What's new?
This release fixes an open redirect in the post-consent / post-wipe return URL handling,
and closes a gap where an administrator recording consent on another user's behalf could do so without
any evidence reference, which would not satisfy GDPR Article 7(1). An evidence reference (support ticket
ID, email transcript, signed form, etc.) is now required and shown on the consent form. Admins with the
wipe or export privilege can now also record consent for another user, matching
the data subject's own consent view.
The rest of the release is hardening (stricter access checks, input validation) and low-impact bug fixes
to the audit trail list views and lifecycle search.
Changelog
Bug fixes
- [HIGH] Admin consent-on-behalf now requires an evidence reference (GDPR Article 7(1))
- [HIGH] Open redirect: post-consent/post-wipe return URL was not re-validated before redirect
- [LOW] "creator_id:" search prefix used the wrong offset, always matching user 0
- [LOW] Invalid SQL "==" operator when loading old profile values for change logging
- [LOW] Lifecycle list search errored on plain terms; users table wasn't aliased
- [LOW] Removed the non-functional Enabled/Published filter from export/wipe trail lists
- [LOW] Trail list views couldn't be sorted: bad filter_fields/sort dropdown columns
- [LOW] Wipe re-check now uses an explicit $allowReWipe parameter, not app identity
- [LOW] Wipe trails "id:" search filtered on the wrong (export trails) column
- [MEDIUM] Declared export/wipe ACL actions in access.xml; block wiping a Super User
Miscellaneous changes
- Admins with `wipe`/`export` privilege can now record consent for another user
- Audit-trail list controllers re-check core.manage in display()
- Bound the user ID as an integer in the login-time notification cleanup query
- Frontend dispatcher now fails closed, blocking any view but the public user options page
- Re-validate list ordering column/direction against the whitelist before building ORDER BY
- Removed a redundant check that wrongly blocked Super Users/managers acting for others