Added
- The `permissions` Configuration directive.
- Ability of `admin` users to create API keys with limited permissions.
- The `multi` option of `overlay_pdf()`.
- The `/api/user_invite` API endpoint.
- The `api key` option of `default admin account`.
- The `allow forgot password` Configuration directive.
Changed
- Upgraded the `boto3` and `docxtpl` libraries.
- The Logs are now shown in a resizable `<textarea>`.
- Safer implementation of `exit link` and `exit url`.
- For safety reasons, `url_of('exit')` and similar URLs no longer
accept `next` parameters.
- The JavaScript for `CustomDataType` objects will only be inserted if
the interview uses the custom datatype.
Fixed
- URL of exit link was being set to `/interview` in some
circumstances.
- When server-side validation failed, the fields the user saw on the
next screen were not always populated with the user's answers.
- HTML typos in `<form>` elements.
- Problem converting DOCX to PDF when `attachment` filename contained
a space.
- Inaccurate exceptions were sometimes raised when `AttributeError` or
`IndexError` exceptions arise during assembly of a DOCX file.
- Fixes to Google geocoding for situations where the latitude and
longitude are undefined.