Cyclos on-line and mobile banking software.
Images are currently not displayed in this newsletter, please adjust your mail settings.

Dear Sir/Madam,

We are happy to announce that new versions of Cyclos and the Cyclos mobile app have been released. Cyclos 4.12.2 can be downloaded from our license server, and the mobile app (version 2.6.1) has been published at the google play store and Iphone app store.
This newsletter contains a summary of all the new features and improvements that were added since the last newsletter.

New website
The Cyclos website has been completely renewed. It is a good starting point to learn more about the Cyclos project, the features and news updates. We invite you to take a look at: www.cyclos.org

New front-end
The Cyclos team has developed a brand new, open source, completely responsive front-end for Cyclos4. The new frontend can run on the server next to the existing front-end. The goal of this external front-end is to have an intuitive and easy to customize front-end for Cyclos4. The front-end is 'responsive' meaning it displays (resizes) well with different screen sizes/resolutions, from large monitors/tablets, to smartphones with smaller screen resolutions. The source code and documentation of the new front-end can be downloaded from Github
A demo of the front-end can be seen here: demo-ui.cyclos.org The demo uses the same back-end as the demo site demo.cyclos.org so you can login in with the same demo users as demo.cyclos.org (e.g. user: demo, pw: 1234) or register a new user yourself.
The new front-end supports the new mobile operating system KaiOS, which is specially designed for 'feature phones' (very affordable phones with keyboard input instead of touch screen).

Secure confirmation with trusted device
A trusted device is a mobile device (mobile phone or tablet) with a Cyclos mobile app that has been activated as 'trusted', after which it can be used to confirm sensitive Cyclos operations (like payments) by scanning a QR code that is displayed at the Cyclos web interface.
It works similar as physical tokens that banks use to confirm online operations, and it offers the same level of security. A typical example is to confirm a payment initiated at the Cyclos Web interface. The payment confirmation window in Cyclos will show a QR code and ask the user to confirm the payment by scanning the code with the Cyclos mobile app (using the camera). Both the Mobile app as well the Cyclos Web payment page will show a confirmation when the payment has been made (with the payment details).
There are various possible configurations for trusted devices. For example, it is possible to require only QR code confirmations for payments above certain amounts (max per payment and max per day/week/month). Another interesting use case is to require confirmation by a trusted device at login at the web interface. The rules concerning trusted devices can be applied to specific groups. This will make it possible, for example, to add an extra layer of access security for users like brokers and administrators.

Administration products
The permissions for administrators in Cyclos are defined directly within the administration group (in the permissions tab), and the permissions of brokers and members are defined in products, that can be bound to groups, groupsets, or individual users. With Cyclos 4.12 we added the option to create an administration product that can be added to (one or more) existing administration groups.
The possibility to create administration products allows a more efficient structuring of permissions. In systems with more complex configurations (many different admin groups) administrators perform often similar operations on the users they can manage. Now it is possible to define the common permissions in such a 'shared' admin product, and define the users that the administrator must manage in the dedicated admin group permissions. This approach avoids the duplication of permissions.
We also added a view/edit mode for permissions (both in member and broker products as administration group permissions). The view mode will show only the permissions that are defined, which gives an administrator a direct overview of the active permissions of a group or product.
The administration product does not change the current group/permissions structure. When no administration product is created (at the User configuration - products menu) the Cyclos permission system will work as it did in previous Cyclos versions.

History tracking for system configuration
In the previous versions of Cyclos, only the entities 'profile', 'advertisement' and 'record' had a 'history log' option. The history log is basically a page with a complete history of all the changes that are made to the entity. For example, the user profile 'history log' page shows a list with all profile changes that were made since the user was created (e.g. change of email, address, etc.). The history log page contains for each change the following information: the old and the new value, the username and IP address of the user that performed the change, the timestamp of the change, and the channel through which the change was made.
In the Cyclos version 4.12 we added the history log option for the entities: configuration, channel, group, product, currency, account, transactions, fees, authorization level, password type, identification method, voucher type, voucher configuration, agreements and scripts.
All history log pages have search filters to facilitate the search in case there are many results.
Of course, besides the history logging Cyclos still logs all operations and changes to the Cyclos log files (or to a dedicated logging database depending on the configuration).

Custom alerts
Many Cyclos projects use Cyclos script solutions, which in some cases need to send alerts. Now it is possible to send alerts/notifications for custom alerts. An admin can now enable custom (script) alerts in the notifications settings.

Support for Elasticsearch
Currently the search method for entities such as users, advertisements and records uses the internal internal Postgres engine. The advantage that no external indexing is needed. Still, for large databases it can be interesting, especially when a search filters are combined with keywords and distance filters. Cyclos supports as well online elastic services as a local elastic search engine. For more information visit www.elastic.co

Other improvements
- We stopped sanitizing HTML content submitted by administrators with system / content management permission
- Improved transfer type details page (with sections)
- New setting in transaction import to skip notifications
- Recurring payments from payment requests are now supported
- It is now possible to define a record type in the custom field of type linked entity
- New status on authorization (expired)
- Option in transaction type to hide the payment description in the payment page
- Account balances are now included in export users CSV file
- Group and group set variables are now available for notifications
- The usage of Google maps API has been reduced (lower charges)
- Allow brokers to search by group over brokered users, advertisements, records and operators
- New option: Maximum amount per year in transaction type
- Allow defining a broker in user registration by administrator
- Option to enable broker operations in operator group


Mobile app

From version 2.6 on 'mobile app only' users can do all tasks via the mobile. Users can register, confirm their registration, change profile, add pictures, forgot & reset password all with the mobile app.

Easy PIN (mobile app)
It is possible to enable an 'Easy PIN' to login at a mobile phone. Generally it is easier to type a PIN number than a strong login password (with special characters, uppercase, etc), which are considered more secure. When an easy PIN is enabled the mobile app will show a numeric keyboard, which is easier to use than the default character keyboard. The PIN is activated just for the device. So even if somebody 'eyeballs' the PIN (when it is typed) it won't be possible to use it at another device.

Language settings
Just as in the Web interface a user can now select the preferred language in the mobile. The language settings will show up under the Mobile settings (cogwheel icon top left) when more than one language is enabled for the user.

Other improvements
- Improved the layout for actions buttons
- We added the button 'Go to user' in simple ad view
- Brokers and admins can now register users

For more information about Cyclos and the Social Trade Organisation, please visit:
www.cyclos.org
www.socialtrade.org

If you know someone who might be interested in this newsletter, please forward it!