed.
SO-772	Added Jakarta validation via ISignOffAdjustmentValidator for creating adjustments via IAdjustmentService.

Changed

Issue Key	Details
SO-590	Updated the project artifact’s group id.
SO-608	Task selection for an adjustment is now within the adjustment modal.
SO-645	Fetch available workflow actions from the server instead of UI settings.
SO-646	AWorkflowProcessDefinitionEntity JPA columns are now updatable.
SO-654	Data transfer objects (DTOs) and JPA entities have been updated to use Lombok.
SO-679	The adjustment modal can only be opened when there is a valid sign-off task for the scope of the selection.
SO-688	Converted locations and input fields of adjustment DTOs into Lists.
SO-692	The default schema for databases has been changed to sign-off to support multiple Activiti connections.
SO-698	The default sign-off-process-definition workflow makes definitions visible to users with the ROLE_USERS once saved or published. Previously, SAVED or PUBLISHED definitions were only visible to users with the ROLE_MANAGERS.
SO-713	Users are now prevented by default from creating definitions on overlapping scopes.
SO-738	Deleted adjustments are no longer retrieved. They can still be found in the Audit Service.
SO-751	Adjustments can only be performed on tasks with a valid scope.
SO-780	The version of tomcat-embed-core was bumped to version 10.1.39 and exclusions were made on json-smart, netty-handler, netty-common and xmlunit-core to address CVEs.
SO-782	Users are now prevented by default from creating definitions on top-of-house and same member overlapping scopes.

Removed

Issue Key	Details
SO-553	Sign-off dashboard widgets have been removed.
SO-775	The SignOffProcessDefinitionDTO::getMeasures and SignOffProcessDefinitionDTO::setMeasures methods have been removed as they are not used
SO-801	The signoff-activeviam source code has been removed from the released artifacts in an effort to ease client migrations. The javadoc sources are still available for download.

Open CVEs

Issue	Status	Details	Impacting	Product impact	Workaround	Fix expected
GHSA-pr98-23f8-jwxv	Medium	ACE vulnerability in JaninoEventEvaluator by QOS.CH logback-core up to and including version 1.5.12 in Java applications allows attackers to execute arbitrary code by compromising an existing logback configuration file or by injecting an environment variable before program execution. Malicious logback configuration files can allow the attacker to execute arbitrary code using the JaninoEventEvaluator extension. A successful attack requires the user to have write access to a configuration file. Alternatively, the attacker could inject a malicious environment variable pointing to a malicious configuration file. In both cases, the attack requires existing privilege.	ch.qos.logback:logback-core	Low. The attacker requires existing privilege.	Ensure existing users have appropriate privileges.	Yes, once Atoti Server is updated to a version of Spring Boot using logback-core version 1.5.13 or higher.
GHSA-6v67-2wr5-gvf4	Low	Server-Side Request Forgery (SSRF) in SaxEventRecorder by QOS.CH logback version 1.5.12 on the Java platform, allows an attacker to forge requests by compromising logback configuration files in XML. The attacks involves the modification of DOCTYPE declaration in XML configuration files.	ch.qos.logback:logback-core	Low. The severity is low.	Ensure existing users have appropriate privileges.	Yes, once Atoti Server is updated to a version of Spring Boot using logback-core version 1.5.13 or higher.

5.3.0

2024-10-03

Download the distribution files here

You can download the following zipped distribution files:

• UI source code.
• UI build that does not require an installation and can be directly deployed.
• Source files that can be used to build the module.
• Maven repository required to build the project and run the tests.
  

  note

  The Atoti Server 6.1.0 Maven repository files have been removed from this zip, so you’ll need to download them separately. Click here to locate them.

• Offline documentation that can be served by the module.

Summary

• Upgrade to Atoti Server 6.1.0: Atoti Sign-Off has been upgraded to Atoti Server version 6.1.0.
• Upgrade to Atoti UI 5.2.x: Atoti Sign-Off is now compatible with Atoti UI version 5.2.x.
• Java 21: Atoti Sign-Off now requires Java 21 to compile and run. This is to be compatible with Atoti Server.

Known issues

Issue Key	Details
SO-529	Uploading tasks through the UI without a valid-to date fails.

Dependency versions

Component	Version
Adjustments Services API	4.0.1
Atoti Server	6.1.0
Atoti UI	5.2.x
Common Dependencies BOM	2.1.0 (com.activeviam.apps)
Common Parent POM	2.1.0 (com.activeviam.apps)
Java	JDK21
Sign-Off API	4.1.0
UI Components	5.2.1

Added

Issue Key	Details
SO-537	Added REST endpoint /settings to send server properties sign-off.workflow-configuration and sign-off.roles.
SO-571	Added a call to /sign-off/update-state to update the task on the application server side.

Changed

Issue Key	Details
SO-586	Atoti Sign-Off has been upgraded to Atoti Server version 6.1.0

5.2.1

2024-07-02

Download the distribution files here

You can download the following zipped distribution files:

• UI source code.
• UI build that does not require an installation and can be directly deployed.
• Source files that can be used to build the module.
• Maven repository required to build the project and run the tests.
  

  note

  The Atoti Server 6.0.13-sb3 Maven repository files have been removed from this zip, so you’ll need to download them separately. Click here to locate them.

• Offline documentation that can be served by the module.

Summary

• Improved Adjustment executions widget: The Adjustment executions widget now supports sorting from the column headers. It also fixes a bug that prevented additional columns from having column headers.
• Improved Task Toolbox: The Task Toolbox filters also apply to the Adjustment executions widget so you can easily see adjustments relating to a given task. A new checkbox in the Task Toolbox lets you prevent filters from being applied to the relevant widgets.
• Audit: Including deprecated workflows in the UI settings to maintain the audit history is no longer needed.

Known issues

Issue Key	Details
SO-529	Uploading tasks through the UI without a valid-to date fails.

Dependency versions

Component	Version
Adjustments Services API	4.0.0
Atoti Server	6.0.13-sb3
Atoti UI	5.1.x
Common Dependencies BOM	2.0.0 (com.activeviam.apps)
Common Parent POM	2.0.0 (com.activeviam.apps)
Java	JDK17
Sign-Off API	4.0.0
UI Components	5.0.40

Added

Issue Key	Details
BAS-1803	Task toolbox filters are optionally applied to the dashboard.

Changed

Issue Key	Details
BAS-1804	Task toolbox filters are also applied to the adjustment execution widget.
BAS-1806	The adjustment execution widget now supports sorting.
BAS-1821	The audit task information now comes from the Activiti so we no longer need to maintain deprecated workflows in the UI settings.

Fixed

Issue Key	Details
BAS-1808	The adjustment execution widget shows headers for non-default columns.
BAS-1848	Fixed issue where configured fields in the UI settings did not exist in all cubes.

5.2.0

2024-04-30

Download the distribution files here

You can download the following zipped distribution files:

• UI source code.
• UI build that does not require an installation and can be directly deployed.
• Source files that can be used to build the module.
• Maven repository required to build the project and run the tests.
  

  note

  The Atoti Server 6.0.13-sb3 Maven repository files have been removed from this zip, so you’ll need to download them separately. Click here to locate them.

• Offline documentation that can be served by the module.

Summary

• Atoti Server upgrade : Atoti Sign-Off has been upgraded to Atoti Server 6.0.13-sb3.
• Spring Boot upgrade : We have upgraded Spring Boot to version 3.2.0, which uses Spring Framework 6.
• Common Parent POM and Common Dependencies BOM upgrade: The Common Parent POM and the Common Dependencies BOM have both been upgraded to version 2.0.0.
• Activiti upgrade : We have upgraded Activiti to version 8.1.0 to be compatible with Spring Boot 3.
• Improved Task Inventory : You can now download your existing tasks.
• Improved adjustments : Review adjustments more easily with improved adjustment audit history.
• Display custom error messages in the UI : The UI will display custom error messages if the response type is in the structure of a ProblemDetail object. For more details, see Customizing UI exceptions.
• UI Activation : An import of react-query is required when using signoff-sdk. See UI activation for more details.

Known issues

Issue Key	Details
SO-529	Uploading tasks through the UI without a valid-to date fails.

Dependency versions

Component	Version
Adjustments Services API	4.0.1
Atoti Server	6.0.13-sb3
Atoti UI	5.1.x
Common Dependencies BOM	2.0.0 (com.activeviam.apps)
Common Parent POM	2.0.0 (com.activeviam.apps)
Java	JDK17
Sign-Off API	4.0.1
UI Components	5.0.35

Added

Issue Key	Details
BAS-1505	Added custom UI exception handling for ProblemDetail responses.
BAS-1570	Values are formatted with commas when performing an adjustment.
BAS-1686	Task definitions can now be exported to CSV.
BAS-1687	You can now select all definitions in the Sign-off Task Definitions widget.
UIACL-186	Added the filters and measures to the adjustment audit trail to help with reviewing.

Changed

Issue Key	Details
BAS-1686	The Download button in the Sign-off Task Definitions widget now downloads the existing tasks rather than a template.
SO-470	Upgraded to Atoti Server 6.0.13-sb3, including Spring Boot 3.2.0.
SO-512	The analysis hierarchy members are pre-populated in the adjustment modal when used as an input.
UIACL-931	React-query is now handled as a peer dependency. See UI activation for more details.

Fixed

Issue Key	Details
BAS-1625	The deserialization of the ExportStatusWithTaskIdDTO class will no longer fail due to unrecognized formats. This provides backwards compatibility with custom database values.
BAS-1687	Task definitions are now selectable in bulk.
BAS-1715	Fixed a timeout issue with the SignOffProcessDefinitionWorkflowRestController when uploading files.
SO-517	Use sanitized strings to prevent potential log injection in SignOffAdjustmentExecutionService.
SO-519	Fixed an issue where the starter jar didn’t start from the command line, by reverting to the CLASSIC loader implementation for Spring’s Nested Jar Support.

5.1.0

2023-11-30

Download the distribution files here

You can download the following zipped distribution files:

• UI source code.
• UI build that does not require an installation and can be directly deployed.
• Source files that can be used to build the module.
• Maven repository required to build the project and run the tests.
  

  note

  The Atoti Server 6.0.9 Maven repository files have been removed from this zip, so you’ll need to download them separately. Click here to locate them.

• Offline documentation that can be served by the module.

Summary

• Re-applying adjustments : When an application server fails and restarts, previous adjustments are automatically applied for tasks that are not yet approved. Refer to the User Guide for more information.
• Java 17 upgrade : Atoti Sign-Off is now compatible with, and requires, Java 17.
• Atoti Server upgrade : Atoti Sign-Off has been upgraded to Atoti Server 6.0.9.
• Spring Security upgrade : We have upgraded Spring Security to version 5.8.7 to resolve vulnerabilities and prepare for the upgrade to Spring Security 6.0 (via Spring Boot 3).
• Audit log : Export details are now correctly included in the audit log.
• Support for multiple members in a given level of the Sign-Off scope: When specifying the scope of the Sign-Off tasks, you can now select multiple members within a given level. Previously, only one member could be selected.
• Unique task definition names : Task definitions must now be created with a unique name. Creating a task definition with a name that already exists in the database results in an error. Uniqueness is enforced at the point that a task definition is published. Existing task definitions are unaffected.

Known issues

None.

Dependency versions

Component	Version
Adjustments Services API	2.2.0
Atoti Server	6.0.9
Atoti UI	5.1.x
Java	JDK17
Sign-Off API	2.1.0
UI Components	5.0.28

Added

Issue Key	Details
SO-448	When an application server fails and restarts, previous adjustments are automatically applied for tasks that are not yet approved.

Changed

Issue Key	Details
SO-471	You can now select multiple members in the given level in a sign-off task’s scope.
SO-474	Reduced Sonar issues.
SO-477	Upgraded to Atoti Server 6.0.9, including Spring Security 5.8.
SO-478	Upgraded to Java 17.
SO-482	Task definitions must now be created with a unique name.

Fixed

Issue Key	Details
SO-426	Fixed a bug where export details were not included in audit log.
SO-485	RestTemplates are now configured to support standard cookie spec which stops the appearance of WARN log messages when requests are made to application servers.

5.0.0-ui-update-4

2023-08-01

Download the distribution files here

You can download the following zipped distribution files:

• UI source code
• UI build that does not require an installation and can be directly deployed.

Summary

This is a UI-only release that allows you to disable adjustments on restricted data and to create sign-off tasks for all available application servers.

Dependency versions

Component	Version
Atoti Server	6.0.1
Atoti UI	5.1.x
Java	JDK11
UI Components	5.0.23
Signoff-ext module	2.1.0

Added

Issue Key	Details
BAS-1368	Prevent adjustments based on data.
BAS-1414	Allow the creation of sign-off tasks for all available application servers.

5.0.0-ui-update-3

2023-06-09

Download the distribution files here

You can download the following zipped distribution files:

• UI source code
• UI build that does not require an installation and can be directly deployed.

Summary

This is a UI-only release that makes the Sign-Off Module compatible with Atoti UI version 5.1.0 or higher.

Dependency versions

Component	Version
Atoti Server	6.0.1
Atoti UI	5.1.x
Java	JDK11
UI Components	5.0.22
Signoff-ext module	2.1.0

5.0.0-ui-update-2

2023-05-05

Download the distribution files here

You can download the following zipped distribution files:

• UI source code

• UI build that does not require an installation and can be directly deployed.

• Source files that can be used to build the module.

• Maven repository required to build the project and run the tests.

  note

  The Atoti Server 6.0.1 Maven repository files have been removed from this zip, so you’ll need to download them separately. Click here to locate them.

• Offline documentation that can be served by the module.

Summary

This is a UI-only release that resolves an issue with combining the UIs of Atoti Sign-Off and Atoti Market Risk.

• Accelerator-sdk: Upgraded to 5.0.20
• Atoti UI: Upgraded to 5.0.23

Dependency versions

Component	Version
Atoti Server	6.0.1
ActiveUI	5.0.23
Java	JDK11
accelerator-sdk	5.0.20
signoff-ext module	2.1.0

Fixed

Issue Key	Details
UIACL-314	Fixed the settings in Signoff-sdk that prevented a UI combination of Sign-Off and Atoti Market Risk.

5.0.0-ui-update-1

2023-03-01

Download the distribution files here

You can download the following zipped distribution files:

• UI source code

• UI build that does not require an installation and can be directly deployed.

• Source files that can be used to build the module.

• Maven repository required to build the project and run the tests.

  note

  The Atoti Server 6.0.1 Maven repository files have been removed from this zip, so you’ll need to download them separately. Click here to locate them.

• Offline documentation that can be served by the module.

Summary

This is a UI-only release that completely rewrites the Sign-Off widgets. They look and work mostly the same but are much more stable and performant.

Some settings and exports have been renamed.

This version of the UI can work with both version 5.0.0 and versions 4.2.x of the Sign-Off Module.

• Upgrade to Accelerator-sdk 5.0.16
• Upgrade to ActiveUI 5.0.20
• Refactoring and new design of the Sign-Off Toolbox
• Refactoring of the Sign-Off Daily Progress and Sign-Off Task Definitions Widgets
• Refactoring of the Adjustments Widgets

Dependency versions

Component	Version
Atoti Server	6.0.1
ActiveUI	5.0.20
Java	JDK11
accelerator-sdk	5.0.16
signoff-ext module	2.1.0

Fixed

Issue Key	Details
SO-377	Fixed bug preventing tasks with a multi-hierarchy from being copied or edited.
SO-387	Fixed Category dropdown in Toolbox repeating categories if tasks were created on different Cubes.
SO-391	Fixed limitation preventing more than one Sign-Off Toolbox per dashboard. The Sign-Off Toolbox is now restricted to one instance per page in the dashboard.

5.0.0

2022-12-13

Download the distribution files here

You can download the following zipped distribution files:

• UI source code

• UI build that does not require an installation and can be directly deployed.

• Source files that can be used to build the module.

• Maven repository required to build the project and run the tests.

  note

  The ActiveViam 6.0.1 Maven repository files have been removed from this zip, so you’ll need to download them separately. Click here to locate them.

• Offline documentation that can be served by the module.

Summary

• Upgrade to ActivePivot 6.0.1.

  note

  As the definition of REST services has changed between ActivePivot 5.x and ActivePivot 6.x, the Sign-Off Module 5.0.0 is only compatible with ActivePivot 6.x applications.

• Upgrade to ActiveUI 5.0.18 and Accelerator SDK 5.0.14.

Known issues

Issue Key	Details
SO-377	Tasks with a multi-hierarchy cannot be copied or edited.
SO-387	Category dropdown in Toolbox will repeat categories if tasks were created on different cubes.
SO-391	Limitation: only one Sign-Off Toolbox can be used in one dashboard at a time (including dashboards with multiple tabs). If more than one Sign-off Toolbox widget is present in a dashboard, the interaction with the back-end can result in an infinite loop of query cancellations in the Sign-Off back-end.

Dependency versions

Component	Version
ActivePivot	6.0.1
ActiveUI	5.0.18
Java	JDK11
accelerator-sdk	5.0.14
signoff-ext module	2.1.0

Changed

Issue Key	Details
SO-416	Upgraded Sign-off Module to ActivePivot 6.0.1
UIACL-83	Changed deserialization of temporal fields (dates and instants) following the use of Spring MVC to define REST services.
UIACL-84	Changed URL of Level Path REST service.

Fixed

Issue Key	Details
SO-410	Fixed incorrect session ID cookie name in security configuration.
UIACL-82	Fixed a null check being too strict when supported adjustments were retrieved.