The following fixes and features have been incorperated in the new release:
* Security Update: WIth forena enabled, prior to 7.x-3.9 version users could by pass additional node access security hooks to view published content in XML using the forena XML path (forena/xml/blockname. Forena has been modified to allow an extra permission to allow you to not allow access to forena XML blocks without specific privileges. Users would need to have known both paths and content types in order to be able to access this data.
Last updated: September 28, 2013 - 21:31
Official release from tag: