148 results found

1. IntegratedLogin with "afm" schema

   I'd like to be able to use integratedLogin in MSSQL without having to change the database schema from afm to dbo.

   Perhaps an additional attribute in the login element in afm-projects.xml to set the schema name separately would make sense?

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Platform  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

2. Issue with Long Usernames and Favorites Registration

   Long usernames cause the taskid field in afmptasks to overflow, preventing favorites registration.
   Please consider increasing the field size in advance to avoid manual updates with every version upgrade.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Platform  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

3. Support secure Content Security Policy

   Security becomes more and more important for all companies with an online presence. They require their software to work with tight security restrictions.

   An important security restriction to block Cross-Site Scripting (XSS) is the implementation of a Content Security Policy (CSP) header. This header can block inline JavaScript and JavaScript eval as an effective and visible defense against XSS.

   Recent versions of Archibus already implement major improvements to protect against XSS internally. However, major clients like banks and telecommunications companies want to visibly protect their systems and users accross their entire online presence, without relying on the internals of each individual application. External validators such as BitSight (https://www.bitsight.com/) check for the presence of a secure CSP header.

   The following insecure CSP can be defined without affecting basic Archibus Web Central functionality (when not using external integrations like ESRI).
   frame-ancestors 'self'; default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; object-src 'none'; base-uri 'self'; form-action 'self';

   To protect against XSS, the unsafe directives 'unsafe-inline' and 'unsafe-eval' for scripts need to be removed. The 'unsafe-inline' for CSS is less of a problem.

   Attached to this proposal is documentation about achieving a security CSP header provided by one of our clients. See also https://content-security-policy.com/unsafe-inline/ and https://csp-evaluator.withgoogle.com/

   Security becomes more and more important for all companies with an online presence. They require their software to work with tight security restrictions.

   An important security restriction to block Cross-Site Scripting (XSS) is the implementation of a Content Security Policy (CSP) header. This header can block inline JavaScript and JavaScript eval as an effective and visible defense against XSS.

   Recent versions of Archibus already implement major improvements to protect against XSS internally. However, major clients like banks and telecommunications companies want to visibly protect their systems and users accross their entire online presence, without relying on the internals of each… more

   • 

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   1 comment  ·  Platform  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

4. google chat

   It would be a great idea to integrate G-Chat. Rather than using emails for notifications, to send a ping or notification via Google Chat would be a great option.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Platform  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

5. Connectors - Ability to stop/kill connector run

   When setting up connectors with large files, if there are issues w/ data in the file or the setup of the connector, we have to wait until the connector completes. Sometimes this can take a REALLY long time.

   It would be nice to be able to stop the connector process so that adjustments can be made to the connector config OR to the file that is being loaded.

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Platform  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

6. Lack of API control

   Description

   Current issue: The API provides no usage control mechanisms
   
   No quotas: No way to limit the number of requests per user or API key
   
   No monitoring: No access to usage stats, error rates, or response times
   
   No throttling: No traffic regulation to prevent abuse or overload
   

   Requested improvement

   Add quotas: Allow customizable request limits per API key
   
   Enable monitoring: Provide basic usage stats (calls, errors, latency)
   
   Implement throttling: Introduce rate limiting to control traffic load
   

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Platform  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

7. Ability to assign multiple User Roles to User

   A single user would then become a part of multiple user roles either increasing their ability to view/access areas of Archibus or gradually restricting their access / VPA as roles are assigned to them.
   Therefore a user with more than one role would see all the processes for all the roles and apply all their VPA restrictions.
   This would allow admins to create roles per application (for example) and assign those to different users

   13 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   4 comments  ·  Platform  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

8. User Management - Login Timestamp and Account Status

   For many clients, there are critical needs and often government compliance requirements for user accounts. Clients are required to suspend access if a user has not logged in for a certain period (such as 90 days), and sometimes to delete a user if they have not logged in for a certain period (such as 180 days).

   I am aware of the GDPR functionality. While that is useful for account deletion, the Archibus system lacks the necessary information to make any determinations on when to set the deletion date. If using SSO, we may or may not be able to get this information from the IdP. But even if we do, it's an extra unnecessary integration for a basic feature.

   There is also no simple way to disable an account. We typically have to either update the user_name or change to a role has nothing assigned. Both are not ideal.

   What I would like to see added as base features are:

   1. A last login timestamp on the afm_users table that updates each time the user logs in.
   2. An active flag field or status field on afm_users that gets checked at login to allow an easy way of disabling a user.

   For many clients, there are critical needs and often government compliance requirements for user accounts. Clients are required to suspend access if a user has not logged in for a certain period (such as 90 days), and sometimes to delete a user if they have not logged in for a certain period (such as 180 days).

   I am aware of the GDPR functionality. While that is useful for account deletion, the Archibus system lacks the necessary information to make any determinations on when to set the deletion date. If using SSO, we may or may not be able to get… more

   10 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Platform  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

9. Foundations Service Desk Integration for Move Actions

   My client has foundations, and space. We're implementing move management and have discovered that the Move Actions option 'Generate Work Request?' does not actually generate any records in the Service Console.

   These standard options are very misleading to clients, who are expecting their teams to be notified of work, and have a place to manage it.

   A simple move workflow should be out of the box with the Space license. So that those Move Actions can be managed in a simple way.

   (Full blown Service Desk or Maintenance Module would be overkill for managing the actions associated with moves.)

   2 votes

   Vote Vote Vote

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Vote

   We’ll send you updates on this idea

   0 comments  ·  Platform  ·  Delete…  ·  Admin →
   How important is this to you?

   Not at all You must login first! Important You must login first! Critical You must login first!

   We're glad you're here

   Please sign in to leave feedback

   Signed in as (Sign out)

   Close

   Close

   Submit Rating

10. archibus.log sql statements

    Starting from 2022.02 seems that there is no more option to disable prepared statements globally in web central.

    You need to take each parameter one by one and replace the ? value in original sql. If the parameter is of type date the thing is even more complex as you need to convert the date string into date object (to_date(……).
    So for debug purposes these are almost useless.

    My suggestion is to update DbConnectionImpl class and to adapt these 2 methods and use them instead of just logging the original sql string. This should work for Oracle

                private String formatSql(String sqlQuery, Object... parameters) {
                    String[] parts = sqlQuery.split("\\?");
                    StringBuilder sb = new StringBuilder();
    
                    // This might be wrong if some '?' are used as litteral '?'
                    for (int i = 0; i < parts.length; i++) {
                        String part = parts[i];
                        sb.append(part);
                        if (i < parameters.length) {
                            sb.append(formatParameter(parameters[i]));
                        }
                    }
                    return sb.toString();
                }
    
                private String formatParameter(Object parameter) {
                    if (parameter == null) {
                        return "NULL";
                    } else {
                        if (parameter instanceof String) {
                            return "'" + ((String) parameter).replace("'", "''") + "'";
                        } else if (parameter instanceof Timestamp) {
                            return "to_timestamp('" + new SimpleDateFormat("MM/dd/yyyy HH:mm:ss.SSS").
                                    format(parameter) + "', 'mm/dd/yyyy hh24:mi:ss.ff3')";
                        } else if (parameter instanceof oracle.sql.DATE) {
                            return "to_date('" + new SimpleDateFormat("MM/dd/yyyy HH:mm:ss").
                                    format(((DATE) parameter).timestampValue()) + "', 'mm/dd/yyyy hh24:mi:ss')";
                        } else if (parameter instanceof Boolean) {
                            return ((Boolean) parameter).booleanValue() ? "1" : "0";
                        } else {
                            return parameter.toString();
                        }
                    }
                }
    

    Thanks

    Starting from 2022.02 seems that there is no more option to disable prepared statements globally in web central.

    You need to take each parameter one by one and replace the ? value in original sql. If the parameter is of type date the thing is even more complex as you need to convert the date string into date object (to_date(……).
    So for debug purposes these are almost useless.

    My suggestion is to update DbConnectionImpl class and to adapt these 2 methods and use them instead of just logging the original sql string. This should work for Oracle

                private String formatSql(String

    … more
    3 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Platform  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

11. Names with apostrophe can not edit in form

    With version V20224-02 it is no longer possible to display apostrophe characters in the ID fields. They can still be saved, but the data record can no longer be displayed afterwards. This behavior occurs in many places in the system.
    One example is the employee definition screen. Although the employee RONALD.MC'DONALD (em_id) can be saved there, the data record can no longer be displayed afterwards. It would be nice if the behavior could be restored.

    28 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    3 comments  ·  Platform  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

12. Dark mode

    Can we have a "dark mode" option for the browser version of "Archibus" and "Onsite" on the phone, for those of us who are photo sensitive. Dark mode also reduces energy consumption.

    5 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Platform  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

13. Move "Save" button to bottom of data entry views

    The Save button disappears as the user scrolls down through data entry views. Users often click the button in the lower right-hand corner without reading it - it is a CLOSE button. This causes the user to lose their work.

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Platform  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

14. Edit Archibus Data Dictionary Enum List Validation check

    Edit Archibus Data Dictionary Enum List Validation check, ab-edit-data-dictionary.axvw - can we add some kind of validation check to enumlist so that it is in the correct format and enum value is actually in database? From time to time, admin user might make some update on enumlist incorrectly and when the server is restarted, it cannot be boot up because there is an issue with the enumlist, usually it is the enumlist format is incorrect or the db value in the table does not have a matching enum value in afmflds.enumlist.

    8 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Platform  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

15. Language Selection should list each Language in its native Spelling

    When opening the My Profile window to select a user interface language, the list of languages is based on the currently selected language. Example for German:

    • Italienisch (Italien)
    • Französisch (Kanada)
    • Englisch (Australien)
    • Französisch (Frankreich)
    • Japanisch (Japan)
    • Deutsch (Deutschland)
    • ..

    When you're a non-German speaker you will have trouble selecting your language since all names are in German and you probably don't know how your language is spelled in German.

    The situation might be worse if the language is set to Japanese and you don't know how to set it back to English. Hint, it's: 英語 (イギリス).

    Suggestion: Always display each language in the list in its native spelling, regardless of language settings:

    • Italiano (Italia)
    • Français (Canada)
    • English (Australia)
    • Français (France)
    • 日本語 (日本)
    • Deutsch (Deutschland)
    • ..

    This way it would be ensured that everybody speaking a specific language can identify and select it.

    When opening the My Profile window to select a user interface language, the list of languages is based on the currently selected language. Example for German:

    • Italienisch (Italien)
    • Französisch (Kanada)
    • Englisch (Australien)
    • Französisch (Frankreich)
    • Japanisch (Japan)
    • Deutsch (Deutschland)
    • ..

    When you're a non-German speaker you will have trouble selecting your language since all names are in German and you probably don't know how your language is spelled in German.

    The situation might be worse if the language is set to Japanese and you don't know how to set it back to English. Hint, it's: 英語 (イギリス).

    Suggestion: Always display each… more

    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Platform  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

16. Ability to copy Processes in the "View Tasks by Processes and Applications"plication

    When creating new processes, the ability to copy exisiting processes would allow one to copy a similar process and modify it. This would be much less time consuming than having to mannually enter all of the different tasks into a new process.

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Platform  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

17. Update connector email to include Connector Description

    When migrating code and connectors to different environments for a client, often times the connectors in DEV, UAT and PROD will have the same connector name. This could be due to many factors, including custom db code that runs based on the connector name.

    It would be helpful to include the Connector Description in the email that is sent out via the connector email notifications. This way the connector code can remain the same in all environments w/ only the description being updated to include the environment name being sent from.

    This would also be nice to include so that users that receive the email get a description as to what the connector is doing / does (provided thats included in the description field.

    When migrating code and connectors to different environments for a client, often times the connectors in DEV, UAT and PROD will have the same connector name. This could be due to many factors, including custom db code that runs based on the connector name.

    It would be helpful to include the Connector Description in the email that is sent out via the connector email notifications. This way the connector code can remain the same in all environments w/ only the description being updated to include the environment name being sent from.

    This would also be nice to include so that… more

    3 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Platform  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

18. "notification log"

    In recent versions of Archibus - version 2023 and later, it looks like you have to connect to a valid email server in order to view emails sent in the Notifications Log. Prior 2023 versions, you can set up a dummy email server and when it failed to send a notification, you can still see it in the Notifications Log, with the email status "ERROR" and the error details (e.g. failed to connect to smtp server..)

    This capability to view emails that failed to send in the Notifications Log was intentionally taken out in version 2023. It would be great to put it back in since in Non Production client environment, it would be the only way to verify/test emails that are supposed to come out (e.g. maintenance emails, hoteling/reservation emails). We don't want to connect to a real mail server in non production client environments since we do not want the emails to actually send, but we do want a way to verify that archibus is trying to send emails as expected.

    In recent versions of Archibus - version 2023 and later, it looks like you have to connect to a valid email server in order to view emails sent in the Notifications Log. Prior 2023 versions, you can set up a dummy email server and when it failed to send a notification, you can still see it in the Notifications Log, with the email status "ERROR" and the error details (e.g. failed to connect to smtp server..)

    This capability to view emails that failed to send in the Notifications Log was intentionally taken out in version 2023. It would be great… more

    6 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    1 comment  ·  Platform  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

19. Move Management Email content

    Add ability to include move request fields in email content using binding expressions.

    example:
    Move: {mo.emid}
    From: {mo.fromblid} - {mo.fromflid} - {mo.fromrmid}
    To: {mo.toblid} - {mo.toflid} - {mo.torm_id}

    And for group moves, include ability to email a list of the MO records in the group move:

    {{project.projectid}}
    {mo.moid} {mo.emid} {mo.fromlocation} {mo.to_location}

    (from/to location would concatenate fromblid/fromflid/fromrmid .... )

    4 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Platform  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating

20. Move Management Application Parameters

    Add move application parameters (and apply the settings to the move module, obviously...)

    1. number of days before move request

    setting a value of 10 will not allow selecting a move date earlier than 10 days (oposite of reservations and max number of days)

    1. hide create service request checkbox

    clients dont always have service desk or bldg ops - would be nice to be able to turn that field off;

    1. Sync move actions status with move

    if not using service requests, would be good to have option for simple action status

    1. sync move actions with move location

    for single moves and actions assigned, users will generally have move actions required at either the 'from' or the 'to' location of the move; maybe a quick option on the move action page - use from location / use to location

    Add move application parameters (and apply the settings to the move module, obviously...)

    1. number of days before move request

    setting a value of 10 will not allow selecting a move date earlier than 10 days (oposite of reservations and max number of days)

    1. hide create service request checkbox

    clients dont always have service desk or bldg ops - would be nice to be able to turn that field off;

    1. Sync move actions status with move

    if not using service requests, would be good to have option for simple action status

    1. sync move actions with move location

    for single moves and… more

    2 votes

    Vote Vote Vote

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Vote

    We’ll send you updates on this idea

    0 comments  ·  Platform  ·  Delete…  ·  Admin →
    How important is this to you?

    Not at all You must login first! Important You must login first! Critical You must login first!

    We're glad you're here

    Please sign in to leave feedback

    Signed in as (Sign out)

    Close

    Close

    Submit Rating