New
Store application: the manifest is built for each site — name, primary color, and paths from the site folder; in the personal cabinet, there is a prompt to install the application (on iPhone, the instruction is "Add to Home Screen").
The prompt to enable push notifications is repeated no more than once every 7 days (no more than 3 times) and is tracked separately for each site; the switch in the personal cabinet is labeled.
Button "Check push on my devices" in the section "Akizo → Notifications".
If the creation of reconciliation acts upon request is disabled in the accounting system, the request form for an act for a period is hidden, and the buyer sees the reason for refusal.
Contract, limit, debt, UPP, invoices, and reconciliation acts are obtained via the data provider: demo mode, HTTP service of the accounting system, or the add-on "Ultra — Exchange with 1C:Enterprise".
With the add-on: the inscription "data as of ...", TORG-12 in the UPP section, request for a reconciliation act for a period, limit check during checkout taking into account unconfirmed orders.
On the "Service Status" page — status of document exchange; on a multisite, the site with the connected accounting system is checked.
Security
Cart: an item cannot be added to someone else's cart list; only the owner's items are visible in the list.
Reports, contract, and documents are visible only for the user's approved and active organization.
Employees: only the owner of the approved organization can disable an employee and send a phone confirmation code; no more than 5 code entry attempts.
Web Push accepts subscriptions only from known push services; the number of subscriptions is limited.
Rate limits by IP address for call requests, partnership, feedback forms, registration during order, and address suggestions.
Escaping of search queries, employee names and organizations, brand name, and order number in headers.
Logging out and clearing the comparison are protected from forged requests.
Info blocks for requests, appeals, complaints, subscriptions, and site settings are closed for guests, including in extended permission mode.
Review and back-in-stock subscription are available only for catalog items; the number of sitemap pages is limited.
Temporary PDF files are stored in a closed directory outside the website; XLSX exports preserve text as text.
Changes
Without an integrated accounting system, the "UPD" and "Reconciliation Statements" sections are hidden from the personal cabinet, and document samples are not shown to the buyer.
The "Invoices" section, without an accounting system, is built from the organization's orders.
A PDF payment invoice is issued only for orders with non-cash payment.
Fixes
Push notifications on the website in the subdirectory: icons and links are generated from the website folder; updating the module updates the site's sw.js.
Updating the module updates the document sections of the personal cabinet on all sites of the solution.
Reinstalling a new version while preserving data performs the update steps.
Important
Public pages of the personal cabinet (brands, order, main cabinet page) are updated by re-running the wizard; the document sections and sw.js are replaced automatically by the module update.