New Features
TSM-8954: Framework: Load a 4.x Time Series with Its Attributes by ID or Exact Name
Framework: the 4.x HTTP time series repository can now load a time series by id or exact name, or search by filter, together with its attributes, their values and optionally the used list attribute values, all in one request (needs a PowerTSM HTTP API of 4.13.0 or later).
TSM-8955: Edit Tab: Load the Time Series and Its Attribute Values and Resolved List Attribute Values with One Request
On an HTTP connection to a 4.13.0 or later server, switching to the Edit tab loads the attribute values and list attribute units of the time series with one request instead of two requests per attribute. Older servers, v3 HTTP and database connections are unchanged.
TSM-8956: TSM App: Expose Attribute Getter for Prefetched Time Series Attribute Data
A plug-in that already holds the attribute data of a time series had no way to hand it to the attributes plug-in: IPluginAttributes.GetAttributes(ColumnModel) only loads the data itself. It was then necessary to request the attribute data again. TSM-8956 adds IPluginPrefetchedAttributes.GetAttributes(ColumnModel, PrefetchedTimeSeriesAttributes), which allows the plug-in to pass the pre-fetched attribute data.
TSM-8989: Edit Tab: Load All Available List Attribute Values with One Request
When you switch to the Edit tab on an HTTP connection, PowerTSM needs to load list attribute values, to make them available for assigned attribute data.
-
On a 4.13.0 or later server, list attribute units and their values are loaded with one request.
-
On a 4.11 and 4.12 (any patch) server, units are loaded with one request and then one request per unit is made, to fetch its values
-
Below 4.11 list attributes aren’t supported.
Older servers, v3 HTTP and database connections are unchanged.
TSM-9079: Edit Tab: Faster Switching Away from the Edit Tab via HTTP Connections
When you switch away from the Edit tab on an HTTP connection, PowerTSM checks whether the attributes of the time series were changed. This check is now considerably faster:
-
On a 4.13.0 or later server, it loads the attribute values with one request instead of up to two requests per attribute.
-
On a 4.12.2 or later server, it loads the attribute definitions with one bulk request per 25 attributes instead of one request per attribute.
Older servers, v3 HTTP and database connections are unchanged.
Fixed Bugs
TSM-7774: TSM App: Load Time Series by Name without Using the Search Workaround If the Name Contains a Slash
Time series whose name contains "/" are now addressed by name on 4.12+ servers (one request instead of two). The name has to match the way the server compares names (case-sensitive on Oracle and PostgreSQL). A reverse proxy in front of the HTTP API must pass %2F unchanged; otherwise set ResolveNamesWithSlashBySearch to true for that HttpConnection.
TSM-8499: Database: Support v4 GUIDs on OSUSER Columns
This Database-Update widens the OSUSER columns in all archive tables to varchar(40) so v4 GUIDs fit, and updates the audit triggers to write the user name via a new central getusername function.
TSM-8817: TSM App: Master Data Export Takes Too Long
Exporting master data over an HTTP API 4.x connection is considerably faster and no longer fails under load. For 1000 time series the duration drops from several minutes to around 25 seconds.
TSM-8826: Edit Tab: Conversion Time Series Blocks
The Edit tab of the time series search mask lists the conversion time series of a repository again when connected through the HTTP API. The picker now handles repositories with tens of thousands of entries without freezing, keeps a search term applied while the list is still loading, and no longer offers a conversion time series that is already assigned.
TSM-8871: OpenAPI Specification: Fixed Dead Links to Documentation
The descriptions of the aggregation and formula parameters linked to a documentation page that does not exist. These links now point to the HAKOM documentation home page.
TSM-8939: Database: Time Series Group ACL Support for SQL Server
The database install script for the Time Series ACL feature used to fail on SQL Server. The bug has been fixed and the stored procedures and functions can be installed on SQL Server as well.
TSM-8945: TSM App: Improved Performance When Switching to the Edit Tab with an HTTP Connection
When using the TSM App with an HTTP connection, switching to the Edit tab of a time series with attributes made unnecessary requests, which increased the loading time. These requests are no longer made.
TSM-8946: TSM App: Faster Loading of List Attributes via HTTP Connections
When loading a worksheet or search result from an HTTP connection, list attribute units and values are now fetched once per load instead of once per column.
TSM-8948: TSM App: Time Series Search via HTTP Connections Keeps the Returned Attribute Definitions
When searching time series with attribute values on an HTTP API 4.12+ connection, the name, description and type of every assigned attribute are now kept from the search result instead of being discarded, so they no longer have to be loaded again with one request per attribute.
TSM-8951: Database: Improved Time Series Data Reading Performance
A stored procedure responsible for reading time series data has been improved to provide faster reads and reduced query plan cache pollution.
TSM-8977: TSM App: Master Data Export Loads the Attributes of All Selected Time Series in Bulk
On HTTP connections to a 4.13 server, the master data export loads the selected time series with their attribute values and formulas in a few bulk requests instead of several requests per time series, which makes exporting many time series considerably faster.
TSM-8979: TSM App (ZAMS): Load the Attributes of a Time Series Column with One Request
When using HTTP API version 4.13 or higher, the attributes of a column are loaded with a single request, which makes loading them considerably faster. List attributes without a unit then also show their description.
TSM-9023: WebTSM Services: Security Fix in Repository Configuration Lookup
Security fix — updating is strongly recommended. Specially crafted requests to WebTSM Services could cause the repository look-up to return information about the server configuration, or to resolve to a repository other than the one requested. Such requests are now rejected with 404 Not Found.
When the configuration is provided through environment variables (HAKOMConfiguration_…), variables whose names are not valid XML names now stop the startup with a configuration error that names the variable.
TSM-9027: MSCONS Connector: Fix Vulnerability CVE-2021-24112
The offending package references were updated to patched version 4.7.2.
TSM-9029: WebTSM Services: Fix Vulnerability CVE-2026-50527
The offending package references were updated to patched version 9.0.21.
TSM-9030: WebTSM Services: Harden Permission Check
The programmatic check of permissions a user has within a repository returned early when the repository passed was null. This has been hardened to throw an error instead. This was not actually reachable from WebTSM Service requests at the moment and is now no longer an issue if it ever were.
TSM-9031: WebTSM Services: Sanitize User-Provided Data for Logs
The logs now sanitize data in a way, that prevents WebTSM users to forge entries.
TSM-9032: WebTSM Services: Session Cookies Accessible to Client Scripts
When using OIDC authentication in conjunction with session cookies (specific authentication flows only), the session cookies did not have the HttpOnly flag set, exposing them to client scripts. This could expose them to malicious scripts when an XSS vulnerability is left unchecked. This has been fixed.