What's New in V2.3

·                                 ARHelper class has a public constructor

·                                 For the following assemblies was COM Interop created:

o                    ARDataService

o                    ARObject

o                    ARWebServiceClient

o                    ARWebServiceCommon

·                                 The following assemblies have strong names now:

o                    ARCatalogs

o                    ARDataServices

o                    ARObjects

o                    ARWebServiceClient

o                    ARWebServiceCommon

·                                 Added additional canonicalization safeguards (http request checks) to the Global.asax file - see MSDN KB 887459 for details

·                                 To the ARPRTree server control ARPresentationLayer assembly were added property FormName for specifying the name of related form if the object is placed outside the Form tag

·                                 All the stored procedures have now prefix dbo

·                                 To the data grids for displaying memberships were added column with the object alias. This is just for better distinguish between objects with the same name

·                                 To the web.config was added new parameter SecureAccessLogonMixedMode. This parameter is aplicable only if used with Windows authentication. If set to true allows both Windows NT and Form Authentication, i.e. Windows authentication is preferred authentication mechanism but the user may explicitly invoke logon form and log in using Form authentication. Nevertheless this behaviour would be undesirable if the user accounts are imported from LDAP and thus their passwords are blank by default - this represents a security issue if an attacker guess someone's login name and misuse LogonForm.aspx to log in under this account without providing a password. Set the SecureAccessLogonMixedMode parameter to false if you use NT authentication and would like to disallow this behaviour. Default value if false