
Live notification and activity-log subscriptions now use the authenticated user on the connection to determine which events to deliver. They no longer rely on a user ID supplied by the subscriber.
Core subscriptions also require sign-in. This change applies to these core event streams; it does not claim the same protection for every plugin subscription.
Available in erxes v3.4.7, released October 29, 2026.