## New Features ### Introspection API Use the introspection API endpoint to check current user permissions on HTTP endpoints exposed by the Automate 2 gateway via the `/admin/introspect` endpoint. #### Request `GET /admin/introspect` Returns a list of all permitted, but non-parameterized, endpoints Check individual endpoints, parameterized or not, with the HTTP POST method, passing the endpoint path (e.g. `{"path":"/admin/users/foo@bar.com"}`) as the body of the request. ## Improvements ### Icons on the Event Feed The Event Feed visualization has icons for each event type. See _what_ events happened over the last week. ### Configuration Management Authorization All configuration management endpoints now undergo an authorization check. Users have default access to these endpoints by curl and the UI. ## Bug Fixes - see the latest compliance scan history result first instead of last - filter by multiple profiles and multiple nodes - multiple API methods of the same name but from different services are individually resolved (notably affected the GetVersion method, which exists on most services) - nav icon tooltips now display in the UI ## Upgrade Notes and Instructions Automate 2 upgrades should occur automatically and are generally a hands-off process, but we may ask you to perform some manual tasks from time-to-time as we work to improve this process. This week, restart the Habitat supervisor process to clean up some stale state to prevent instability in the future: ``` sudo pkill hab-sup ``` ## Backward Incompatibilities As new UI elements are being introduced, there are currently some caching issues. Clearing the browser cache is necessary if you've run Autoamte 2 previously to ensure the latest UI elements load properly.