Release 270 (06.07.2025)

Version: 270
Release Date: 06.07.2025 19:00 CET

Overview

This release delivers a major expansion of the permission and role management system in Priverion DPMS. Administrators can now create fully customisable roles with granular read, write, and "only assigned" access rights across every module. Alongside this, a range of smaller improvements and fixes have been applied throughout the application.

Contents

• What's new

• Improvements

• Fixes

• Known issues

What's new

Role-Based Access Control (RBAC) — Custom Roles

A fully redesigned Roles section is now available under IT Settings. Administrators can:

• Create custom roles with a dedicated creation screen, including a "Select all" column for quickly granting permissions across an entire module.

• Define granular permissions for each role: read-only, read/write, or access limited to elements the user is personally assigned to — across all major modules including ROPA, Assets, TOMs, Incidents, Vendors, Projects, Assessments, Documents, Tasks, Workflows, and Settings.

• Delete custom roles directly from the roles list; system roles remain protected and cannot be deleted.

• View assigned users for each role: the roles index table now shows which users hold a given role.

• Filter roles by type (system or custom) in the roles list.

Permission Enforcement Across All Modules

All screens in the platform now respect the permissions defined in the user's role. Concretely:

• Add, edit, and delete buttons are hidden or disabled when the user lacks the required permission.

• Import/export actions are controlled by dedicated import and export permissions.

• Workflow triggers are governed by workflow-specific permissions.

• "Read only to assigned" mode restricts a user to viewing only the records they are personally responsible for, in modules such as ROPA, Assets, Vendors, Incidents, and more.

• The 403 error page has been improved to give clearer guidance when a user accesses a page they do not have permission to view.

Assessment Template Workflow Warning

When an assessment template is already in use by one or more active workflows, the system now displays a clear warning before allowing changes, preventing accidental disruption to running processes. [NG-4583]

Relevant TOMs Validation

The "Select all relevant" button in TOMs now includes validation: if required fields are incomplete, the button highlights the missing items and shows a tooltip explaining what needs to be addressed before proceeding. [NG-4553]

Improvements

• Roles index — The table now displays user counts and a name-with-logo cell that visually distinguishes system roles from custom roles.

• User Management — Create/Edit user — The role assignment UI now reflects the updated RBAC model and shows available roles in a cleaner layout.

• Checkboxes in role creation — Checkboxes now highlight in red when a validation error is present, and return to normal once the user interacts with them, giving clearer feedback during role setup.

• Permissions sorted — Permission options in the role editor are now sorted alphabetically for easier navigation.

• Navigation / Quick Nav filter — The quick navigation search now correctly filters results, improving findability across large datasets. [NG-3850]

• Tabs — Tab menus throughout the application have been refactored to support drag-and-drop reordering and arrow-key navigation when there are many tabs.

• Vendor form — Back-navigation after saving a vendor record now correctly returns the user to the expected previous screen.

• AI autogenerate — The AI field auto-generation in ROPA now correctly supports multiple responsible persons. [NG-4619]

Fixes

• ROPA — Fixed an issue where a "forbidden" message was incorrectly displayed for users with valid ROPA access. [NG-1681]

• Roles — Fixed a bug where saving a custom role's permissions did not persist correctly. [NG-1681]

• Roles — Fixed an error that occurred when creating a company with a user assigned a custom permission set. [NG-1681]

• Sharing / Publishing — Fixed an error when saving sharing settings and validating permalinks. [NG-1681]

• User Management — Fixed the roles list not displaying correctly in the user management screen. [NG-1681]

• Data Mapping — Fixed a Redux state selection error affecting the data mapping view. [NG-1681]

• Deleted items message — Fixed a bug where a "deleted items" notice was shown even when no items had been deleted.

• Checkbox alignment — Fixed vertical alignment of checkboxes in the user creation form.

• Role sorting — Fixed an error when sorting roles by name in the roles list.

Known issues

No known issues.

Feedback and Support

We value your feedback. If you encounter any issues or have suggestions, please contact our support team:

• Email: hello@priverion.com

• Schedule a Meeting: Via the Help Widget

• Give Feedback with Screenshots: Via the Feedback Button in the Help Widget

• Schedule a Support Call: Here

• Schedule a Technical Support Call: Here