What's New In Raiser's Edge NXT The Week Of July 6th

This week, Raiser's Edge NXT includes enhancements to constituent records and online registration forms.

Enhancement to constituent records.

To improve privacy, constituent records now hide the Date of birth field by default. To display the full date, under Constituent summary, select Show… under Personal info.

dob-show.png

Disable the calendar option for online registrations.

Building on recent improvements to online registration forms, you can now manage whether registrants can download events to their personal calendars after they register. For example, disable the calendar option when an event is virtual or not time-based, or the dates and times from your organization’s time zone would confuse registrants in other geographic areas. Previously, the calendar option always appeared in on-screen and email confirmations.

To disable the calendar option, open an event record. Under Online registration forms, edit an existing form or create a new one. Then under Confirmations, clear Allow registrants to add to a calendar.

Comments

  • Some of my team are really annoyed by this ‘enhancement’ ?

  • Yes, this “enhancement” just adds annoyance. How does it “improve privacy”? Any user can still click to show the birth date, meaning nothing is secured as private. Does it do something in addition that your post doesn't mention, such as turning this field into an encrypted field so that it would not be easily accessible to potential future data breaches?

    As it is currently built, there are a couple of features that this “enhancement” lacks, which make it even more pointless, namely that 1) a user, once clicking “show” cannot then “hide” the birthdate again and 2) there is no security right/role or database-wide setting that lets a database administrator determine whether the date of birth is hidden or visible either to all users or groups of users.

    I highly recommend reversing this feature unless it adds some kind of benefit that wasn't explained. It is not apparent why anyone would want this enabled, especially with no option to disable.

  • Karen Diener
    Karen Diener Community All-Star
    Tenth Anniversary Kudos 5 First Reply Name Dropper

    That is a helpful and constructive response. I had not yet experienced this, but what you wrote makes a lot of sense and provides specific examples of why it is lacking.

  • Anthony Gallo
    Anthony Gallo Blackbaud Employee
    Tenth Anniversary Kudos 3 Name Dropper Participant

    Hi Everyone,

    Our security updates are spanning many different areas. Those areas include login processes, database encryption and data deletion as well as other in the experience itself. This update is one that prevents shoulder-surfing or other unauthorized access to a clients system while logged in. Industry standards are changing rapidly over time and we aim to be in line with those standards instead of playing catchup. This update will also prevent the data from being seen by unwanted guests potentially tracking network data (man-in-the-middle attacks) and from the data being cached on external servers that route traffic that could be open to attack.

    Ideally the benefits to security outweigh any of the negatives here. We will most likely be adding to this down the road as the standards change over time.

    I hope this answer helps.

    Thanks
    Anthony

  • Absolutely agree with Eric. I am always surprised when such “enhancements” appear while the options that are really required by NXT users waiting in their ideas bank for years (Volunteer tab sync, more filters for lists and many many more)