03 March 2025

Ontrack Institution Settings

The Ontrack screen contains the institution settings for use in ebs: ontrack Hub.

Ontrack screen

The fields on the Ontrack screen are described in the following table.

This field Holds this information...
Current year start This is not applicable in ebs: ontrack Hub.
Current year end This is not applicable in ebs: ontrack Hub.
Default current year? This is not applicable in ebs: ontrack Hub.
Default active only? Whether to only show active records.
Default to accessible mode Whether to set the interface by default to accessible mode.
Enable One-Click register marking? Whether eRegisters in ebs: ontrack Hub can be marked with a single mouse click to quickly populate the default positive or negative mark for learner records.
Ontrack Hub online help URL

The website that is accessed when a user clicks the Online Help button in ebs: ontrack Hub.

If the field is left blank, the Online Help button is not displayed.

Default for progress date

Select Current date from the drop-down to set the progress date for progressions to the current date.

Select Last attendance date from the drop-down to set the progress date for progressions to the date of the last positive attendance mark for the learner on a given enrolment.

This will be set to Current date as default.

Home ribbon launches ontrack Hub If set to Y, the Agent button on the home ribbon in ebs: central will open ebs: ontrack Hub. If not, ebs: Agent will open.
Ontrack Hub URL The ebs: ontrack Hub URL.
Show Ontrack icon on Home ribbon

Whether to display the ontrack icon on the Home ribbon in ebs: central. This defaults to 'Y'.

This setting is hidden for cloud systems and is set to 'N'.

Show Ontrack in Central Learner details

Whether the Ontrack tab is displayed in the left-hand pane on the Learner screen. This is set to Y by default.

You must also have the EBS4Agent5 licence and a primary role assigned to access the Ontrack tab.

Start time to use when viewing Ontrack timetables The start time used for ontrack timetables.
End time to use when viewing Ontrack timetables The end time used for ontrack timetables.
Audit all ontrack hub access? Whether to audit pages accessed by users in ebs: ontrack Hub. This is set to N by default.

BETA Content-Security-Policy directives

CSP (Content Security Policy) is a feature that helps to prevent or minimize the risk of certain types of security threats. The CSP should only be modified if a problem has been identified with the default settings from Tribal.

The CSP (Content Security Policy) defines which scripts and resources can run on the Ontrack Hub websites. For example, to stop external scripts being executed. Tribal provides default settings for the CSP. However, these settings can be changed if a problem is identified. For more information on how CSPs function, go to MDN - Content security policy.

The CSP directives that can be defined are as follows:

base-uri

Restricts the URIs which can be used in a document's <base> element. If this value is absent, then any URI is allowed.

default-src

Serves as a fallback for the other directives.

child-src

Defines the valid sources for web workers and nested browsing contexts loaded using elements such as <frame> and <iframe>.

style-src

Specifies valid sources for stylesheets.

img-src

Specifies valid sources of images and favicons.

script-src

Specifies valid sources for JavaScript and WebAssembly resources.

font-src

Specifies valid sources for fonts.

connect-src

Restricts the URLs which can be loaded using script interfaces.

frame-src

Specifies valid sources for nested browsing contexts loaded into elements such as <frame> and <iframe>.

frame-ancestors

Specifies valid parents that may embed a page using <frame>, <iframe>, <object>, or <embed>.

report-uri

Indicates the name of the endpoint that the browser should use for reporting content security policy violations.

worker-src

Specifies valid sources for Worker, SharedWorker, or ServiceWorker scripts.

permissions-policy

Provides a mechanism to allow and deny the use of browser features in a document or within any <iframe> elements in the document.

For more information on the directives and syntax used for CSP directives, go to MDN - Content security policy reference.

HTML sanitization allowed attributes

A comma separated list of html attributes.

class is the default value as this is needed for the reports list page

HTML Sanitization allowed at-rules A comma separated list of html attributes for at-rules.
HTML Sanitization allowed classes A comma separated list of html attributes for classes.
HTML Sanitization allowed cssprop A comma separated list of html attributes for cssprops.
HTML Sanitization allowed schemes A comma separated list of html attributes for schemes, with a default value of mailto.
HTML Sanitization allowed tags A comma separated list of html attributes for tags.