Release Notes for Styra DAS

This page provides Styra DAS SaaS Release Notes for November 2023.

November 30, 2023

The Styra DAS 20231130 release delivers the following changes.

New Features and Changes

Workspace Admin override of disabled local login

Tenants with SSO login configured have the option to disable local login (username and password login), ensuring users must log in only through the SSO provider. This release adds new functionality to this feature which allows users with a WorkspaceAdmin role to override disabled local login in situations where SSO login fails (e.g., due to an SSO provider outage or incident).

Fixed Issues

Fixed HTTP data source persisting errors

In some cases, errors reported on an HTTP data source (e.g., due to HTTP fetch error) may not automatically clear immediately after the error is resolved.

Fixed missing Allow/Deny toggle on Entitlements library rules

Library rules in the Entitlements system type using an Allow/Deny toggle were missing the toggle in some UI views.

Fixed WorkspaceViewer role missing Decisions

Users with only a WorkspaceViewer role were missing the Workspace-level Decisions tab in the UI.

November 15, 2023

The Styra DAS 20231115 release delivers the following changes.

New Features and Changes

Decision Replay OPA environment variable

When replaying a decision or when running log replay, Styra DAS will set an OPA runtime environment variable (STYRA_DAS_REPLAY), which policies can use to modify policy evaluation behavior during decision and log replay. This can be useful for policies which evaluate sensitive data from the input (e.g., a JWT) in combination with a decision mask for that sensitive data.

Fixed Issues

Fixed S3 and GCS Data Source region selection

In tenants supporting the full list of regions for S3 and GCS Data Sources, the region selection in the UI could be partially obscured on smaller screen sizes.

Fixed UI messaging and sidebar menu collapse functionality for users without a Workspace role

When users had only System, Stack, and/or Library roles and no Workspace-level role, collapsing the sidebar menu while at the tenant root would hide the expand sidebar button. Users without a Workspace role will now see a message indicating they do not have permissions to access Workspace-level data.

Fixed UI display for System and Stack policy editor and viewer roles

Users who had the SystemPolicyEditor, SystemPolicyViewer, StackPolicyEditor, or StackPolicyViewer roles would see a blank Decisions tab for the associated System or Stack, as those roles do not provide decision access permissions. The Decisions tab will now instead be hidden for users with these roles.

Fixed Enterprise OPA built-ins bundle build error

When using an Enterprise OPA built-in, a system could encounter a bundle build error.

Fixed Data Source temporarily missing data

Fixed HTTP and other polling data sources to correctly redeliver updates when internal errors prevent the original update from succeeding and subsequent polling runs detect no changes.

November 8, 2023

The Styra DAS 20231108 release delivers the following changes.

New Features and Changes

Bundle revision digest in Decisions

This feature adds an 8-character digest (hash) of the bundle's revision string to each bundle built by Styra DAS. Decision logs in the Decisions tab and API now return the revision digest, returned in either the revision field or the bundles field, based on the log format for that OPA's version. The revision digest for a bundle can be found on the Deployments tab for a System on the bundle's card, along with the bundle version and the bundle contents digest. The original decision logs from OPA and Enterprise OPA are unaffected.

Bundle Builder performance improvements

Improvements to the bundle builder to increase the rate of System bundle builds and reduce extra bundle rebuilds after version upgrades or restarts.

Fixed Issues

Fixed bundle build recovery after Rego error

In situations where a System bundle build failure was a result of a Rego compilation error due to invalid Rego policy code in the System, bundle builds could still fail after resolving the original Rego policy code issue.

Fixed StackOwner Git configuration permissions

Users with a StackOwner role but no workspace-level role did not have permissions to edit a Stack's Git configuration.

Fixed duplicate decisions in Decisions tab

When scrolling quickly through past decisions in the Decisions tab while a filter is also applied, duplicate decisions could occasionally be shown.

Fixed UI errors when OPA status is missing fields

In cases where the OPA status reported to Styra DAS is missing expected fields due to an old OPA version, the UI would show an error and no deployment or agent data.

Fixed duplicate System errors in Deployments

In cases where a system had a bundle error, an additional invalid system error would be shown.

Fixed UI error in User Activity log

When scrolling back quickly through the User Activity log in cases where there is only one page of user activity, the UI could error and go blank.

Fixed UI autocomplete error during policy authoring

In some cases in the policy editor UI, an autocomplete suggestion may have been shown when no appropriate suggestions were available for the current Rego code.

Fixed UI redirect after creating new policy

In certain circumstances, the Styra DAS UI would show the System, Stack, or Library settings after creating a new policy rather than showing the new policy.

Fixed showing Custom Snippet changes in UI

After publishing a change to an existing Custom Snippet defined in a Library, a UI refresh may have been required to show the updated Custom Snippet information in a relevant System or Stack.

Fixed Log Replay with multiple draft policies during policy validation

When running Validate in the UI policy editor with multiple policies in a draft state, all draft policies may not have been included during log replay.

Fixed Styra CLI download URL in Terraform install instructions

Updated the Styra CLI URL for download when following the install instructions for a Terraform system type.

November 1, 2023

The Styra DAS 20231101 release delivers the following changes.

New Features and Changes

Updated to OPA v0.58.0

The internal version of OPA used by Styra DAS has now been updated to OPA 0.58.0.

Support Zstandard compression for Data Sources

Added support for Zstandard (zstd) compression for PUT and PATCH actions on the /v1/data/{datasource} endpoint. Zstandard provides speed and compression improvements over gzip. Both gzip and plain JSON remain supported for this endpoint.

Fixed Issues

Fixed bundle export of separate policy and data bundles

When exporting system bundles to Amazon S3 or Google Cloud Storage with the separate policy and data bundles option enabled, the generated discovery bundle had an incorrect resource name for the context bundle reference.

Fixed Library Preview Selection option

In some cases, previewing a selection of Rego code in a Library policy file would result in an error.

Fixed Playground loading issue

When starting the DAS Playground during the Getting Started flow, the Playground could fail to load.