searchsearch
search burger-menu Menuburger-menu Close
Hotfixes

Summer 2026 Hotfixes

18 June 2026

This page provides minor fixes relating to the Summer 2026 Update, enhancing performance, resolving bugs, and improving security. Check back regularly to review any fixes released.

Hotfixes Released

Expand each section for more information about the fixes released to the HEAT system.

  • Updated the Retention Tool and associated functionality, including the below changes. For more information about the changes to the Retention Tool, please see our latest update.
    • Added a ‘Retention Expiry Date’ field to the Privacy tab on Student and Ambassador records.
    • Added a ‘Retention Expiry Date’ column to the Student Duplication Tool search grid.
    • Added a ‘Bulk Delete All’ option to the Students Retention grid.
  • Updated the Ambassador deletion process so that Ambassador records are now permanently deleted rather than soft deleted. This also deletes any associated Contracts, Timesheets, and Expenses, removes the Ambassador from Activities and Work Opportunities, and unlinks any associated Ambassador Application Forms without deleting them.
  • Updated the Higher Education (HE) Track Snapshot filter logic to include only Students with a record state of ‘Current’ and Ambassadors with a record state of ‘Current’ or ‘Archived’. Records with other states will be excluded from the results.
  • Updated permission handling when adding beneficiaries to Activity Sessions so that only the ‘Edit Activity’ permission is required, rather than the ‘Edit Students’ or ‘Register Students’ permissions.
  • Added a Field Setting and an Information button to the Logos section of both the Event Programme Form and Survey Templates.
  • Improved the Matched Comparator Report to prevent timeouts when processing certain criteria selections.
  • Minor wording updates within the HEEL Submission Portal.
  • Minor refinements to support the release of the HEEL Submission Portal to the wider sector:
    • Added the A-Z of Outcomes to downloaded submission document. 
    • Sorted Target Participant Types alphabetically in downloaded documents. 
    • Sorted Activity Sub-Types alphabetically. 
    • Improved formatting and navigation within downloaded documents. 
    • Added confirmation messages when records are submitted or published. 
    • Added sorting functionality to HEEL Submission Portal grid. 
    • Improved audit logging for fields where there are multiple records available for selection.
    • Resolved accessibility issues in the HEEL Submission Portal editor.
  • Improvements to key fields and sections in the HEEL Submission Portal to support user experience:
    • Added a new permission allowing authorised users to ‘Unpublish’ submissions as required.
    • Added a requirement to reconfirm declaration of consent when republishing an edited submission.
        • Added an optional checkbox to sign up to TASO’s newsletter. 
            • Removed duplicate values from evaluation lists. 
            • Improved onscreen text to help guide users to use the HEEL Submission Portal with ease.
            • Renamed ‘Summary of evaluation findings’ field to ‘Summary of evaluation’. 
            • Updated the Terms of Use link wording. 
          • Updated the ACORN section description in the Geography tab on both Student and Ambassador records.
          • Updated the banner message displayed when attempting to view an archived File Store record to improve the user experience.
          • Fixed an issue with the Import validation calculations for the number of new records to be added and existing records to be updated.
          • Further improved Multi-Factor Authentication (MFA) security across the main HEAT system by strengthening the existing 60-second restriction to prevent multiple MFA challenges being requested simultaneously.
          • Fixed an issue that prevented Survey Template exports from being generated on the database.
          • Updated the Student Duplicate Tool’s Beneficiary Replacement modal to display the full Institution summary, making it easier to identify the correct Institution.
          • Improved the Ambassador record audit log to show whether a Work Opportunity application was submitted via the Student Ambassador Portal or the via an Ambassador Import.
          • Fixed an issue that was preventing new Institution Contacts from being created.
          • Fixed a bug which was causing issues retrieving User records when searching by Institution Group (using the :group filter)
          • Updated the following background tab field settings so that the associated fields can now be hidden from the Ambassador Application Form:
            • Ethnicity Required, Disability Required, Institutions Required, and Work Visa Questions Required.
          • Improved account security by ensuring database Users are logged out of all active sessions when their password is reset.
          • Updated Work Opportunity advertising logic so that Work Opportunities are only visible to Ambassadors whose Contracts have been signed and have started by the Work Opportunity ‘Start date’.
          • Added the “!” (Not) option to the Tags filter (:tags) in the File Store, allowing users to exclude records with a specified tag from their search results by applying the :tags filter, adding the exclamation mark and then typing the tag you wish to exclude.
          • Fixed an issue with column sorting on the Event Programme Applications and Work Opportunities search pages.
          • In the Duplicate Clean tool, the merge process has been updated so that the master Student record includes an audit entry identifying which Student records have been merged into it.
          • Fixed an issue that caused Student, Activity, and Institution records to incorrectly appear in an edited state.
          • Added ‘subscriberType’ (int) and ‘subscriberTypeName’ (string) to the /institutions endpoints in the API.
          • Resolved an issue where filtering Ambassador Contracts by status did not return the expected results
          • Fixed an issue where the Student Monitoring Ethnicity chart was displaying incorrect figures for users without the ‘View Student Special Category Fields’ permission
          • Updated the Student Profiler Report so that discontinued Activity types are no longer included in the total Activity count columns
          • Improved permission handling in the Student Profiler Report to ensure Activity HEAT IDs for other Institution Groups are only visible to users who have the ‘View Activity’ permission
          • Resolved an issue where Student records could be omitted from exports if they were updated while the export was being processed
          • Improved the import process by providing clearer messaging on the Import tab while records are being indexed. During the indexing process, import records will be displayed in the ‘Waiting to be indexed’ column.
          • Fixed an issue where certain duplicate Ambassador expense records could not be opened due to an error.
          • Improved Multi-Factor Authentication (MFA) security across the main HEAT system, Student Ambassador Portal, and Referee Portal by adding rate limiting to One-Time Password (OTP) requests. Users will need to wait 60 seconds before requesting another OTP. This helps protect the login process against excessive authentication request activity.
          • Improved the security of authentication and request handling across the database by strengthening cookie security settings.
          • Improvements to the Students permissions allowing Custom Roles, with View and Edit Activity permissions, to access the Activity Student Register as follows:
            • View, Register, Edit Students. Full access to activity registration.
            • Edit Students. Full access to activity registration.
            • View Students. Full View access without the ability to update.
            • View and Register Students. Ability to register Students and update the Activity register, allowing click through access to the Student record without the ability to update Student records.
            • Please note: This change applies to Student registration within the HEAT user interface and does not affect Student registration via Imports. An additional piece of follow-on work is required that addresses roles that have Register Students alongside ‘View’ and ‘Edit Activities’. This work will remove the ability to see Student records within the Activity Register but continue to allow the Registration of Students via Import. Once this is complete, we will ensure that Activity Sessions mirrors this behaviour.
          • Fixed an issue in the Activity Record > Beneficiaries menu> Registered Students tab where the ‘Select All’ checkbox could be applied multiple times, causing incorrect student counts to be added to the Beneficiary Institutions table.
          18 June 2026 Hotfixes
          angle-left Back Important change to Ambassador Record deletionangle-right