Changelog

Changes to the administration app and the VBA class, newest first.

• Prerequisites: the app now requires the WKL Forms Object Library 2.0 (type library WklForms) and WKL Office JSON 2.0; the delivery includes both.
• Starter: the delivery includes WKL Bootstrapper 3.1. Its program is now named Wkl.Bootstrapper.exe (formerly Wkl.Access.Bootstrapper.exe), so update your shortcuts. If the starter reports code 37, the user still has a 1.x release of the WKL Forms Object Library registered that another app needs; see Set up the administration app on a workstation.
• VBA class: the reference is now named “WKL Office JSON 1.1”; up to release 1.0.3 it was “WKL Access JSON 1.0”. An existing reference keeps working, and the class is unchanged.

• VBA class: the class is now named WklGatewayClient (formerly DbGwClient), and its enums are WklGatewayError and WklGatewaySignIn; the constants start with gw instead of dbgw (for example gwErrRejected, gwPersonalKey). Error numbers and behavior are unchanged. In your own application, replace the class module and update the names in your code.
• Administration app: the file is named GatewayManager.accdb, and the starter projects name the products GatewayManager and GatewayManagerAdmin. The starter therefore places the app in a new folder. Remove the previous copy (product DbGwVerwaltung or DbGwVerwaltungAdmin) as described in How to: Remove an application from a PC (WKL Bootstrapper documentation).
• Settings: the address, sign-in method, invitation emails, and list layouts are now stored in the file settings.json in the GatewayManager folder. The first start after the update uses the defaults; your previous settings aren't carried over.
• Messages: hints say directly what to do (for example “Wählen Sie zuerst eine Person aus.”, “Select a person first.”), and the error dialog is titled “Aktion nicht ausgeführt” (Action not completed).

• Personen (People): the list of people stays visible when you drag the card on the right wider, switch the card or open the page; before, the middle stayed empty.
• Personen (People), Person card: the fields follow the width of the card, and the hints below the fields are only as tall as their text. This applies to every edit form beside a list.
• Personen (People), Auswahl (Selection) card: the Regel (Rule), Zugang (Access) and Markierung (Marks) buttons show their captions and menus also when the card is shown after the page.
• Anmeldungen (Sign-ins), Auslastung (Load), Identitäten (Identities) and the other pages with tabs: the lists reach the bottom edge of the window; before, a strip stayed empty below them.
• Anmeldungen (Sign-ins), Geodatenbank (Geo database) tab: a splitter lies between the source and the files; the source is taller at first, and your split is kept.

• Product name: The administration app is now called WKL Database Gateway Manager; the title bar, Start menu, and windows show the short form “Gateway Manager”.
• Dialogs: Every dialog in the app has the layout of a Windows 11 dialog: The White Knight Labs mark and the title at the top, the content below, and the buttons on a gray bar at the bottom. The buttons are the same as in the main window. Enter runs the main button, and Esc cancels.
• Questions and messages appear in the same dialog instead of Windows message boxes; the dialog's height follows the text.
• VBA class: The Windows sign-in and service keys are now also sent only over HTTPS or to the local computer, as personal keys and passwords already were; the class refuses an http address of another computer with dbgwErrConfiguration.
• Choose a purpose instead of typing a number: When you issue a key (also by email and for many people) and for a new or loaded email template, you choose the purpose from a list of options, each with what it does. The label or name and the purpose are in one dialog.
• Error messages say in plain words what happened and what to do. The technical text is under Details anzeigen (Show details), where you can select and copy it.
• Anmeldungen (Sign-ins): new Karte (Map) tab with one circle per network with a known location, colored by the share of refusals; the map fits the circles and can be zoomed; click a circle to see its row on Herkunft (Origin). This requires WKL Access Components 1.68.1.
• Personen (People): the Darf sich anmelden (May sign in) check box is now Konto aktiv (Account enabled). Messages, reports, and fixes refer to a disabled account and to Konto wieder aktivieren (Enable account).

• Anmelderichtlinie (Sign-in policy): Neu (New), Bearbeiten (Edit), and a double-click open the Anmelderegel dialog; Löschen (Delete) deletes the rule with its exceptions. The dialog sets conditions by network, person, Windows group, country, network operator, program, and time window, each under Gilt nur für (Applies only to) and Gilt nicht für (Doesn't apply to), plus exceptions with an end. It sums up the rule in plain language, warns about a rule that could lock out administration, and saves everything in a single step. A new rule is tried first (Modus set to Erst erproben, Try first). The command Netz zur Anmelderegel hinzufügen … (Add network to sign-in rule) is gone.
• Anmelderichtlinie, tree: under each rule, its conditions in plain language (people by name) and its exceptions with their end; a rule on trial is marked.
• Zweiten Faktor verlangen (Require second factor, on the people page) and the policy templates keep the rule's other conditions, its exceptions, and its mode when they save it.
• Anmelderichtlinie, Erprobung (Trial) tab: for each rule on trial, what it would have done; Weitere > Erprobte Regel durchsetzen … (Enforce tried rule) enforces it after asking.
• Anmeldungen (Sign-ins), Ereignisse (Events) tab: columns Grundlage der Entscheidung (Basis of the decision) and Signale (Signals); Weitere > Grundlage der Entscheidung prüfen … (Check basis of decision) compares a sign-in's rules with how they stand today. Protokoll (Log), Audit tab: column Abweisende Anmelderegel (Refusing sign-in rule).
• Anmeldung und Rechte (Sign-in and permissions, on the people page): Annahme prüfen … (Check an assumption) calculates an assumed origin with country, network operator, program, and time as a column of its own; rules on trial are marked “(Probe)”.
• Anmeldungen (Sign-ins): Befunde (Findings) tab with the stored findings of the sign-in rules (level Handeln, act, or Nachfragen, ask; observed and usual value); the key figure Befunde replaces Auffällige Muster (Unusual patterns). From a finding, Ereignisse des Befunds zeigen (Show the finding's events) and Anmeldeprofil der Person … (Sign-in profile of the person …) lead further; Personen (People): Anmeldeprofil … (what is usual per country, network, network operator, program, method, and hour). Auslastung (Load), Hinweise (Hints) tab: the stored hints with the time they were recorded. Übersicht (Overview): card Auffällige Anmeldungen (Suspicious sign-ins) with the findings added since the last look. VBA class: SignInProfile.
• VBA class: SaveSignInRule takes countries, network operators, programs, time windows, exceptions, and the mode; ExplainSignIn takes a country, network operator, program, and time per origin.
• Prerequisite: WKL Access Components 1.64.1 or later; the delivery includes this version.

• Regeln (Rules): the main command Merkmal hinzufügen … (Add attribute) adds an attribute to the selected rule. Likewise under Weitere (More): Merkmal zum Sperreintrag hinzufügen … (Identities) and Netz zur Anmelderegel hinzufügen … (Sign-in policy).
• Anmelderichtlinie (Sign-in policy): the templates are under Weitere > Vorlagen der Richtlinie (Policy templates).
• Datenquellen (Data sources): a data source appears in the list right after Prüfen und speichern (Check and save).
• Personen (People): Vorgabe-Identität (Default identity) is a drop-down list of the person's identities. The fields are now labeled SQL-Anmeldung für Identitätswechsel (EXECUTE AS) (people), Anmeldung mit SQL-Name und Kennwort erlauben (data source), and SQL-Anmeldung mit Kennwort (Name) (Zuordnungen, Assignments).
• Auslastung (Load) and Anmeldungen (Sign-ins): for 24 hours, the chart shows every hour with its time of day, and the value axis shows decimals where the values need them. Read-only pages no longer show Neu, Bearbeiten, and Löschen. On the Geodatenbank (Geo database) tab, the source is at the top, and the Quelle der Geodatenbank (Geo database source) dialog names the interval Automatisch laden alle … Tage (Download automatically every … days).
• Edit forms: fields are grouped by meaning, with a sentence on what the record is for and a line below fields whose name alone doesn't say what they do. You pick technical values in words from a list, with a line on what the selected value does: table settings, the kind of a database identity, the block list, attributes of rules, keys, and sign-in rules, scope, method, and effect of a sign-in rule, and Personen (People) of a data source. You pick data sources, rules, people, identities, and keys from lists instead of typing IDs.
• Personen (People): the Aktiv (Active) check box is now Darf sich anmelden (May sign in), under Zugang (Access). Below the list, you can show an area with the tabs Regeln (Rules), Zugriffe (Accesses), and Sitzungen (Sessions) of the selected person (Weitere (More) > Darunter zeigen (Show below)); sessions and the log are no longer in the expanded row.
• Anmelderichtlinie (Sign-in policy): the Einstellungen (Settings) tab shows every setting as its own field with unit, range, and meaning, even when it isn't set. You edit email templates in a dialog with placeholders and a browser preview; Weitere > Mailvorlagen > Neue Mailvorlage … (New email template …) starts from the built-in template for the purpose.
• New guide Set up access for each trust situation: company PC, personal device, broker, Excel and Power BI, a department's Access app, contractor, lost device, suspicious origin, and evidence for “Why was this allowed?”
• Zuordnungen (Assignments) and Identitäten (Identities): each tab explains what it's for. You pick the rule from a list; Windows accounts and SQL logins are grouped by rule.
• Datenquellen (Data sources): you pick the Provider from the providers the service has installed and enter the connection in its fields (for SQL Server, for example, server, database, Windows sign-in), the password in a masked field. The connection string and the dialect of older data sources are under Erweitert (Advanced). If Verbindung prüfen (Test connection) fails, a window names the cause and the next step and, where the database administrator has to act, offers a T-SQL script with the service's account to copy, save, or mail, plus Erneut prüfen (Test again); see Connect a data source.
• Tree lists filter by column like the grids (filter row, column header, filter bar).

• Löschen (Delete) on a person the service won't delete because of keys, sessions, sign-ins, or changes of their own left behind now names the person with the service's reason and offers to lock them instead. See Revoke a key or lock a person.

• New Auslastung (Load) area under Überwachen (Monitoring): period, key figures, and a chart of the time spent in the service and in the database, the weekly pattern, the most expensive query shapes with their slow requests, known fixes, and an export for the vendor. See Find out what is loading the service and the database.
• New Anmeldungen (Sign-ins) area under Überwachen (Monitoring): sign-in decisions by time, outcome, and origin, the weekly pattern, unusual patterns, Herkunft sperren … (Block origin), and the geolocation database (source, update, upload a file). See Review sign-ins and where they come from.
• VBA class: SetGeoIpSource, UpdateGeoIp, UploadGeoIp, and ExportLoad.

• New in the Protokoll (Log) area under Weitere (More) > Nachweisberichte (Evidence reports): permissions overview, MFA coverage, departures and locks, and administration changes, each as an Excel file and a PDF with a header showing the creator, time (UTC), service, and installation. See Create evidence reports.
• The overview lists the operator tasks the administration app covers.

• Weitere and a person's shortcut menu group the commands for that person into four submenus: Rechte (Rights), Schlüssel (Keys), Zweiter Faktor und Sitzung (Second factor and session), and Störung und Austritt (Problems and departures). A row's shortcut menu now offers only what applies to that person; commands for the whole list are under Weitere.
• The Auswahl (Selection) card groups its eight buttons into three menu buttons: Regel (Rule), Zugang (Access), and Markierung (Selection).
• The selected work list is highlighted as soon as the page opens. After you switch work lists, the card shows the first person in the new list; previously it kept showing the person selected before, even if that person was no longer in the list.
• New: Zugriffe darunter zeigen (Show accesses below) (Ctrl+L) shows the selected person's latest accesses below the list, with the result and, for a rejection, the reason.
• Areas with a form now show the first entry when they open instead of an empty form.
• Zuordnungen (Assignments): you can add Windows accounts and SQL logins in a new row now; previously Neu was grayed out.
• Protokoll (Log): the change log and the audit show the newest days at the top, and sessions are listed newest first.
• The administration app runs in 32-bit and 64-bit Office, each with the delivery for that bitness.

• Every time is in Coordinated Universal Time, and the app says so: columns and fields are labeled, for example, Geändert (UTC) (Changed (UTC)), Läuft ab (UTC) (Expires (UTC)), or Zuletzt benutzt (UTC) (Last used (UTC)), and messages give deadlines as “17.10.2026 14:30 UTC”. Previously the columns showed UTC without saying so, so a time looked off by the difference to local time.
• Email invitations now give the link's expiration in UTC (“… 14:30 Uhr UTC”). Previously they used the local time of the workstation that sent the email, without a zone, so a recipient in another time zone read the wrong deadline.

• The work lists on the left of the Personen und Schlüssel (People and keys) page are now a list like the folders in Outlook: each entry shows its name with the number of people affected next to it. A work list that's done no longer shows a number. The column header and cut-off names such as “Ohne Zugan…” are gone.
• If you left the page or closed the app while the Person card was widened for the import or for Anmeldung und Rechte (Sign-in and permissions), the card came back at that width the next time, leaving the list of people narrow. The card now comes back at its usual width.
• After Fertig (Finish) in the Neue Person (New person) wizard, the new person was selected in the list, but the Person card stayed empty until you picked someone else. The card now shows the new person right away.

• The app now requires WKL Access Components 1.60 or later. It's built against that version's type library and won't start if an older version is registered. With this change, Regeln zuordnen (Assign rules) once again shows check boxes in the first column instead of “Falsch”/“Wahr” (False/True), and the command bar follows the state of the list even when no person is selected (for example, Neu (New) is unavailable when the list can't create anything).
• After you closed Anmeldung und Rechte (Sign-in and permissions), Regeln zuordnen, Neue Person (New person), or the import, the Person card stayed empty until you selected a different person. It now shows the selected person's form again.
• Errors are now handled the same way everywhere. If a view can't be refreshed after a command has finished, the app now tells you in a message instead of silently leaving the view as it was.

The Personen und Schlüssel (People and keys) page has a new layout: work lists with counts on the left (for example, “Ohne Regel” (No rule) and “Ohne zweiten Faktor” (No second factor)), the people in the center with multiple selection (Ctrl+A selects the whole work list), the Person and Auswahl (Selection) cards on the right, and, if you like, the rules with what they cover below the list (Ctrl+R). From the Auswahl card, you can grant or remove a rule for everyone selected, send keys or second factors by email, and require the second factor through a sign-in rule. See Work with many people at once.

In the Personen und Schlüssel area, Weitere (More) > Personen importieren … (Import people …) reads a CSV list (columns Name, Windows-Konto, SQL-Anmeldung, E-Mail, Regeln). Every row is checked before anything is saved and appears with its state to the right of the list. Übernehmen (Apply) creates the new people with their rules, paced by the service's rate limit, and can be paused and resumed. Existing people stay unchanged, and the rows that were read are deleted when you close the import, sign out, or sign in. See Import many people at once.