Skip to content

nexxcite 1.0.3.6138

Released on 2026-10-22.

New features

  • Roles have four new permissions that decide access to entities without an entity policy: "Read records of entities without read limit", "Edit records of entities without edit limit", "Delete records of entities without delete limit" and "Add records of entities without add limit". They are allowed by default, so nothing changes until a role denies them. Denying them turns the entity policies into a whitelist: users only reach the entities listed in a limit, and a read limit with an empty filter admits all records of its entity. A read limit with an empty filter now also lifts the read limits other roles of the user define for the same entity. Refreshing an open record from an action now also respects the read limits: a record the user may not read keeps the values that were loaded.
  • The User Manager and the Role Manager have a new button "Permission Overview". It shows what a user – or a user holding the selected role – may effectively do after all roles, included roles, priorities and "Important" entries are combined: every permission with its result and the role that decides it, the entries it overrules, and the access to reading, editing, deleting and adding the records of every entity. Entities whose records can be written but not read are marked with a warning.
  • Roles can now control access to single fields: the new tab "Field Limits" in the entity policies of the role editor sets an entity, a field and the access – "Denied", "Read" or "Read & Edit". A rule for "(All other fields)" is the default of the role for the entity, and rules for single fields override it, so only the exceptions need to be configured. A field that cannot be read is empty for the user; a field that cannot be edited is shown disabled, values set on it are discarded and it is never saved. The permission overview lists the field limits with their result.
  • Actions can now manage user accounts: the new commands "Create Or Update User" and "Delete User" create, change and delete users – including password, roles, profile record, lock, password expiry and links to authentication providers – with the permissions of the user the action runs for.
  • The permission overview can be exported to Excel with "Export to Excel". The workbook has one sheet per part of the overview – roles, permissions, the permission entries of every role, entity policies and field limits – each as a filterable table with one fact per column, for audits and further processing.

Changes in behaviour

  • Setting the password of a user now needs the new permission "Reset User Password", in the user editor as well as in actions. System administrators have it by default; roles that were granted only "Add User" or "Edit User" can no longer set passwords until the new permission is allowed for them.

Fixes

  • "Link/Unlink Entity Records" with "Unlink" no longer changes its query. Previously every run added another condition to the stored query, so later runs – also from other records – found fewer or no records until the definition cache was cleared.

Unlinking a record of a many-to-many relationship now also works when the link was made after the last save – with the "Unlink" button, the Related Items Selector or "Link/Unlink Entity Records". Previously such a record stayed linked and the link was stored with the next save. - Linking an existing record through a relationship with the foreign key in the child or a custom link – with the Related Items Selector or "Link/Unlink Entity Records" – is now saved with the parent record. Previously the linked record disappeared from the relationship right away and the link was never stored. Unlinking such a record is saved the same way; previously it showed up again after the next read.