0.12.1

• Upgraded dependencies for security fixes

0.12.0

Added

• Added a new feature that allows cancelling reservations with predefined and custom reasons
• Added support for reservation creation email attachment files to be selected for resources. Mostly used for terms of use and similar documents.
• Added brief documentation for accessibility parameters to docs and OpenAPI spec
• Added accessibility shortage count import and expose it in API
• Added support for ordering accessibility data from multiple viewpoints

Fixed

• Fixed bug where pagination in Respa Admin broke when searching with query
• Add time range validation in Order price check requests to prevent 500 internal server error response
• Fixed bug where management command for getting sanitized DB dump didn't work with complicated DB-urls

Security

• Updated various Python and JS dependencies

0.11.3

Security

• Update Django to secure version

0.11.2

Fixed

• Fixed bug where DISABLE_SERVER_SIDE_CURSORS setting was in Djangos general settings and it should have been in database configuration

0.11.1

Changed

• Content of resource models reservation_confirmed_notification_extra-field is now also added to email notifications with type RESERVATION_CREATED
• Reservation notification emails are now sent to billing_email_address if its set and if the reservation has related paid products.
• Changed description of contact_person field in Respa Admin to correctly describe its visibility to users

Security

• Updated dependencies.

0.11.0

Added

• Added an option for units to disallow concurrent reservations in resources of the unit for a single user.
• Added an environment variable option to enable token authentication for resource endpoint
• Added an environment variable option to disable server side cursors
• Added new permissions to ignore max_period and max_reservations_per_user restrictions of resources. Added these permissions to admins and managers.

Changed

• min_price_per_hour and max_price_per_hour fields are renamed to min_price and max_price in Resource. Also a new field price_type was added to determine if pricing is hourly, daily, weekly or fixed.

Fixed

• Fixed JS errors in resource form in Respa Admin which caused problems with correctly saving the form.
• Respa version is now also shown on reservation endpoint page in API browser site.
• Added billing fields of anonymized users reservations to be also anonymized.

Security

• Updated dependencies.

0.10.1

Fixed

• Fixed performance issues in single resource endpoint

0.10.0

Added

• Respa Admin theme can now be customized from a single style file
• Added Matomo analytics snippet to Respa Admin
• Added many missing Finnish and Swedish translations
• Added payment terms field to resources and Respa Admin
• Added .env.example file to represent very minimum .env configurations to run Respa in development

Changed

• Respa Admin now uses NPM instead of Yarn to handle JS packages
• Minor UI color changes to Respa Admin to add usability

Fixed

• Fixed a bug which prevented admins from bypassing resources min_period in reservations
• Disabled unnecessary pytest warnings caused by timezone naive datetime objects
• Fixed an issue where editing authentication tokens in Django admin caused browser to hang or crash
• Fixed a bug causing problems with removing and adding user permissions in Respa Admin

Security

• Updated dependencies

0.9.1

Fixed

• User anonymization bugs #680
• Permissions bugs #679

0.9.0

Added

• Unit viewer user role. See documentation for details.
• Admins can now bypass the min_period parameter to make shorter reservations than normal users. Admins could already make longer reservations.
• Anonymizing user data can now be done in the Django admin interface. This is useful for when a user requests their data to be removed.

Changed

• Improved and simplified the permission system, see #671 #655 #677 #643
• Updated the API documentation on how to use the include parameter properly
• Updated the Kulkunen driver for the Siemens SiPass access control system due to changes in the SiPass API

Removed

• The Hvara import script as that legacy Helsinki reservation system no longer exists

Fixed

• Database query optimizations for resource and reservation endpoints. Authenticated queries should now be much faster.
• Disabling a user now prevents the user from authenticating with the API. Previously disabling had no effect.
• Cosmetic fixes to Respa Admin

Security

• Updated dependencies