New scoped permissions for managing users (RTC-44596)

New scoped permissions for managing users are added for the store role: 

Users - View Users and Manage Users 

Image Added

to allow store managers to manage the employees of the store without being able to manage other stores personnel.

The permissions can be saved /modified for the role, as well as assigned to the user. The permissions does not have affect on users actions yet.

Receipt journal module (RTC-42619)

Fake receipt journal module has been renamed to ReceiptManagement. The name in the menu has not been changed. 
A user with permission from the Receipt Journal group can enter the module correctly.

Fix: Activate user deactivated by Invite job (RTC-42719)

When user is removed from invited group in AAD, he is deactivated in User Management. When he is added again to one of invited groups, he is activated, with both (if specified) added roles and existing before deactivation. 

For now, if user had some roles assigned, for instance via auto-provisioning, then even when he is deactivated by being removed from invited group, he keeps these roles. Then when added to different group and being activated, these roles are still assigned. This mechanism is planned to be changed during development of assigning roles to store groups in invite job.

Fix: Users added manually lost access (RTC-42162)

Users, who were added to tenant manually, through tenant AAD, imported etc. not invited trough Invite job, can sign in to tenant and have the same access as before changes in job.

Allow users to change username on source AAD (RTC-39861)

Users, who are invited to tenant AAD, can change their user name (UPN) on source AAD and login to Cloud modules.

Behaviour of invite job is the same as before - users who are added to configured groups on source AAD are updated in tenant AAD or when removed - disabled on tenant. In configuration of job, there can be added groups with auto-provisioning and then users will be invited and added configured permissions. Casing of name of the group in AAD and in configuration must be the same, otherwise job will finish with warnings and users added to that group will not be invited.

Performance of job executions is good.

Fix: Staging merger aborted when duplicated key on ExternalStoreNo on Store (RTC-41220)

ExternalStoreNo is not unique in the identity database, so it does not cause problems during import.

Fix: Not possible to "Expand all" in user management (RTC-34799)

'Expand all' button expands the whole tree of user roles.

Fix for: Blob export when assigning permissions to a role (RTC-23813)

When permissions assigned to the role change, only users assigned to this role are exported, not all the users.

Fix: "Cannot read properties" errors (RTC-37432)

When user opens 'roles' tab from user details view, no error is shown in console. Similarly, when creating new user, by searching for him in AAD and there are no results, there is also no error.

API for cashier validation from POS (RTC-34845)

When cashier is created for a user and the password is set to cashier number or when password was reset, an API request /api/Cashiers/{cashierNo}/verifyPasswordValidity returns that password is expired. User has to change password when logging into the POS.

Export of Card ID for users (RTC-35752)

API contract for user export includes CardID in Swagger documentation.

Fix: Importing users to AAD (RTC-34727)

The system job InviteFromAzureAdToAzureAd job uses fewer resources when inviting users to our Azure Active Directory domain.