Added

• Employees: new field creditor account (the DATEV account of the employee, e.g. for travel expenses), also shown as a column in the list and in the Excel export.
• Lanes & Planes interface
  • The active employees are pushed with the general Kost1 as cost centers, the general Kost2 and the Kost2 they may book on (restricted by patterns like 5..02) as cost units, their Kost1 as reference cost center, their creditor account and their nickname as abbreviation. Numbers are sent without dots (as the DATEV export of Lanes & Planes requires). Finance maintains these settings in the configuration parameter "Lanes & Planes"; activation and API key are set in projectforge.lanesandplanes..
  • Additional users who aren't employees (e.g. an external accountant) can be entered in the configuration parameter. They are sent with name and email only, so they aren't deactivated and their role and managers are kept. The service admin and guest profiles of Lanes & Planes can't be entered: the import doesn't touch them.
  • Cost centers and cost units already existing in Lanes & Planes can be entered with their names in the configuration parameter (pasted from the user export). They are sent under that name, so Lanes & Planes reuses them instead of rejecting them as duplicates.
  • A changed email of an employee is held back (the old one is still sent, with a hint on the problem dashboard) until it was changed in Lanes & Planes and confirmed in the configuration parameter. Otherwise Lanes & Planes would deactivate the user and create a new one.
  • A suspiciously small user list isn't pushed (Lanes & Planes deactivates every user not sent): it's checked against a minimum number of users and against the last push, also after a restart of ProjectForge. A missing push state is reported on the problem dashboard.
• Data transfer: files stored in the file system are compressed and can be encrypted at rest (AES-256, key in projectforge.files.fileSystemEncryptionKey), so backups of the file system don't contain them in plain text.
• Users: new fields alternative and former e-mail addresses (comma separated, e.g. after a change of name), also searchable and in the Excel export.

Improved

• System administration: two copy & paste samples for the alert message (maintenance, new release), with the next full hour and the next release filled in.
• Change password and change WLAN password are pages of the new user interface and show when the password was last changed.
• System statistics
  • The database tile appears at once: the number of history entries and attributes is the estimate of the database (~) instead of a count taking minutes.
  • Tiles still loading show their title and a spinner.
  • CPU load and system load average as bars.
• Leave account
  • Moved to the new interface; the statistics now include the next year as well.
  • Leave applications with a day without any substitute are marked red.
  • A leave application or leave account entry opened from the leave account returns to it.
• Leave applications
  • List and form moved to the new interface; working days, days left and the vacations of the substitutes follow the form as it is edited.
  • The form charts the vacation and the overlapping vacations of the substitutes over the calendar days, with weekends, holidays and the days without any substitute.
  • The list shows each leave application as a bar over its days, with the days without any substitute in red.
  • Only the statuses that may be set are offered.
  • A leave application opened from the calendar returns to it on save.
• Leave applications
  • The period and the employee are always on the filter row of the list; the period finds every leave application overlapping it.
  • The period is a calendar year by default, the list starts with the current one: any date entered gives its year, and the arrows page a year back or forth. A month or a free range can be chosen instead.
  • The form shows the vacation days left once the application being edited is counted, too, in red where they are not enough.

Changed

• Docker image: based on Java 21 (Eclipse Temurin 21 JRE) instead of Java 17. ProjectForge still runs on Java 17 or newer.

Fixed

• Contribution margin (order book and scripts)
  • Accounting records count in the month of their record number (booking period), not in the month of their date: an invoice of September booked into August now counts as booked in August.
  • Scripts include the current month up to today as preliminary values (time sheets and unbooked invoices).
• Time sheet form: choosing a task could fail now and then with "Session/EntityManager is closed" while the cost unit cache was being refreshed.
• Lists
  • A list came back from an entry with an outdated filter when it had been paged back to a filter used shortly before (e.g. a year back and forth).
• Security
  • Phone lookup (/rsPublic/phoneLookup) is disabled until an own key is configured in projectforge.phoneLookupKey; the former default placeholder is no longer accepted.
  • Force delete checks the CSRF token like all other write actions.
• Vacation export
  • Rejected leave applications are no longer exported.
• Vacation list: sorting by the status or the days column had no effect.
• Year filter
  • The year filter of the leave applications and the contracts is applied again; it was ignored in the new interface.

Security

• Changing the own password or WLAN password: a wrong old password counts as failed login attempt and locks further attempts for a while, like the login does.
• A password change (own, by an admin or by a password reset) now also ends the user's other open sessions, not only the stay-logged-in devices. The session the own password was changed in stays logged in.