Totara Talent Experience Platform Release Notes

Security releases for Totara Evergreen 20171221, 10.3, 9.14, 2.9.26, 2.7.34, 2.6.51, 2.5.58, and 2.4.57 released 21st December 2017

 
Sam Hemelryk
Security releases for Totara Evergreen 20171221, 10.3, 9.14, 2.9.26, 2.7.34, 2.6.51, 2.5.58, and 2.4.57 released 21st December 2017
by Sam Hemelryk - Thursday, 21 December 2017, 3:56 PM
Group Totara

Hello everyone,

The following versions of Totara Learn have now been released:

  • Release Evergreen
  • Release 10.3
  • Release 9.14
  • Release 2.9.26
  • Release 2.7.34
  • Release 2.6.51
  • Release 2.5.58
  • Release 2.4.57

These versions do contain security fixes, and for this reason we strongly recommend upgrade.
Each release also includes bug fixes and improvements.

A big thanks to the following people for their contributions to this release:

  • Barry Oosthuizen at Learning Pool - TL-9277
  • Eugene Venter at Catalyst NZ - TL-16597, TL-16610, TL-16623
  • Francis Devine at Catalyst NZ - TL-16417
  • Grace Cooper at Kineo UK - TL-16396
  • Jo Jones at Kineo UK - TL-16474, TL-16530
  • Kenneth Hendricks at Catalyst AU - TL-16475
  • Richard Eastbury at Think Associates - TL-16376, TL-16436
  • Simon Adams at Kineo UK - TL-16483

Kind regardsSam Hemelryk

Release Evergreen (21st December 2017):

Key:           + Evergreen only

Security issues:

    TL-16270       360° Feedback now correctly disposes of the user's access token when no longer needed

                   Previously if a user accessed a 360° Feedback instance using a token, that
                   token would be stored in the user's session and would allow them to access
                   the 360° Feedback as a user (not with a token).
                   The token used to access the first 360° Feedback instance is now disposed
                   of correctly.


Improvements:

    TL-14937       Added popover UI component

                   This UI component is based off the bootstrap 3 popover component. This can
                   be viewed through the core/progress_bar template in the template library
                   (Site administration > Development > Template library)

    TL-15798   +   Report Builder filters can now have default values
    TL-15832   +   Updated xpath when matching against html tables using Behat to allow non-exact matches
    TL-15895   +   Added the 'Send to self' option to Email settings for Scheduled reports
    TL-15896   +   Added a report builder administration setting to control what scheduled report email options are available
    TL-15907       Improved how evidence custom field data is saved when importing completion history
    TL-16154       Improved CSS of the last course accessed block, increasing the width of the progress bar
    TL-16176   +   Converted maintenance countdown timer to use the correct notification template and AMD module
    TL-16432       Course completion history records are now included in course backups and can be restored

Bug fixes:

    TL-9360        Managers approving Seminar booking requests are now redirected back to the approvals page

                   Previously, when a manager approved staff requests for bookings into a
                   Seminar event, they would then be redirected to a page saying 'You can not
                   enrol yourself in this course' (assuming they were not enrolled or did not
                   have other permissions to view the attendees page). Following any approvals
                   (by a manager or any other user), the page will now refresh onto the
                   approval required page, with a message confirming the update was
                   successful.

    TL-9462        Improved page layout when confirming a learning plan template workflow change
    TL-13934       Fixed 'user' join not in join list for content in the message report
    TL-14776       Fixed quickform error when using a multiselect custom field
    TL-15029       Fixed brief positioning issue when scrolling a 360° Feedback page
    TL-15956       Set the RPL fields on the course completion report to read only when appropriate

                   Previously, the RPL fields were allowing data to be entered/edited when
                   users were already complete. The form will now set them to read only in
                   this situation. There is also now a column with a link to the course
                   completion editor, which should be used if changes are required.

    TL-16173       Program error messages are now rendered as standard notifications
    TL-16253       HTML pasted into Atto is now sanitised to remove markup known to cause display issues

                   When copying HTML into an Atto editor instance, script, iframe and head
                   HTML tags are now removed. These tags can be added manually when editing
                   the text in source mode.

    TL-16287       Fixed renaming of user profile fields breaking HR Import user source settings

                   If the HR Import user source (CSV or Database) was configured to import a
                   custom profile field and the field short name was changed then HR Import
                   would no longer import data to it. In some situations it would then be
                   impossible to re-add the field. This has now been fixed.

    TL-16296       Fixed a bug leading to schedule changes for reports being forgotten
    TL-16312       Fixed formatting of text area fields in the Database course activity when exporting

                   When exporting text area field data from the Database activity the field
                   content included HTML tags. It now converts the HTML to standard text.

    TL-16318       Fixed calendar events for single Seminar sessions with multiple dates
    TL-16320       The standard loading icon is now used when managing course groups
    TL-16376       Fixed LDAP sync for user profile custom menu field

                   TL-14170 fixed a problem where custom user profile fields were not being
                   synced with an LDAP backend. The fix worked for all user profile custom
                   fields except for menu dropdowns which required an extra processing step
                   during the LDAP syncing. This has now been fixed.

    TL-16386       Fixed dashboard reset error with deleted users
    TL-16396       Fixed an SQL error occurring due to a missing default

                   This may have affected sites that have upgraded through Totara 2.5, and
                   which were using Seminar room functionality.
                   A missing upgrade step may have led to an incorrect null default value
                   existing in the facetoface_room table.
                   The fix for this issue has added the missing upgrade step which correctly
                   removes the null values and replaces them with the expected "0".

    TL-16404       Prevented default content being duplicated when restoring a course from the recycle bin
    TL-16405       Added RPL data to course backup and restore

                   This in turn means that RPL data will be restored on courses retrieved from
                   the recycle bin.

    TL-16411       Fixed unused custom grade scales not included in course backups
    TL-16417       Added missing include in the features link block external tests
    TL-16420       Course tiles are hidden in Featured Links blocks when the referenced course is deleted
    TL-16422       Fixed and removed forgotten deprecated location code in Seminar
    TL-16428       Ensured all HR Import sources run regardless of any error detected in the previous source

                   Previously, if an error occurred while importing an HR Import source, the
                   following sources would not be processed. Now, the following sources will
                   be processed, regardless of the result of earlier source imports. 

    TL-16429       Fixed Seminar session details missing from Trainer confirmation email
    TL-16430       Fixed alphabetical order user list when selecting a manager
    TL-16435       Fixed missing "Notification does not exist" string
    TL-16436       Fixed missing sesskey in Seminar notifications
    TL-16443       Fixed an SQL error in the Appraisal details report due to multi-select questions
    TL-16515       Fixed upgrade problem in langimport due to moodle merge

API changes:

    TL-16217   +   Removed deprecated custom menu functionality

                   Please use Site administration > Appearance > Main menu instead

    TL-16383   +   Converted Dynamic audience CSS to LESS

Contributions:

    * Francis Devine at Catalyst NZ - TL-16417
    * Grace Cooper at Kineo UK - TL-16396
    * Richard Eastbury at Think Associates - TL-16376, TL-16436

Release 10.3 (21st December 2017):

Security issues:

    TL-16451       Fixed permissions not being checked when performing actions on the Seminar attendees page
    TL-16550       Deletion of a job assignment now removes the staff manager role from the manager in the job assignment

Improvements:

    TL-9277        Added additional options when selecting the maximum Feedback activity reminder time
    TL-15920       Activities required for course completion are now shown in the progressbar popover

                   When a user clicks on the progressbar for a specific course, the activities
                   required to complete the course are now listed in a popover.

    TL-15992       A warning message is now shown when a Quiz may require more random questions than there are questions available

                   When creating or editing a quiz, warning messages are now shown when adding
                   random questions from categories that don't contain enough questions. It is
                   only a warning to highlight the risk and doesn't prevent the course
                   administrator from creating the quiz. 
                   
                   If a learner attempts to take a quiz with insufficient questions,
                   the system behaves as before.

    TL-16241       Fixed breadcrumb trail when viewing a user's completion report
    TL-16256       Allowed appraisal messages to be set to "0 days" before or after event

                   Some immediate appraisals messages were causing performance issues when
                   sending to a lot of users. 
                   This improvement allows you to set almost immediate messages that will send
                   on the next cron run after the action was triggered to avoid any
                   performance hits. The appraisal closure messages have also been changed to
                   work this way since they don't have any scheduling options.

    TL-16372       Added support for utf8mb4 collations with full Unicode support
    TL-16373       Added screen reader text to the block actions menu
    TL-16494       Improved embedded reports test coverage
    TL-16624       Improved exported course progress values within two Report Builder sources

                   The 'Record of Learning: Courses' and 'Course Completion' report sources
                   have been updated to enable a user's progress towards course completion to
                   be exported as a percentage.

    TL-16632       Admin categories are no longer links by default

                   If you installed from 10.0, 10.1 or 10.2 then by default categories in the
                   site administration block will be links.
                   This behaviour has proved unpopular and by default these categories are no
                   longer shown as links.
                   If you want to change this you can do so by searching for
                   linkadmincategories in the site administration block.


Bug fixes:

    TL-8062        Fixed Seminar notifications not being sent when the room has been changed
    TL-9885        Fixed validation for sending an extension request for a program

                   When a learner opened the page to request an extension, and in the
                   meanwhile an admin deactivated the possibility to send a request, the
                   learner could still send the request. The validation was fixed and made
                   consistent to prevent these cases. The same goes for direct calls to the
                   sending url.

    TL-10897       Fixed incomplete validation message for recertification window period
    TL-15804       Feedback Reminder periods help text has been clarified to explain it counts weekdays and not weekends

                   The Feedback Reminder period is calculated only using weekdays. All
                   weekends will be skipped and added to the period. To make this existing
                   behaviour clearer we modified the help text accordingly.

    TL-16015       Goal Custom fields are disabled in appraisals where applicable

                   If a user cannot answer the appraisal or does not have the necessary
                   permissions to edit a goal's custom fields then they will not be able to
                   edit the form fields for the custom field in the appraisal.

    TL-16218       Fixed a typo in the certification completion checker
    TL-16220       Fixed multisco SCORM completion with learning objects grading method (based on MDL-44712)

                   MDL-44712 introduced the "Require all scos to return 'completed'" setting.
                   This had been originally introduced into v10 and 11. Now it has been
                   backported to v9 and v2.9.
                   
                   However note the following:
                   * A multisco SCORM might send back "cmi.core.lesson_status" (or equivalent)
                   values for every SCO. However, if there is a status condition completion
                   setting, then Totara (and Moodle) marks the whole SCORM activity as long as
                   *any* SCO has a "cmi.core.lesson_status" value of "completed". 
                   * Things get especially confusing when a minimum score _condition_ is used
                   with a _grading_ method of "Learning Objects" (ie multisco). 
                   ** The minimum score condition uses the "cmi.score.raw" (or equivalent) to
                   compute whether the activity is complete.
                   ** If the SCORM does not send back a "cmi.score.raw" attribute and the
                   minimum score completion value is set, then the activity *never completes,
                   even if the student goes through the entire SCORM*.
                   ** In other words, _the minimum score completion setting has got nothing to
                   do with the "learning objects" grading method_. It is very
                   counter-intuitive but all along, there has been no code in SCORM module to
                   check the total no of "completed" learning objects against an expected
                   count. It is to address this problem that the new "Require all scos to
                   return "completed" status" setting is there.
                   * The TL patch also fixes a problem with MDL-4471 patch in which multiple,
                   simultaneous completion conditions were not evaluated properly. In this
                   case, if a multisco SCORM returned both "cmi.core.lesson_status" and
                   "cmi.score.raw" and the completion settings were for _both_ status and
                   minimum score, the activity would be marked as complete if the student
                   clicked through the entire SCORM but got less than the minimum score.

    TL-16300       Fixed automated backup when using specified directory for automated backups setting
    TL-16323       Fixed global search error when search is done a second time
    TL-16395       Fixed role custom names not restored when course is recycled

                   This change additionally means that custom names of roles which were not in
                   use at the time a backup is created will be stored in the backup anyway,
                   and will be restored only when restoring the course to a new course, as was
                   the behaviour previously with in-use roles.

    TL-16449       Fixed Multi-language filter issue on custom fields when admin tries to view a Seminar sign-up note
    TL-16458       Fixed Totara Connect SSO login process to update login dates and trigger login event
    TL-16462       Fixed display of custom dashboard menu item in the Totara menu
    TL-16472       Fixed Seminar direct enrolment not honouring restricted access
    TL-16473       Fixed Seminar trainers not receiving booking time/date changed notifications
    TL-16474       Removed all global filtering for user email values in Report Builder sources
    TL-16475       Fixed false unit test failure when an external service exists
    TL-16476       Fixed custom favicon in Basis theme
    TL-16492       Allow less privileged reviewers and respondents to a 360° Feedback to access the files added to a response
    TL-16504       Report builder block loading icon is now shown in the correct location
    TL-16512       Fixed "Back to the list of all roles" link for Assign system roles page
    TL-16521       Fixed certification messages that were not reset before upgrading to TL-10979

                   When patch TL-10979 was included in Totara 2.9.13 and 9.1, it did not
                   include an upgrade to reset messages which were not reset when the
                   recertification window opened before the upgrade. This patch resets those
                   messages, where possible, allowing the messages to be sent again. Users
                   whose recertification windows have reopened since upgrading to the above
                   mentioned versions will not be affected because they should already be in
                   the correct state.

    TL-16530       Fixed report builder cache generator

                   Previously the Report Builder source cache was removing the old cache table
                   before creating a new one, which was creating a problem whereby the user
                   couldn't use the old cache table and the new one wasn't ready.
                   The fix was to keep the old table until the new table was ready, at which
                   point the old table is removed.

    TL-16534       Fixed race condition when using the autocomplete text field
    TL-16552       Fixed the Empty string behaviour setting when used with the suspended field in the user HR Import element
    TL-16553       Fixed lock timeout value for memcached 3.x being too long
    TL-16554       Added language menu when creating new user via form

                   When a user is created a language menu is now displayed in the form to
                   allow the creator to set the user's language.
                   This ensures that any notifications the user is sent during or immediately
                   after the creation of their account are sent in their language.

    TL-16584       Site administration and Navigation blocks can be set to show on all pages after removal
    TL-16585       Progress bar percentages are displayed correctly in the current learning block when changing pages
    TL-16597       Exporting the old style progress bar no longer includes the HTML for it
    TL-16603       Ported MDL-55469 to allow learners to completely finish a final SCORM attempt

                   Important consideration: This fix relies on correct data submitted by the
                   SCORM package. If the SCORM reported that "cmi.core.lesson_status" is
                   either "completed", "failed", or "passed", then the attempt will be counted
                   as final even if user exited the activity without submitting/finalising the
                   attempt.

    TL-16604       Improved the UI of the 'Empty string behaviour in CSV' HR Import Job Assignment element so that it's disabled if the source is not CSV
    TL-16605       Fixed report title alignment for right-to-left languages when exporting to PDF in Report Builder
    TL-16606       Fixed legend font for exporting graphical reports to PDF
    TL-16610       Fixed exporting of progress in Record of Learning: Certification
    TL-16614       Fixed event roles from a cancelled event preventing users being assigned to a new event with the same date and time
    TL-16623       Fixed exported ID in the Course Completion report
    TL-16629       Fixed the incorrect resolution of promises when loading forms via AJAX fails

Database upgrades:

    TL-16437       Changed column type from text to char in block_totara_featured_links_tiles table 

Miscellaneous Moodle fixes:

    TL-16076       MDL-59504: Updated the Mahara logo

Contributions:

    * Barry Oosthuizen at Learning Pool - TL-9277
    * Eugene Venter at Catalyst NZ - TL-16597, TL-16610, TL-16623
    * Jo Jones at Kineo UK - TL-16474, TL-16530
    * Kenneth Hendricks at Catalyst AU - TL-16475

Release 9.14 (21st December 2017):

Security issues:

    TL-16451       Fixed permissions not being checked when performing actions on the Seminar attendees page
    TL-16550       Deletion of a job assignment now removes the staff manager role from the manager in the job assignment

Improvements:

    TL-9277        Added additional options when selecting the maximum Feedback activity reminder time
    TL-16241       Fixed breadcrumb trail when viewing a user's completion report
    TL-16256       Allowed appraisal messages to be set to "0 days" before or after event

                   Some immediate appraisals messages were causing performance issues when
                   sending to a lot of users. 
                   This improvement allows you to set almost immediate messages that will send
                   on the next cron run after the action was triggered to avoid any
                   performance hits. The appraisal closure messages have also been changed to
                   work this way since they don't have any scheduling options.

    TL-16494       Improved embedded reports test coverage

Bug fixes:

    TL-8062        Fixed Seminar notifications not being sent when the room has been changed
    TL-9885        Fixed validation for sending an extension request for a program

                   When a learner opened the page to request an extension, and in the
                   meanwhile an admin deactivated the possibility to send a request, the
                   learner could still send the request. The validation was fixed and made
                   consistent to prevent these cases. The same goes for direct calls to the
                   sending url.

    TL-10897       Fixed incomplete validation message for recertification window period
    TL-15804       Feedback Reminder periods help text has been clarified to explain it counts weekdays and not weekends

                   The Feedback Reminder period is calculated only using weekdays. All
                   weekends will be skipped and added to the period. To make this existing
                   behaviour clearer we modified the help text accordingly.

    TL-16015       Goal Custom fields are disabled in appraisals where applicable

                   If a user cannot answer the appraisal or does not have the necessary
                   permissions to edit a goal's custom fields then they will not be able to
                   edit the form fields for the custom field in the appraisal.

    TL-16218       Fixed a typo in the certification completion checker
    TL-16220       Fixed multisco SCORM completion with learning objects grading method (based on MDL-44712)

                   MDL-44712 introduced the "Require all scos to return 'completed'" setting.
                   This had been originally introduced into v10 and 11. Now it has been
                   backported to v9 and v2.9.
                   
                   However note the following:
                   * A multisco SCORM might send back "cmi.core.lesson_status" (or equivalent)
                   values for every SCO. However, if there is a status condition completion
                   setting, then Totara (and Moodle) marks the whole SCORM activity as long as
                   *any* SCO has a "cmi.core.lesson_status" value of "completed". 
                   * Things get especially confusing when a minimum score _condition_ is used
                   with a _grading_ method of "Learning Objects" (ie multisco). 
                   ** The minimum score condition uses the "cmi.score.raw" (or equivalent) to
                   compute whether the activity is complete.
                   ** If the SCORM does not send back a "cmi.score.raw" attribute and the
                   minimum score completion value is set, then the activity *never completes,
                   even if the student goes through the entire SCORM*.
                   ** In other words, _the minimum score completion setting has got nothing to
                   do with the "learning objects" grading method_. It is very
                   counter-intuitive but all along, there has been no code in SCORM module to
                   check the total no of "completed" learning objects against an expected
                   count. It is to address this problem that the new "Require all scos to
                   return "completed" status" setting is there.
                   * The TL patch also fixes a problem with MDL-4471 patch in which multiple,
                   simultaneous completion conditions were not evaluated properly. In this
                   case, if a multisco SCORM returned both "cmi.core.lesson_status" and
                   "cmi.score.raw" and the completion settings were for _both_ status and
                   minimum score, the activity would be marked as complete if the student
                   clicked through the entire SCORM but got less than the minimum score.

    TL-16300       Fixed automated backup when using specified directory for automated backups setting
    TL-16458       Fixed Totara Connect SSO login process to update login dates and trigger login event
    TL-16462       Fixed display of custom dashboard menu item in the Totara menu
    TL-16472       Fixed Seminar direct enrolment not honouring restricted access
    TL-16473       Fixed Seminar trainers not receiving booking time/date changed notifications
    TL-16476       Fixed custom favicon in Basis theme
    TL-16492       Allow less privileged reviewers and respondents to a 360° Feedback to access the files added to a response
    TL-16521       Fixed certification messages that were not reset before upgrading to TL-10979

                   When patch TL-10979 was included in Totara 2.9.13 and 9.1, it did not
                   include an upgrade to reset messages which were not reset when the
                   recertification window opened before the upgrade. This patch resets those
                   messages, where possible, allowing the messages to be sent again. Users
                   whose recertification windows have reopened since upgrading to the above
                   mentioned versions will not be affected because they should already be in
                   the correct state.

    TL-16530       Fixed report builder cache generator

                   Previously the Report Builder source cache was removing the old cache table
                   before creating a new one, which was creating a problem whereby the user
                   couldn't use the old cache table and the new one wasn't ready.
                   The fix was to keep the old table until the new table was ready, at which
                   point the old table is removed.

    TL-16553       Fixed lock timeout value for memcached 3.x being too long
    TL-16554       Added language menu when creating new user via form

                   When a user is created a language menu is now displayed in the form to
                   allow the creator to set the user's language.
                   This ensures that any notifications the user is sent during or immediately
                   after the creation of their account are sent in their language.

    TL-16584       Site administration and Navigation blocks can be set to show on all pages after removal
    TL-16603       Ported MDL-55469 to allow learners to completely finish a final SCORM attempt

                   Important consideration: This fix relies on correct data submitted by the
                   SCORM package. If the SCORM reported that "cmi.core.lesson_status" is
                   either "completed", "failed", or "passed", then the attempt will be counted
                   as final even if user exited the activity without submitting/finalising the
                   attempt.

    TL-16605       Fixed report title alignment for right-to-left languages when exporting to PDF in Report Builder
    TL-16614       Fixed event roles from a cancelled event preventing users being assigned to a new event with the same date and time
    TL-16629       Fixed the incorrect resolution of promises when loading forms via AJAX fails
    TL-16670       Fixed handling of suggestions within the autocomplete form element

Miscellaneous Moodle fixes:

    TL-16076       MDL-59504: Updated the Mahara logo

Contributions:

    * Barry Oosthuizen at Learning Pool - TL-9277
    * Jo Jones at Kineo UK - TL-16530

Release 2.9.26 (21st December 2017):

Security issues:

    TL-16451       Fixed permissions not being checked when performing actions on the Face-to-face attendees page

Improvements:

    TL-9277        Added additional options when selecting the maximum Feedback activity reminder time

Bug fixes:

    TL-8062        Fixed Face-to-face notifications not being sent when the room has been changed
    TL-15804       Feedback Reminder periods help text has been clarified to explain it counts weekdays and not weekends

                   The Feedback Reminder period is calculated only using weekdays. All
                   weekends will be skipped and added to the period. To make this existing
                   behaviour clearer we modified the help text accordingly.

    TL-16218       Fixed a typo in the certification completion checker
    TL-16220       Fixed multisco SCORM completion with learning objects grading method (based on MDL-44712)

                   MDL-44712 introduced the "Require all scos to return 'completed'" setting.
                   This had been originally introduced into v10 and 11. Now it has been
                   backported to v9 and v2.9.
                   
                   However note the following:
                   * A multisco SCORM might send back "cmi.core.lesson_status" (or equivalent)
                   values for every SCO. However, if there is a status condition completion
                   setting, then Totara (and Moodle) marks the whole SCORM activity as long as
                   *any* SCO has a "cmi.core.lesson_status" value of "completed". 
                   * Things get especially confusing when a minimum score _condition_ is used
                   with a _grading_ method of "Learning Objects" (ie multisco). 
                   ** The minimum score condition uses the "cmi.score.raw" (or equivalent) to
                   compute whether the activity is complete.
                   ** If the SCORM does not send back a "cmi.score.raw" attribute and the
                   minimum score completion value is set, then the activity *never completes,
                   even if the student goes through the entire SCORM*.
                   ** In other words, _the minimum score completion setting has got nothing to
                   do with the "learning objects" grading method_. It is very
                   counter-intuitive but all along, there has been no code in SCORM module to
                   check the total no of "completed" learning objects against an expected
                   count. It is to address this problem that the new "Require all scos to
                   return "completed" status" setting is there.
                   * The TL patch also fixes a problem with MDL-4471 patch in which multiple,
                   simultaneous completion conditions were not evaluated properly. In this
                   case, if a multisco SCORM returned both "cmi.core.lesson_status" and
                   "cmi.score.raw" and the completion settings were for _both_ status and
                   minimum score, the activity would be marked as complete if the student
                   clicked through the entire SCORM but got less than the minimum score.

    TL-16458       Fixed Totara Connect SSO login process to update login dates and trigger login event
    TL-16483       Fixed Report Builder caching for reports that include Face-to-face session roles filter
    TL-16492       Allow less privileged reviewers and respondents to a 360° Feedback to access the files added to a response
    TL-16521       Fixed certification messages that were not reset before upgrading to TL-10979

                   When patch TL-10979 was included in Totara 2.9.13 and 9.1, it did not
                   include an upgrade to reset messages which were not reset when the
                   recertification window opened before the upgrade. This patch resets those
                   messages, where possible, allowing the messages to be sent again. Users
                   whose recertification windows have reopened since upgrading to the above
                   mentioned versions will not be affected because they should already be in
                   the correct state.

    TL-16522       Fixed the language used for the email from address for scheduled reports
    TL-16530       Fixed report builder cache generator

                   Previously the Report Builder source cache was removing the old cache table
                   before creating a new one, which was creating a problem whereby the user
                   couldn't use the old cache table and the new one wasn't ready.
                   The fix was to keep the old table until the new table was ready, at which
                   point the old table is removed.

    TL-16603       Ported MDL-55469 to allow learners to completely finish a final SCORM attempt

                   Important consideration: This fix relies on correct data submitted by the
                   SCORM package. If the SCORM reported that "cmi.core.lesson_status" is
                   either "completed", "failed", or "passed", then the attempt will be counted
                   as final even if user exited the activity without submitting/finalising the
                   attempt.


Contributions:

    * Barry Oosthuizen at Learning Pool - TL-9277
    * Jo Jones at Kineo UK - TL-16530
    * Simon Adams at Kineo UK - TL-16483

Release 2.7.34 (21st December 2017):

Security issues:

    TL-16451       Fixed permissions not being checked when performing actions on the Face-to-face attendees page

Bug fixes:

    TL-8062        Fixed Face-to-face notifications not being sent when the room has been changed
    TL-16218       Fixed a typo in the certification completion checker
    TL-16483       Fixed Report Builder caching for reports that include Face-to-face session roles filter
    TL-16492       Allow less privileged reviewers and respondents to a 360° Feedback to access the files added to a response
    TL-16530       Fixed report builder cache generator

                   Previously the Report Builder source cache was removing the old cache table
                   before creating a new one, which was creating a problem whereby the user
                   couldn't use the old cache table and the new one wasn't ready.
                   The fix was to keep the old table until the new table was ready, at which
                   point the old table is removed.

    TL-16588       Fixed incorrect appraisal status on reassigned users

Contributions:

    * Jo Jones at Kineo UK - TL-16530
    * Simon Adams at Kineo UK - TL-16483

Release 2.6.51 (21st December 2017):

Security issues:

    TL-16451       Fixed permissions not being checked when performing actions on the Face-to-face attendees page

Bug fixes:

    TL-8062        Fixed Face-to-face notifications not being sent when the room has been changed
    TL-16218       Fixed a typo in the certification completion checker
    TL-16492       Allow less privileged reviewers and respondents to a 360° Feedback to access the files added to a response

Release 2.5.58 (21st December 2017):

Security issues:

    TL-16451       Fixed permissions not being checked when performing actions on the Face-to-face attendees page

Bug fixes:

    TL-16218       Fixed a typo in the certification completion checker
    TL-16492       Allow less privileged reviewers and respondents to a 360° Feedback to access the files added to a response

Release 2.4.57 (21st December 2017):

Security issues:

    TL-16451       Fixed permissions not being checked when performing actions on the Face-to-face attendees page