--- a/NEWS	Wed Jan 05 15:55:52 2022 +0100
+++ b/NEWS	Sun Feb 20 11:14:34 2022 +0100
@@ -18,6 +18,18 @@
 General
 -------
 
+* New configuration "DicomAlwaysAllowFindWorklist" to complement the existing
+  "DicomAlwaysAllowFind" configuration.  "DicomAlwaysAllowFind" applies now 
+  only to C-Find for Patients/Studies/Series/Instances while C-Find for worklists are
+  covered by "DicomAlwaysAllowFindWorklist".  The same changes applies to new 
+  configurations in "DicomModalities": "AllowFind" is now complemented by 
+  "AllowFindWorklist".
+  This new option allows improved security management.  E.g: a modality might have
+  only "AllowStore" and "AllowFindWorklist" enabled but might have "AllowFind"
+  disabled to prevent listing past patient studies.
+  Possible BREAKING-CHANGE: if you relied on "DicomAlwaysAllowFind" or "AllowFind"
+  to specifically authorize C-Find for worklist, you now need to explicitely enable
+  "DicomAlwaysAllowFindWorklist" and/or "AllowFindWorklist"
 * Added a storage cache in RAM to avoid reading the same files multiple times from 
   the storage.  This greatly improves, among other things, the performance of WADO-RS
   retrieval of individual frames of multiframe instances.
@@ -48,7 +60,10 @@
 * "/instances/{...}/frames/{...}/numpy": Download the frame as a Python numpy array
 * "/instances/{...}/numpy": Download the instance as a Python numpy array
 * "/series/{...}/numpy": Download the series as a Python numpy array
-* Added a ?full option to "/patients|studies|series|instances/{...}/attachments route
+* Added a ?full option to "/patients|studies|series|instances/{...}/attachments" route
+  to show the mapping alias<->numerical id.
+* Added "/patients|studies|series|instances/{...}/attachments/{...}/info" route to retrieve
+  the full information about an attachment (size, type, MD5 and UUID)
 
 Lua
 ---