Aeon 7.0.1830

Released August 18, 2026. Consistent activity rules, Check Out prompts only when they matter, and staff links that go to the right address

Fixes

• Editing a request now checks the activity's Users tab. Saving a request onto an activity is refused unless the request's user is on that activity's Users tab — the same rule the New Request form and Assign to Activity already enforce. Requests that already carry an activity keep saving as before.
• Assign to Activity no longer previews success for an assignment it will refuse. Choosing an activity for requests whose user isn't on its Users tab — or for requests belonging to different users — now tells you so straight away, instead of showing a clean confirm dialog and failing after you confirm.
• Cloning a request no longer copies an activity the researcher has been removed from. If someone was taken off an activity's Users tab while their requests were still on it, cloning one of those requests used to carry the activity onto the new request too. The clone is still created, just without the activity; the original is left alone.
• Checking an item out to an activity no longer asks you to confirm that the researcher isn't signed into a reading room. An activity isn't a person and can't sign in, so Check Out now skips that prompt for activity requests and goes straight through, matching the desktop client. Requests tied to a researcher still prompt as before.
• Batch Check Out no longer asks you to confirm that a photoduplication request's researcher isn't signed into a reading room. A copy request goes to the photoduplication workflow rather than to someone at the desk, so there's no reading-room visit to verify. Single-request Check Out has always skipped the prompt for copy requests; batch processing now does too, matching the desktop client.
• The Staff Web URL setting in Customization Manager now always controls the address in emailed staff links, such as the forgot-password reset link. Previously a server-level setting could override it, so editing it here appeared to do nothing. Single sign-on is unaffected — it continues to use the server setting.
• On Windows installs, single sign-on no longer sends staff to a blank page after a successful login. The same wrong address could appear in single sign-on invitation emails. The installer now records the staff web client's address, and upgrades fill it in when it isn't already set.
• Server Addons now lists only server addons. Web addons were appearing alongside them in Customization Manager and could be opened and edited there, under helper text describing them as running on the Aeon server. They now appear on the Web Addons page only. Customization Manager search was affected the same way, and now returns each addon under its own heading.
• The Forgot password link now sits below the Sign in button. On the sign-in page it used to share a line with the Password label; it's now centered under the button, out of the way of the fields you fill in.