Release notes

---

What's new

• To prevent conflicts like self-blocking, we have disabled the ability to edit user own account via the import-export operation in Trading Accounts page.

Bug fixes

• The CSV export on the Order Routing page has been fixed.

---

What's new

• We have added a restriction to the UI for changing groups for trading accounts. Now, it is impossible for a manager account to select a non-manager group, and vice versa—it is impossible to assign a manager group to a non-manager account.
• We have added hints to the UI indicating which fields cannot be changed after creating an entity, even during the import/export process.

Bug fixes

• Fixed a bug where it was impossible to save data from the editing form if optional fields were cleared.
• Fixed a bug in Symbols migration from MetaTrader, when it was impossible to migrate a symbol with sessions starting on one day and ending on the next day.

---

What's new

• We have added a new type of widget for the Dashboard with summary information about open positions updated in real time.
• We have also replaced manual data updates ("Refresh" button) in the Cash/Assets Transfers page with automatic real-time updates.

Bug fixes

• Fixed a bug where the content of the iframe widget was not displayed in full-screen mode.

---

What's new

• We have added links to the API specification and user guide to the main menu.

---

What's new

• To sign requests for adding new entities or editing existing ones, we now use a secret string generated on the server, which has further improved the security of our application.
• We have improved the UX for selecting a group in the trading account add/edit form. Now only groups with similar configuration are displayed, which reduces the risk of incorrect configurations. Similar UX improvements have also been made to the Group add/edit form.

Bug fixes

• We have hidden the "Reports" section from the Main Menu if the user does not have permission to view these pages, so as not to show them the "Access denied" message.

---

Bug fixes

• Fixed the issue where it was impossible to save the Commission Profile changes in the group settings

---

Bug fixes

• Fixed "CSV injection" vulnerability in import-export feature
• Fixed "3rd party assets" vulnerability in the Dashboard iframe-widget
• Fixed missed /logout endpoint call if the user token has expired and/or cannot be renewed, to additionally notify the back-end that the user is no longer authorized