searchsearch
search burger-menu Menuburger-menu Close

Summer 2026 Hotfixes

18 June 2026

This page provides minor fixes relating to the Summer 2026 Update, enhancing performance, resolving bugs, and improving security. Check back regularly to review any fixes released.

Hotfixes Released

Expand each section for more information about the fixes released to the HEAT system.

  • Improved the import process by providing clearer messaging on the Import tab while records are being indexed. During the indexing process, import records will be displayed in the ‘Waiting to be indexed’ column.
  • Fixed an issue where certain duplicate Ambassador expense records could not be opened due to an error.
  • Improved Multi-Factor Authentication (MFA) security across the main HEAT system, Student Ambassador Portal, and Referee Portal by adding rate limiting to One-Time Password (OTP) requests. Users will need to wait 60 seconds before requesting another OTP. This helps protect the login process against excessive authentication request activity.
  • Improved the security of authentication and request handling across the database by strengthening cookie security settings.
  • Improvements to the Students permissions allowing Custom Roles, with View and Edit Activity permissions, to access the Activity Student Register as follows:
    • View, Register, Edit Students. Full access to activity registration.
    • Edit Students. Full access to activity registration.
    • View Students. Full View access without the ability to update.
    • View and Register Students. Ability to register Students and update the Activity register, allowing click through access to the Student record without the ability to update Student records.
    • Please note: This change applies to Student registration within the HEAT user interface and does not affect Student registration via Imports. An additional piece of follow-on work is required that addresses roles that have Register Students alongside ‘View’ and ‘Edit Activities’. This work will remove the ability to see Student records within the Activity Register but continue to allow the Registration of Students via Import. Once this is complete, we will ensure that Activity Sessions mirrors this behaviour.
  • Fixed an issue in the Activity Record > Beneficiaries menu> Registered Students tab where the ‘Select All’ checkbox could be applied multiple times, causing incorrect student counts to be added to the Beneficiary Institutions table.
18 June 2026
angle-left Back