Release 17/11/2024

Owned by Sanket Shrestha
Nov 17, 2024
2 min read

Main Feature

Enhancement Details

Templates

Implementation of the Single-Token Access Control Mechanism

To enhance security, a Single-Token Access Control mechanism has been implemented for access to various templates within the system. This approach requires users to generate a secure, single use token each time they wish to access a specific template, thus enforcing strict access verification.

Key Security Benefits

  • One-Time Token: Each request to view or generate a template initiates a unique token tied specifically to that action. This token expires after use, preventing reuse and ensuring that each template access is verified.

  • Prevention of Unauthorized Access: By requiring a new token each time, the system prevents access through cached tokens, saved URLs, or unauthorized URL refreshes.

  • Restricted Direct Access: Users cannot access templates directly or through previously saved links. This mechanism controls access even in cases where URLs might have been bookmarked or cached.

Implemented Areas

The Single-Token Access Control mechanism applies to the following areas within the system:

  1. Preview Offer Letter in the Offer List page

  2. Preview Offer Letter in the Student Course page

  3. Preview Bulk Certificates

  4. Preview Certificates in the Student Results page

  5. Preview CAN Notice and Invoice Notice in the Bulk CAN Notice page

  6. Preview VSN

  7. Preview Survey Result Submission

  8. Preview Attendance List Reports

By incorporating this approach, the system significantly reduces the risk of unauthorized access and ensures that each access request is validated. This provides secure and controlled access to sensitive templates and documents across different modules.

 

Academic Progress > Import Assessment Result

The Import Assessment Results feature has been enhanced to support the import of Student Assessment Outcomes for competency-based subjects. This enhancement enables assessment outcomes for VET Course Subjects to be imported using the Import Assessment Result feature. Additionally, the User Interface has been updated to align with the Import Subject Outcome feature, providing a consistent experience.

Key points to note:

  1. The feature only works for Higher ED and VET course assessments. Other course type (ELICOS, PY, Short Course) are not supported by the feature.

  1. If assessment outcome has already been locked and/or approved, then the imported outcome cannot override the existing value.

  1. Feature has only been enhanced for the Staff Portal. The Teacher Portal enhancement is planned for a future update.

Provider Limit > Log

The Provider Limit Log feature has been integrated into the Log section of the system to monitor and record modification activities within the Provider Limit page. This log enables users to access a detailed history of all changes—whether additions or updates—made in the Provider Limit Setup area.