diff --git a/.vscode/launch.json b/.vscode/launch.json
index 5ed666059a9d..af93ae24c007 100644
--- a/.vscode/launch.json
+++ b/.vscode/launch.json
@@ -376,6 +376,22 @@
             "env": {},
             "console": "internalConsole"
         },
+        {
+            "name": "server: sync periodic jobs",
+            "type": "debugpy",
+            "request": "launch",
+            "justMyCode": false,
+            "stopOnEntry": false,
+            "python": "${command:python.interpreterPath}",
+            "program": "${workspaceFolder}/manage.py",
+            "args": [
+                "syncperiodicjobs"
+            ],
+            "django": true,
+            "cwd": "${workspaceFolder}",
+            "env": {},
+            "console": "internalConsole"
+        },
         {
             "name": "server: tests",
             "type": "debugpy",
diff --git a/CHANGELOG.md b/CHANGELOG.md
index a195b77dc924..2b9a4fd9584c 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,40 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 <!-- scriv-insert-here -->
 
+<a id='changelog-2.21.2'></a>
+## \[2.21.2\] - 2024-10-24
+
+### Added
+
+- Access to /analytics can now be granted
+  (<https://github.com/cvat-ai/cvat/pull/8509>)
+
+### Fixed
+
+- Expired sessions are now cleared from the database daily
+  (<https://github.com/cvat-ai/cvat/pull/8552>)
+
+- Fixed export/import errors for tracks with duplicated shapes.
+  Fixed a bug which caused shape duplication on track import.
+  (<https://github.com/cvat-ai/cvat/pull/8553>)
+
+- Fix Grafana container restart policy
+  (<https://github.com/cvat-ai/cvat/pull/8577>)
+
+- Fixed some interface tooltips having 'undefined' shortcuts
+  (<https://github.com/cvat-ai/cvat/pull/8578>)
+
+- Memory consumption during preparation of image chunks
+  (<https://github.com/cvat-ai/cvat/pull/8581>)
+
+- Fixed a bug where an export RQ job being retried may break scheduling
+  of new jobs
+  (<https://github.com/cvat-ai/cvat/pull/8584>)
+
+- UI now allows the user to start automatic annotation again
+  if the previous request fails
+  (<https://github.com/cvat-ai/cvat/pull/8587>)
+
 <a id='changelog-2.21.1'></a>
 ## \[2.21.1\] - 2024-10-18
 
diff --git a/Dockerfile b/Dockerfile
index 8a10a34b771b..00dea1de30d0 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -134,6 +134,7 @@ RUN apt-get update && \
         supervisor \
         tzdata \
         unrar \
+        wait-for-it \
     && ln -fs /usr/share/zoneinfo/${TZ} /etc/localtime && \
     dpkg-reconfigure -f noninteractive tzdata && \
     rm -rf /var/lib/apt/lists/* && \
@@ -192,7 +193,7 @@ RUN python -m pip uninstall -y pip
 COPY cvat/nginx.conf /etc/nginx/nginx.conf
 COPY --chown=${USER} components /tmp/components
 COPY --chown=${USER} supervisord/ ${HOME}/supervisord
-COPY --chown=${USER} wait-for-it.sh manage.py backend_entrypoint.sh wait_for_deps.sh ${HOME}/
+COPY --chown=${USER} manage.py backend_entrypoint.sh wait_for_deps.sh ${HOME}/
 COPY --chown=${USER} utils/ ${HOME}/utils
 COPY --chown=${USER} cvat/ ${HOME}/cvat
 COPY --chown=${USER} rqscheduler.py ${HOME}
diff --git a/backend_entrypoint.sh b/backend_entrypoint.sh
index c8b681eabb4d..bac37c76e5be 100755
--- a/backend_entrypoint.sh
+++ b/backend_entrypoint.sh
@@ -8,7 +8,7 @@ fail() {
 }
 
 wait_for_db() {
-    ~/wait-for-it.sh "${CVAT_POSTGRES_HOST}:${CVAT_POSTGRES_PORT:-5432}" -t 0
+    wait-for-it "${CVAT_POSTGRES_HOST}:${CVAT_POSTGRES_PORT:-5432}" -t 0
 }
 
 cmd_bash() {
@@ -18,6 +18,9 @@ cmd_bash() {
 cmd_init() {
     wait_for_db
     ~/manage.py migrate
+
+    wait-for-it "${CVAT_REDIS_INMEM_HOST}:${CVAT_REDIS_INMEM_PORT:-6379}" -t 0
+    ~/manage.py syncperiodicjobs
 }
 
 cmd_run() {
diff --git a/cvat-cli/requirements/base.txt b/cvat-cli/requirements/base.txt
index 5d1eadd9b89f..c307b6c96895 100644
--- a/cvat-cli/requirements/base.txt
+++ b/cvat-cli/requirements/base.txt
@@ -1,3 +1,3 @@
-cvat-sdk~=2.21.1
+cvat-sdk~=2.21.2
 Pillow>=10.3.0
 setuptools>=70.0.0 # not directly required, pinned by Snyk to avoid a vulnerability
diff --git a/cvat-cli/src/cvat_cli/version.py b/cvat-cli/src/cvat_cli/version.py
index 4017971cf6df..528bf553abd1 100644
--- a/cvat-cli/src/cvat_cli/version.py
+++ b/cvat-cli/src/cvat_cli/version.py
@@ -1 +1 @@
-VERSION = "2.21.1"
+VERSION = "2.21.2"
diff --git a/cvat-core/src/annotations-collection.ts b/cvat-core/src/annotations-collection.ts
index 291fcc6c3e97..14879e86bcd8 100644
--- a/cvat-core/src/annotations-collection.ts
+++ b/cvat-core/src/annotations-collection.ts
@@ -1295,7 +1295,7 @@ export default class Collection {
         const predicate = sign > 0 ? (frame) => frame <= frameTo : (frame) => frame >= frameTo;
         const update = sign > 0 ? (frame) => frame + 1 : (frame) => frame - 1;
 
-        // if not looking for an emty frame nor frame with annotations, return the next frame
+        // if not looking for an empty frame nor frame with annotations, return the next frame
         // check if deleted frames are allowed additionally
         if (!annotationsFilters) {
             let frame = frameFrom;
diff --git a/cvat-core/src/api.ts b/cvat-core/src/api.ts
index 5f624ad0e8ae..ca33f431c43e 100644
--- a/cvat-core/src/api.ts
+++ b/cvat-core/src/api.ts
@@ -26,7 +26,7 @@ import QualityReport from './quality-report';
 import QualityConflict from './quality-conflict';
 import QualitySettings from './quality-settings';
 import AnalyticsReport from './analytics-report';
-import ValidationLayout from './validation-layout';
+import { JobValidationLayout, TaskValidationLayout } from './validation-layout';
 import { Request } from './request';
 
 import * as enums from './enums';
@@ -427,7 +427,8 @@ function build(): CVATCore {
             QualityReport,
             Request,
             FramesMetaData,
-            ValidationLayout,
+            JobValidationLayout,
+            TaskValidationLayout,
         },
         utils: {
             mask2Rle,
diff --git a/cvat-core/src/cloud-storage.ts b/cvat-core/src/cloud-storage.ts
index e4e4fb0e5d23..1e7cdeb8d7f7 100644
--- a/cvat-core/src/cloud-storage.ts
+++ b/cvat-core/src/cloud-storage.ts
@@ -290,7 +290,7 @@ Object.defineProperties(CloudStorage.prototype.save, {
             }
             // update
             if (typeof this.id !== 'undefined') {
-                // provider_type and recource should not change;
+                // provider_type and resource should not change;
                 // send to the server only the values that have changed
                 const initialData: SerializedCloudStorage = {};
                 if (this.displayName) {
diff --git a/cvat-core/src/frames.ts b/cvat-core/src/frames.ts
index 1192058c11b3..b29335865d01 100644
--- a/cvat-core/src/frames.ts
+++ b/cvat-core/src/frames.ts
@@ -683,7 +683,7 @@ export function getContextImage(jobID: number, frame: number): Promise<Record<st
                         // it might raise multiple server requests for context images
                         // if the promise was pending before and several requests came for the same frame
                         // all these requests will stuck on "finally"
-                        // and when the promise fullfilled, it will run all the microtasks
+                        // and when the promise is fulfilled, it will run all the microtasks
                         // since they all have the same request id, all they will perform in executor()
                         frameData.activeContextRequest.finally(() => setTimeout(checkAndExecute));
                     } else {
@@ -775,7 +775,7 @@ export async function getFrame(
     // - getContextImage
     // - getCachedChunks
     // And from this idea we should call refreshJobCacheIfOutdated from each one
-    // Hovewer, following from the order, these methods are usually called
+    // However, following from the order, these methods are usually called
     // it may lead to even more confusing behaviour
     //
     // Usually user first receives frame, then user receives ranges and finally user receives context images
diff --git a/cvat-core/src/index.ts b/cvat-core/src/index.ts
index f361f194df73..8a4c9e8bfb53 100644
--- a/cvat-core/src/index.ts
+++ b/cvat-core/src/index.ts
@@ -32,7 +32,7 @@ import QualityConflict from './quality-conflict';
 import QualitySettings from './quality-settings';
 import AnalyticsReport from './analytics-report';
 import AnnotationGuide from './guide';
-import ValidationLayout from './validation-layout';
+import { JobValidationLayout, TaskValidationLayout } from './validation-layout';
 import { Request } from './request';
 import BaseSingleFrameAction, { listActions, registerAction, runActions } from './annotations-actions';
 import {
@@ -216,7 +216,8 @@ export default interface CVATCore {
         AnalyticsReport: typeof AnalyticsReport;
         Request: typeof Request;
         FramesMetaData: typeof FramesMetaData;
-        ValidationLayout: typeof ValidationLayout;
+        JobValidationLayout: typeof JobValidationLayout;
+        TaskValidationLayout: typeof TaskValidationLayout;
     };
     utils: {
         mask2Rle: typeof mask2Rle;
diff --git a/cvat-core/src/object-utils.ts b/cvat-core/src/object-utils.ts
index 0c4a3e5d8143..6e7fcbbd8d8c 100644
--- a/cvat-core/src/object-utils.ts
+++ b/cvat-core/src/object-utils.ts
@@ -60,7 +60,7 @@ export function findAngleDiff(rightAngle: number, leftAngle: number): number {
     angleDiff = ((angleDiff + 180) % 360) - 180;
     if (Math.abs(angleDiff) >= 180) {
         // if the main arc is bigger than 180, go another arc
-        // to find it, just substract absolute value from 360 and inverse sign
+        // to find it, just subtract absolute value from 360 and inverse sign
         angleDiff = 360 - Math.abs(angleDiff) * Math.sign(angleDiff) * -1;
     }
     return angleDiff;
diff --git a/cvat-core/src/requests-manager.ts b/cvat-core/src/requests-manager.ts
index 429c42dba2f3..c348923e68bc 100644
--- a/cvat-core/src/requests-manager.ts
+++ b/cvat-core/src/requests-manager.ts
@@ -74,7 +74,7 @@ class RequestsManager {
         const promise = new Promise<Request>((resolve, reject) => {
             const timeoutCallback = async (): Promise<void> => {
                 // We make sure that no more than REQUESTS_COUNT requests are sent simultaneously
-                // If thats the case, we re-schedule the timeout
+                // If that's the case, we re-schedule the timeout
                 const timestamp = Date.now();
                 if (this.requestStack.length >= REQUESTS_COUNT) {
                     const timestampToCheck = this.requestStack[this.requestStack.length - 1];
diff --git a/cvat-core/src/server-proxy.ts b/cvat-core/src/server-proxy.ts
index 7e8819808649..eb9c15ce64b9 100644
--- a/cvat-core/src/server-proxy.ts
+++ b/cvat-core/src/server-proxy.ts
@@ -19,7 +19,7 @@ import {
     SerializedInvitationData, SerializedCloudStorage, SerializedFramesMetaData, SerializedCollection,
     SerializedQualitySettingsData, APIQualitySettingsFilter, SerializedQualityConflictData, APIQualityConflictsFilter,
     SerializedQualityReportData, APIQualityReportsFilter, SerializedAnalyticsReport, APIAnalyticsReportFilter,
-    SerializedRequest, SerializedValidationLayout,
+    SerializedRequest, SerializedJobValidationLayout, SerializedTaskValidationLayout,
 } from './server-response-types';
 import { PaginatedResource } from './core-types';
 import { Request } from './request';
@@ -102,7 +102,7 @@ function fetchAll(url, filter = {}): Promise<any> {
                     }
                 });
 
-                // removing possible dublicates
+                // removing possible duplicates
                 const obj = result.results.reduce((acc: Record<string, any>, item: any) => {
                     acc[item.id] = item;
                     return acc;
@@ -1384,7 +1384,7 @@ async function deleteJob(jobID: number): Promise<void> {
 
 const validationLayout = (instance: 'tasks' | 'jobs') => async (
     id: number,
-): Promise<SerializedValidationLayout | null> => {
+): Promise<SerializedJobValidationLayout | SerializedTaskValidationLayout> => {
     const { backendAPI } = config;
 
     try {
diff --git a/cvat-core/src/server-response-types.ts b/cvat-core/src/server-response-types.ts
index 5dd8cc3d54d2..af6cd760ed40 100644
--- a/cvat-core/src/server-response-types.ts
+++ b/cvat-core/src/server-response-types.ts
@@ -54,6 +54,7 @@ export interface SerializedUser {
     last_login?: string;
     date_joined?: string;
     email_verification_required: boolean;
+    has_analytics_access: boolean;
 }
 
 interface SerializedStorage {
@@ -524,8 +525,14 @@ export interface SerializedRequest {
     owner?: any;
 }
 
-export interface SerializedValidationLayout {
+export interface SerializedJobValidationLayout {
     honeypot_count?: number;
     honeypot_frames?: number[];
     honeypot_real_frames?: number[];
 }
+
+export interface SerializedTaskValidationLayout extends SerializedJobValidationLayout {
+    mode: 'gt' | 'gt_pool' | null;
+    validation_frames?: number[];
+    disabled_frames?: number[];
+}
diff --git a/cvat-core/src/session-implementation.ts b/cvat-core/src/session-implementation.ts
index 38728a409448..369d0c9d5393 100644
--- a/cvat-core/src/session-implementation.ts
+++ b/cvat-core/src/session-implementation.ts
@@ -27,7 +27,10 @@ import {
     decodePreview,
 } from './frames';
 import Issue from './issue';
-import { SerializedLabel, SerializedTask, SerializedValidationLayout } from './server-response-types';
+import {
+    SerializedLabel, SerializedTask, SerializedJobValidationLayout,
+    SerializedTaskValidationLayout,
+} from './server-response-types';
 import { checkInEnum, checkObjectType } from './common';
 import {
     getCollection, getSaver, clearAnnotations, getAnnotations,
@@ -37,7 +40,7 @@ import AnnotationGuide from './guide';
 import requestsManager from './requests-manager';
 import { Request } from './request';
 import User from './user';
-import ValidationLayout from './validation-layout';
+import { JobValidationLayout, TaskValidationLayout } from './validation-layout';
 
 // must be called with task/job context
 async function deleteFrameWrapper(jobID, frame): Promise<void> {
@@ -171,7 +174,7 @@ export function implementJob(Job: typeof JobClass): typeof JobClass {
         ): ReturnType<typeof JobClass.prototype.validationLayout> {
             const result = await serverProxy.jobs.validationLayout(this.id);
             if (Object.keys(result).length) {
-                return new ValidationLayout(result as Required<SerializedValidationLayout>);
+                return new JobValidationLayout(result as SerializedJobValidationLayout);
             }
 
             return null;
@@ -374,7 +377,7 @@ export function implementJob(Job: typeof JobClass): typeof JobClass {
             }
 
             if ('annotationsFilters' in searchParameters && 'generalFilters' in searchParameters) {
-                throw new ArgumentError('Both annotations filters and general fiters could not be used together');
+                throw new ArgumentError('Both annotations filters and general filters could not be used together');
             }
 
             if (!Number.isInteger(frameFrom) || !Number.isInteger(frameTo)) {
@@ -641,9 +644,9 @@ export function implementTask(Task: typeof TaskClass): typeof TaskClass {
         value: async function validationLayoutImplementation(
             this: TaskClass,
         ): ReturnType<typeof TaskClass.prototype.validationLayout> {
-            const result = await serverProxy.tasks.validationLayout(this.id);
-            if (Object.keys(result).length) {
-                return new ValidationLayout(result as Required<SerializedValidationLayout>);
+            const result = await serverProxy.tasks.validationLayout(this.id) as SerializedTaskValidationLayout;
+            if (result.mode !== null) {
+                return new TaskValidationLayout(result);
             }
 
             return null;
@@ -1043,7 +1046,7 @@ export function implementTask(Task: typeof TaskClass): typeof TaskClass {
             }
 
             if ('annotationsFilters' in searchParameters && 'generalFilters' in searchParameters) {
-                throw new ArgumentError('Both annotations filters and general fiters could not be used together');
+                throw new ArgumentError('Both annotations filters and general filters could not be used together');
             }
 
             if (!Number.isInteger(frameFrom) || !Number.isInteger(frameTo)) {
diff --git a/cvat-core/src/session.ts b/cvat-core/src/session.ts
index cf82aa9a050c..8ecef7e0e632 100644
--- a/cvat-core/src/session.ts
+++ b/cvat-core/src/session.ts
@@ -28,7 +28,7 @@ import { Request } from './request';
 import logger from './logger';
 import Issue from './issue';
 import ObjectState from './object-state';
-import ValidationLayout from './validation-layout';
+import { JobValidationLayout, TaskValidationLayout } from './validation-layout';
 
 function buildDuplicatedAPI(prototype) {
     Object.defineProperties(prototype, {
@@ -686,7 +686,7 @@ export class Job extends Session {
         return result;
     }
 
-    async validationLayout(): Promise<ValidationLayout | null> {
+    async validationLayout(): Promise<JobValidationLayout | null> {
         const result = await PluginRegistry.apiWrapper.call(this, Job.prototype.validationLayout);
         return result;
     }
@@ -1186,7 +1186,7 @@ export class Task extends Session {
         return result;
     }
 
-    async validationLayout(): Promise<ValidationLayout | null> {
+    async validationLayout(): Promise<TaskValidationLayout | null> {
         const result = await PluginRegistry.apiWrapper.call(this, Task.prototype.validationLayout);
         return result;
     }
diff --git a/cvat-core/src/user.ts b/cvat-core/src/user.ts
index 1b0eb5ecfec9..6d7366151fb4 100644
--- a/cvat-core/src/user.ts
+++ b/cvat-core/src/user.ts
@@ -1,5 +1,5 @@
 // Copyright (C) 2019-2022 Intel Corporation
-// Copyright (C) 2022 CVAT.ai Corporation
+// Copyright (C) 2022-2024 CVAT.ai Corporation
 //
 // SPDX-License-Identifier: MIT
 
@@ -18,6 +18,7 @@ export default class User {
     public readonly isSuperuser: boolean;
     public readonly isActive: boolean;
     public readonly isVerified: boolean;
+    public readonly hasAnalyticsAccess: boolean;
 
     constructor(initialData: SerializedUser) {
         const data = {
@@ -33,6 +34,7 @@ export default class User {
             is_superuser: null,
             is_active: null,
             email_verification_required: null,
+            has_analytics_access: null,
         };
 
         for (const property in data) {
@@ -80,6 +82,9 @@ export default class User {
                 isVerified: {
                     get: () => !data.email_verification_required,
                 },
+                hasAnalyticsAccess: {
+                    get: () => data.has_analytics_access,
+                },
             }),
         );
     }
@@ -98,6 +103,7 @@ export default class User {
             is_superuser: this.isSuperuser,
             is_active: this.isActive,
             email_verification_required: this.isVerified,
+            has_analytics_access: this.hasAnalyticsAccess,
         };
     }
 }
diff --git a/cvat-core/src/validation-layout.ts b/cvat-core/src/validation-layout.ts
index ba5a94aa03a9..064af13b2514 100644
--- a/cvat-core/src/validation-layout.ts
+++ b/cvat-core/src/validation-layout.ts
@@ -2,37 +2,43 @@
 //
 // SPDX-License-Identifier: MIT
 
-import { SerializedValidationLayout } from 'server-response-types';
+import { SerializedJobValidationLayout, SerializedTaskValidationLayout } from 'server-response-types';
 import PluginRegistry from './plugins';
 
-export default class ValidationLayout {
-    #honeypotFrames: number[];
-    #honeypotRealFrames: number[];
+export class JobValidationLayout {
+    #honeypotCount: JobValidationLayout['honeypotCount'];
+    #honeypotFrames: JobValidationLayout['honeypotFrames'];
+    #honeypotRealFrames: JobValidationLayout['honeypotRealFrames'];
 
-    public constructor(data: Required<SerializedValidationLayout>) {
-        this.#honeypotFrames = [...data.honeypot_frames];
-        this.#honeypotRealFrames = [...data.honeypot_real_frames];
+    public constructor(data: SerializedJobValidationLayout) {
+        this.#honeypotCount = data.honeypot_count ?? 0;
+        this.#honeypotFrames = [...(data.honeypot_frames ?? [])];
+        this.#honeypotRealFrames = [...(data.honeypot_real_frames ?? [])];
     }
 
-    public get honeypotFrames() {
+    public get honeypotCount(): number {
+        return this.#honeypotCount;
+    }
+
+    public get honeypotFrames(): number[] {
         return [...this.#honeypotFrames];
     }
 
-    public get honeypotRealFrames() {
+    public get honeypotRealFrames(): number[] {
         return [...this.#honeypotRealFrames];
     }
 
     async getRealFrame(frame: number): Promise<number | null> {
-        const result = await PluginRegistry.apiWrapper.call(this, ValidationLayout.prototype.getRealFrame, frame);
+        const result = await PluginRegistry.apiWrapper.call(this, JobValidationLayout.prototype.getRealFrame, frame);
         return result;
     }
 }
 
-Object.defineProperties(ValidationLayout.prototype.getRealFrame, {
+Object.defineProperties(JobValidationLayout.prototype.getRealFrame, {
     implementation: {
         writable: false,
         enumerable: false,
-        value: function implementation(this: ValidationLayout, frame: number): number | null {
+        value: function implementation(this: JobValidationLayout, frame: number): number | null {
             const index = this.honeypotFrames.indexOf(frame);
             if (index !== -1) {
                 return this.honeypotRealFrames[index];
@@ -42,3 +48,28 @@ Object.defineProperties(ValidationLayout.prototype.getRealFrame, {
         },
     },
 });
+
+export class TaskValidationLayout extends JobValidationLayout {
+    #mode: TaskValidationLayout['mode'];
+    #validationFrames: TaskValidationLayout['validationFrames'];
+    #disabledFrames: TaskValidationLayout['disabledFrames'];
+
+    public constructor(data: SerializedTaskValidationLayout) {
+        super(data);
+        this.#mode = data.mode;
+        this.#validationFrames = [...(data.validation_frames ?? [])];
+        this.#disabledFrames = [...(data.disabled_frames ?? [])];
+    }
+
+    public get mode(): NonNullable<SerializedTaskValidationLayout['mode']> {
+        return this.#mode;
+    }
+
+    public get validationFrames(): number[] {
+        return [...this.#validationFrames];
+    }
+
+    public get disabledFrames(): number[] {
+        return [...this.#disabledFrames];
+    }
+}
diff --git a/cvat-data/src/ts/3rdparty/README.md b/cvat-data/src/ts/3rdparty/README.md
index 32ff0a20ab50..2bcd37af45b9 100644
--- a/cvat-data/src/ts/3rdparty/README.md
+++ b/cvat-data/src/ts/3rdparty/README.md
@@ -10,8 +10,8 @@ These files are from the [Broadway.js](https://github.com/mbebenita/Broadway) re
 Authors don't provide an npm package, so we need to store these components in our repository.
 We use this dependency to decode video chunks from a server and split them to frames on client side.
 
-We need to run this package in node environent (for example for debug, or for running unit tests).
-But there aren't any ways to do that (even with syntetic environment, provided for example by the package ``browser-env``).
+We need to run this package in node environment (for example for debug, or for running unit tests).
+But there aren't any ways to do that (even with synthetic environment, provided for example by the package ``browser-env``).
 For example there are issues with canvas using (webpack doesn't work with binary canvas package for node-js) and others.
 So, we have solved to write patch file for this library.
 It modifies source code a little to support our scenario of using.
diff --git a/cvat-data/src/ts/unzip_imgs.worker.ts b/cvat-data/src/ts/unzip_imgs.worker.ts
index 70d8299e7c38..4ca131a09955 100644
--- a/cvat-data/src/ts/unzip_imgs.worker.ts
+++ b/cvat-data/src/ts/unzip_imgs.worker.ts
@@ -34,7 +34,7 @@ onmessage = (e) => {
                             .async('blob')
                             .then((fileData) => {
                                 if (!errored) {
-                                    // do not need to read the rest of block if an error already occured
+                                    // do not need to read the rest of block if an error already occurred
                                     if (dimension === dimension2D) {
                                         createImageBitmap(fileData).then((img) => {
                                             postMessage({
diff --git a/cvat-sdk/gen/generate.sh b/cvat-sdk/gen/generate.sh
index 553c1182f82b..b85479836a7f 100755
--- a/cvat-sdk/gen/generate.sh
+++ b/cvat-sdk/gen/generate.sh
@@ -8,7 +8,7 @@ set -e
 
 GENERATOR_VERSION="v6.0.1"
 
-VERSION="2.21.1"
+VERSION="2.21.2"
 LIB_NAME="cvat_sdk"
 LAYER1_LIB_NAME="${LIB_NAME}/api_client"
 DST_DIR="$(cd "$(dirname -- "$0")/.." && pwd)"
diff --git a/cvat-ui/package.json b/cvat-ui/package.json
index 81b392eb7e54..2c43904a3fb9 100644
--- a/cvat-ui/package.json
+++ b/cvat-ui/package.json
@@ -1,6 +1,6 @@
 {
   "name": "cvat-ui",
-  "version": "1.66.1",
+  "version": "1.66.2",
   "description": "CVAT single-page application",
   "main": "src/index.tsx",
   "scripts": {
diff --git a/cvat-ui/react_nginx.conf b/cvat-ui/react_nginx.conf
index 5f1f4b48997a..6f9437ebbd75 100644
--- a/cvat-ui/react_nginx.conf
+++ b/cvat-ui/react_nginx.conf
@@ -1,7 +1,7 @@
 server {
     root /usr/share/nginx/html;
 
-    # Disable server signature to make it slighty harder for
+    # Disable server signature to make it slightly harder for
     # attackers to find known vulnerabilities. See
     # https://datatracker.ietf.org/doc/html/rfc9110#name-server
     server_tokens off;
diff --git a/cvat-ui/src/actions/annotation-actions.ts b/cvat-ui/src/actions/annotation-actions.ts
index 9e3eeb8176b3..670ace099e5a 100644
--- a/cvat-ui/src/actions/annotation-actions.ts
+++ b/cvat-ui/src/actions/annotation-actions.ts
@@ -12,7 +12,7 @@ import {
 } from 'cvat-canvas-wrapper';
 import {
     getCore, MLModel, JobType, Job, QualityConflict,
-    ObjectState, JobState, ValidationLayout,
+    ObjectState, JobState, JobValidationLayout,
 } from 'cvat-core-wrapper';
 import logger, { EventScope } from 'cvat-logger';
 import { getCVATStore } from 'cvat-store';
@@ -38,7 +38,7 @@ interface AnnotationsParameters {
     showGroundTruth: boolean;
     jobInstance: Job;
     groundTruthInstance: Job | null;
-    validationLayout: ValidationLayout | null;
+    validationLayout: JobValidationLayout | null;
 }
 
 const cvat = getCore();
diff --git a/cvat-ui/src/components/annotation-page/standard-workspace/objects-side-bar/object-item.tsx b/cvat-ui/src/components/annotation-page/standard-workspace/objects-side-bar/object-item.tsx
index 9e6ff1f609c2..30811abad1cd 100644
--- a/cvat-ui/src/components/annotation-page/standard-workspace/objects-side-bar/object-item.tsx
+++ b/cvat-ui/src/components/annotation-page/standard-workspace/objects-side-bar/object-item.tsx
@@ -118,7 +118,7 @@ function ObjectItemComponent(props: Props): JSX.Element {
                     propagateShortcut={normalizedKeyMap.PROPAGATE_OBJECT}
                     toBackgroundShortcut={normalizedKeyMap.TO_BACKGROUND}
                     toForegroundShortcut={normalizedKeyMap.TO_FOREGROUND}
-                    removeShortcut={normalizedKeyMap.DELETE_OBJECT}
+                    removeShortcut={normalizedKeyMap.DELETE_OBJECT_STANDARD_WORKSPACE}
                     changeColorShortcut={normalizedKeyMap.CHANGE_OBJECT_COLOR}
                     sliceShortcut={normalizedKeyMap.SWITCH_SLICE_MODE}
                     changeLabel={changeLabel}
diff --git a/cvat-ui/src/components/header/header.tsx b/cvat-ui/src/components/header/header.tsx
index 2621edddfa22..0feeae4be574 100644
--- a/cvat-ui/src/components/header/header.tsx
+++ b/cvat-ui/src/components/header/header.tsx
@@ -513,7 +513,7 @@ function HeaderComponent(props: Props): JSX.Element {
                         Models
                     </Button>
                 ) : null}
-                {isAnalyticsPluginActive && user.isSuperuser ? (
+                {isAnalyticsPluginActive && user.hasAnalyticsAccess ? (
                     <Button
                         className={getButtonClassName('analytics', false)}
                         type='link'
diff --git a/cvat-ui/src/components/model-runner-modal/object-mapper.tsx b/cvat-ui/src/components/model-runner-modal/object-mapper.tsx
index b1bb2b889d86..530d59bc54ac 100644
--- a/cvat-ui/src/components/model-runner-modal/object-mapper.tsx
+++ b/cvat-ui/src/components/model-runner-modal/object-mapper.tsx
@@ -40,7 +40,7 @@ function ObjectMapperComponent(props: Props): JSX.Element {
     const [rightValue, setRightValue] = useState<object | null>(null);
 
     const setMappingWrapper = (updated: Props['defaultMapping']): void => {
-        // if we prefer useEffect instead of this approch
+        // if we prefer useEffect instead of this approach
         // component will be rerendered first with extras that depends on parent state
         // these extras will use outdated information in this case
         onUpdateMapping(updated);
diff --git a/cvat-ui/src/components/quality-control/quality-control-page.tsx b/cvat-ui/src/components/quality-control/quality-control-page.tsx
index 64e475321cfa..09f7cfe5e4d8 100644
--- a/cvat-ui/src/components/quality-control/quality-control-page.tsx
+++ b/cvat-ui/src/components/quality-control/quality-control-page.tsx
@@ -13,10 +13,11 @@ import { Row, Col } from 'antd/lib/grid';
 import Tabs, { TabsProps } from 'antd/lib/tabs';
 import Title from 'antd/lib/typography/Title';
 import notification from 'antd/lib/notification';
-import { useIsMounted } from 'utils/hooks';
+import Result from 'antd/lib/result';
+
 import {
-    Job, JobType, QualityReport, QualitySettings, Task, getCore, FramesMetaData,
-    TargetMetric,
+    Job, JobType, QualityReport, QualitySettings, Task,
+    TaskValidationLayout, getCore, FramesMetaData,
 } from 'cvat-core-wrapper';
 import CVATLoadingSpinner from 'components/common/loading-spinner';
 import GoBackButton from 'components/common/go-back-button';
@@ -32,20 +33,17 @@ function getTabFromHash(supportedTabs: string[]): string {
     return supportedTabs.includes(tab) ? tab : supportedTabs[0];
 }
 
-type InstanceType = 'task';
-
 interface State {
     fetching: boolean;
     reportRefreshingStatus: string | null;
-    gtJob: {
-        instance: Job | null,
-        meta: FramesMetaData | null,
-    },
+    validationLayout: TaskValidationLayout | null;
+    gtJobInstance: Job | null;
+    gtJobMeta: FramesMetaData | null;
+    error: Error | null;
     qualitySettings: {
         settings: QualitySettings | null;
         fetching: boolean;
-        targetMetric: TargetMetric | null;
-    },
+    };
 }
 
 enum ReducerActionType {
@@ -57,6 +55,8 @@ enum ReducerActionType {
     SET_REPORT_REFRESHING_STATUS = 'SET_REPORT_REFRESHING_STATUS',
     SET_GT_JOB = 'SET_GT_JOB',
     SET_GT_JOB_META = 'SET_GT_JOB_META',
+    SET_VALIDATION_LAYOUT = 'SET_VALIDATION_LAYOUT',
+    SET_ERROR = 'SET_ERROR',
 }
 
 export const reducerActions = {
@@ -78,11 +78,17 @@ export const reducerActions = {
     setReportRefreshingStatus: (status: string | null) => (
         createAction(ReducerActionType.SET_REPORT_REFRESHING_STATUS, { status })
     ),
-    setGtJob: (job: Job | null) => (
-        createAction(ReducerActionType.SET_GT_JOB, { job })
+    setGtJob: (gtJobInstance: Job | null) => (
+        createAction(ReducerActionType.SET_GT_JOB, { gtJobInstance })
     ),
-    setGtJobMeta: (meta: FramesMetaData | null) => (
-        createAction(ReducerActionType.SET_GT_JOB_META, { meta })
+    setGtJobMeta: (gtJobMeta: FramesMetaData | null) => (
+        createAction(ReducerActionType.SET_GT_JOB_META, { gtJobMeta })
+    ),
+    setValidationLayout: (validationLayout: TaskValidationLayout | null) => (
+        createAction(ReducerActionType.SET_VALIDATION_LAYOUT, { validationLayout })
+    ),
+    setError: (error: Error) => (
+        createAction(ReducerActionType.SET_ERROR, { error })
     ),
 };
 
@@ -100,7 +106,6 @@ const reducer = (state: State, action: ActionUnion<typeof reducerActions>): Stat
             qualitySettings: {
                 ...state.qualitySettings,
                 settings: action.payload.qualitySettings,
-                targetMetric: action.payload.qualitySettings.targetMetric,
             },
         };
     }
@@ -125,20 +130,28 @@ const reducer = (state: State, action: ActionUnion<typeof reducerActions>): Stat
     if (action.type === ReducerActionType.SET_GT_JOB) {
         return {
             ...state,
-            gtJob: {
-                ...state.gtJob,
-                instance: action.payload.job,
-            },
+            gtJobInstance: action.payload.gtJobInstance,
         };
     }
 
     if (action.type === ReducerActionType.SET_GT_JOB_META) {
         return {
             ...state,
-            gtJob: {
-                ...state.gtJob,
-                meta: action.payload.meta,
-            },
+            gtJobMeta: action.payload.gtJobMeta,
+        };
+    }
+
+    if (action.type === ReducerActionType.SET_VALIDATION_LAYOUT) {
+        return {
+            ...state,
+            validationLayout: action.payload.validationLayout,
+        };
+    }
+
+    if (action.type === ReducerActionType.SET_ERROR) {
+        return {
+            ...state,
+            error: action.payload.error,
         };
     }
 
@@ -146,87 +159,58 @@ const reducer = (state: State, action: ActionUnion<typeof reducerActions>): Stat
 };
 
 function QualityControlPage(): JSX.Element {
+    const supportedTabs = ['overview', 'settings', 'management'];
     const [state, dispatch] = useReducer(reducer, {
         fetching: true,
         reportRefreshingStatus: null,
-        gtJob: {
-            instance: null,
-            meta: null,
-        },
+        gtJobInstance: null,
+        gtJobMeta: null,
+        validationLayout: null,
+        error: null,
         qualitySettings: {
             settings: null,
-            fetching: true,
-            targetMetric: null,
+            fetching: false,
         },
     });
 
-    const requestedInstanceType: InstanceType = 'task';
     const requestedInstanceID = +useParams<{ tid: string }>().tid;
 
-    const [instanceType, setInstanceType] = useState<InstanceType | null>(null);
-    const [instance, setInstance] = useState<Task | null>(null);
-    const isMounted = useIsMounted();
-
-    const supportedTabs = ['overview', 'settings', 'management'];
     const [activeTab, setActiveTab] = useState(getTabFromHash(supportedTabs));
-    const receiveInstance = async (type: InstanceType, id: number): Promise<Task | null> => {
-        let receivedInstance: Task | null = null;
-        let gtJob: Job | null = null;
-        let gtJobMeta: FramesMetaData | null = null;
+    const [instance, setInstance] = useState<Task | null>(null);
 
+    const initializeData = async (id: number): Promise<void> => {
         try {
-            if (type === 'task') {
-                [receivedInstance] = await core.tasks.get({ id });
-                gtJob = receivedInstance.jobs.find((job: Job) => job.type === JobType.GROUND_TRUTH) ?? null;
-                if (gtJob) {
-                    gtJobMeta = await core.frames.getMeta('job', gtJob.id) as FramesMetaData;
-                }
-            } else {
-                return null;
+            let taskInstance = null;
+            try {
+                [taskInstance] = await core.tasks.get({ id });
+            } catch (error: unknown) {
+                throw new Error('The task was not found on the server');
+            }
+
+            setInstance(taskInstance);
+            try {
+                dispatch(reducerActions.setQualitySettingsFetching(true));
+                const settings = await core.analytics.quality.settings.get({ taskID: taskInstance.id });
+                dispatch(reducerActions.setQualitySettings(settings));
+            } finally {
+                dispatch(reducerActions.setQualitySettingsFetching(false));
             }
 
-            if (isMounted()) {
+            const gtJob = taskInstance.jobs.find((job: Job) => job.type === JobType.GROUND_TRUTH) ?? null;
+            if (gtJob) {
+                const validationLayout: TaskValidationLayout | null = await taskInstance.validationLayout();
+                const gtJobMeta = await core.frames.getMeta('job', gtJob.id) as FramesMetaData;
                 dispatch(reducerActions.setGtJob(gtJob));
                 dispatch(reducerActions.setGtJobMeta(gtJobMeta));
-                setInstance(receivedInstance);
-                setInstanceType(type);
+                dispatch(reducerActions.setValidationLayout(validationLayout));
             }
-            return receivedInstance;
         } catch (error: unknown) {
-            notification.error({
-                message: `Could not receive requested ${type}`,
-                description: `${error instanceof Error ? error.message : ''}`,
-            });
-            return null;
+            dispatch(reducerActions.setError(error instanceof Error ? error : new Error('Unknown error')));
+        } finally {
+            dispatch(reducerActions.setFetching(false));
         }
     };
 
-    const receiveSettings = useCallback(async (taskInstance: Task) => {
-        dispatch(reducerActions.setQualitySettingsFetching(true));
-
-        function handleError(error: Error): void {
-            if (isMounted()) {
-                notification.error({
-                    description: error.toString(),
-                    message: 'Could not initialize quality control page',
-                });
-            }
-        }
-
-        try {
-            const settingsRequest = core.analytics.quality.settings.get({ taskID: taskInstance.id });
-
-            await Promise.all([settingsRequest]).then(([settings]) => {
-                dispatch(reducerActions.setQualitySettings(settings));
-            }).catch(handleError).finally(() => {
-                dispatch(reducerActions.setQualitySettingsFetching(false));
-                dispatch(reducerActions.setFetching(false));
-            });
-        } catch (error: unknown) {
-            handleError(error as Error);
-        }
-    }, [instance]);
-
     const onSaveQualitySettings = useCallback(async (values) => {
         try {
             const { settings } = state.qualitySettings;
@@ -274,48 +258,41 @@ function QualityControlPage(): JSX.Element {
         }
     }, [state.qualitySettings.settings]);
 
-    const updateMeta = (action: (frameID: number) => void) => async (frameIDs: number[]): Promise<void> => {
-        const { instance: gtJob } = state.gtJob;
-        if (gtJob) {
-            dispatch(reducerActions.setFetching(true));
-            await Promise.all(frameIDs.map((frameID: number): void => action(frameID)));
-            const [newMeta] = await gtJob.frames.save();
+    const updateMeta = async (): Promise<void> => {
+        dispatch(reducerActions.setFetching(true));
+        try {
+            const [newMeta] = await (state.gtJobInstance as Job).frames.save();
+            const validationLayout: TaskValidationLayout | null = await (instance as Task).validationLayout();
             dispatch(reducerActions.setGtJobMeta(newMeta));
+            dispatch(reducerActions.setValidationLayout(validationLayout));
+        } finally {
             dispatch(reducerActions.setFetching(false));
         }
     };
 
-    const onDeleteFrames = useCallback(
-        updateMeta((frameID: number) => (state.gtJob.instance?.frames.delete(frameID))),
-        [state.gtJob.instance],
-    );
-
-    const onRestoreFrames = useCallback(
-        updateMeta((frameID: number) => (state.gtJob.instance?.frames.restore(frameID))),
-        [state.gtJob.instance],
-    );
+    const onDeleteFrames = useCallback((frameIDs: number[]): void => {
+        if (state.gtJobInstance && instance) {
+            for (const frameID of frameIDs) {
+                state.gtJobInstance.frames.delete(frameID);
+            }
 
-    useEffect(() => {
-        if (Number.isInteger(requestedInstanceID) && ['task'].includes(requestedInstanceType)) {
-            dispatch(reducerActions.setFetching(true));
-            receiveInstance(requestedInstanceType, requestedInstanceID).then((task) => {
-                if (task) {
-                    receiveSettings(task);
-                }
-            });
-        } else {
-            notification.error({
-                message: 'Could not load this page',
-                description: `Not valid resource ${requestedInstanceType} #${requestedInstanceID}`,
-            });
+            updateMeta();
         }
+    }, [state.gtJobInstance]);
 
-        return () => {
-            if (isMounted()) {
-                setInstance(null);
+    const onRestoreFrames = useCallback((frameIDs: number[]): void => {
+        if (state.gtJobInstance && instance) {
+            for (const frameID of frameIDs) {
+                state.gtJobInstance.frames.restore(frameID);
             }
-        };
-    }, [requestedInstanceType, requestedInstanceID]);
+
+            updateMeta();
+        }
+    }, [state.gtJobInstance]);
+
+    useEffect(() => {
+        initializeData(requestedInstanceID);
+    }, [requestedInstanceID]);
 
     useEffect(() => {
         window.addEventListener('hashchange', () => {
@@ -332,70 +309,95 @@ function QualityControlPage(): JSX.Element {
         setActiveTab(key);
     }, []);
 
-    let backNavigation: JSX.Element | null = null;
+    const backNavigation: JSX.Element | null = (
+        <Row justify='center'>
+            <Col span={22} xl={18} xxl={14} className='cvat-task-top-bar'>
+                <GoBackButton />
+            </Col>
+        </Row>
+    );
     let title: JSX.Element | null = null;
     let tabs: JSX.Element | null = null;
 
     const {
         fetching,
-        gtJob: {
-            instance: gtJobInstance,
-            meta: gtJobMeta,
-        },
+        gtJobInstance,
+        gtJobMeta,
+        validationLayout,
+        error,
         qualitySettings: {
             settings: qualitySettings,
             fetching: qualitySettingsFetching,
-            targetMetric,
         },
     } = state;
 
-    const settingsInitialized = qualitySettings && targetMetric;
-    if (instanceType && instance && settingsInitialized) {
-        backNavigation = (
-            <Row justify='center'>
-                <Col span={22} xl={18} xxl={14} className='cvat-task-top-bar'>
-                    <GoBackButton />
-                </Col>
-            </Row>
+    if (error) {
+        return (
+            <div className='cvat-quality-control-page'>
+                <div className='cvat-quality-control-page-error'>
+                    <Result
+                        status='error'
+                        title='Could not open the page'
+                        subTitle={error.message}
+                        extra={backNavigation}
+                    />
+                </div>
+            </div>
         );
+    }
 
-        const qualityControlFor = <Link to={`/tasks/${instance.id}`}>{`Task #${instance.id}`}</Link>;
+    if (fetching || qualitySettingsFetching) {
+        return (
+            <div className='cvat-quality-control-page'>
+                <div className='cvat-quality-control-loading'>
+                    <CVATLoadingSpinner />
+                </div>
+            </div>
+        );
+    }
+
+    if (instance) {
         title = (
             <Col>
                 <Title level={4} className='cvat-text-color'>
                     Quality control for
-                    {' '}
-                    {qualityControlFor}
+                    <Link to={`/tasks/${instance.id}`}>{` Task #${instance.id}`}</Link>
                 </Title>
             </Col>
         );
 
-        const tabsItems: [NonNullable<TabsProps['items']>[0], number][] = [];
-        tabsItems.push([{
-            key: 'overview',
-            label: 'Overview',
-            children: (
-                <QualityOverviewTab task={instance} targetMetric={targetMetric} />
-            ),
-        }, 10]);
+        const tabsItems: NonNullable<TabsProps['items']>[0][] = [];
 
-        if (gtJobInstance && gtJobMeta) {
-            tabsItems.push([{
-                key: 'management',
-                label: 'Management',
+        if (qualitySettings) {
+            tabsItems.push({
+                key: 'overview',
+                label: 'Overview',
                 children: (
-                    <QualityManagementTab
-                        task={instance}
-                        gtJob={gtJobInstance}
-                        gtJobMeta={gtJobMeta}
-                        onDeleteFrames={onDeleteFrames}
-                        onRestoreFrames={onRestoreFrames}
-                        fetching={fetching}
-                    />
+                    <QualityOverviewTab task={instance} qualitySettings={qualitySettings} />
                 ),
-            }, 20]);
+            });
+        }
 
-            tabsItems.push([{
+        if (gtJobInstance && gtJobMeta) {
+            if (validationLayout && qualitySettings) {
+                tabsItems.push({
+                    key: 'management',
+                    label: 'Management',
+                    children: (
+                        <QualityManagementTab
+                            task={instance}
+                            gtJobId={gtJobInstance.id}
+                            gtJobMeta={gtJobMeta}
+                            validationLayout={validationLayout}
+                            qualitySettings={qualitySettings}
+                            onDeleteFrames={onDeleteFrames}
+                            onRestoreFrames={onRestoreFrames}
+                        />
+                    ),
+                });
+            }
+
+            tabsItems.push({
                 key: 'settings',
                 label: 'Settings',
                 children: (
@@ -405,11 +407,9 @@ function QualityControlPage(): JSX.Element {
                         setQualitySettings={onSaveQualitySettings}
                     />
                 ),
-            }, 30]);
+            });
         }
 
-        tabsItems.sort((item1, item2) => item1[1] - item2[1]);
-
         tabs = (
             <Tabs
                 type='card'
@@ -417,30 +417,24 @@ function QualityControlPage(): JSX.Element {
                 defaultActiveKey='Overview'
                 onChange={onTabKeyChange}
                 className='cvat-task-control-tabs'
-                items={tabsItems.map((item) => item[0])}
+                items={tabsItems}
             />
         );
     }
 
     return (
         <div className='cvat-quality-control-page'>
-            {fetching && qualitySettingsFetching ? (
-                <div className='cvat-quality-control-loading'>
-                    <CVATLoadingSpinner />
-                </div>
-            ) : (
-                <Row className='cvat-quality-control-wrapper'>
-                    <Col span={24}>
-                        {backNavigation}
-                        <Row justify='center'>
-                            <Col span={22} xl={18} xxl={14} className='cvat-quality-control-inner'>
-                                {title}
-                                {tabs}
-                            </Col>
-                        </Row>
-                    </Col>
-                </Row>
-            )}
+            <Row className='cvat-quality-control-wrapper'>
+                <Col span={24}>
+                    {backNavigation}
+                    <Row justify='center'>
+                        <Col span={22} xl={18} xxl={14} className='cvat-quality-control-inner'>
+                            {title}
+                            {tabs}
+                        </Col>
+                    </Row>
+                </Col>
+            </Row>
         </div>
     );
 }
diff --git a/cvat-ui/src/components/quality-control/styles.scss b/cvat-ui/src/components/quality-control/styles.scss
index 6149d317d105..70a8e2fcea81 100644
--- a/cvat-ui/src/components/quality-control/styles.scss
+++ b/cvat-ui/src/components/quality-control/styles.scss
@@ -115,10 +115,11 @@ $excluded-background: #d9d9d973;
     }
 }
 
-.cvat-quality-control-loading {
+.cvat-quality-control-loading, .cvat-quality-control-page-error {
     position: absolute;
-    right: 50%;
-    margin-top: 20%;
+    top: 50%;
+    left: 50%;
+    transform: translate(-50%, -50%);
 }
 
 .cvat-quality-control-overview-tab {
diff --git a/cvat-ui/src/components/quality-control/task-quality/allocation-table.tsx b/cvat-ui/src/components/quality-control/task-quality/allocation-table.tsx
index 363d08374001..914909bc90c1 100644
--- a/cvat-ui/src/components/quality-control/task-quality/allocation-table.tsx
+++ b/cvat-ui/src/components/quality-control/task-quality/allocation-table.tsx
@@ -2,7 +2,6 @@
 //
 // SPDX-License-Identifier: MIT
 
-import { range } from 'lodash';
 import React, { useState } from 'react';
 import { useHistory } from 'react-router';
 import { useSelector } from 'react-redux';
@@ -15,14 +14,18 @@ import { Key } from 'antd/lib/table/interface';
 import Icon, { DeleteOutlined } from '@ant-design/icons';
 
 import { RestoreIcon } from 'icons';
-import { Task, Job, FramesMetaData } from 'cvat-core-wrapper';
+import {
+    Task, FramesMetaData, TaskValidationLayout, QualitySettings,
+} from 'cvat-core-wrapper';
 import CVATTooltip from 'components/common/cvat-tooltip';
 import { sorter } from 'utils/quality';
 
 interface Props {
     task: Task;
-    gtJob: Job;
+    gtJobId: number;
     gtJobMeta: FramesMetaData;
+    validationLayout: TaskValidationLayout;
+    qualitySettings: QualitySettings;
     onDeleteFrames: (frames: number[]) => void;
     onRestoreFrames: (frames: number[]) => void;
 }
@@ -33,52 +36,9 @@ interface RowData {
     active: boolean;
 }
 
-interface TableRowData extends RowData {
-    key: Key;
-}
-
-// Temporary solution: this function is necessary in one of plugins which imports it directly from CVAT code
-// Further this solution should be re-designed
-// Until then, *DO NOT RENAME/REMOVE* this exported function
-export function getAllocationTableContents(gtJobMeta: FramesMetaData, gtJob: Job): TableRowData[] {
-    // A workaround for meta "includedFrames" using source data numbers
-    // TODO: remove once meta is migrated to relative frame numbers
-
-    const jobFrameNumbers = gtJobMeta.getDataFrameNumbers().map((dataFrameNumber: number) => (
-        gtJobMeta.getJobRelativeFrameNumber(dataFrameNumber) + gtJob.startFrame
-    ));
-
-    const jobDataSegmentFrameNumbers = range(
-        gtJobMeta.startFrame, gtJobMeta.stopFrame + 1, gtJobMeta.frameStep,
-    );
-
-    let includedIndex = 0;
-    const result: TableRowData[] = [];
-    for (let index = 0; index < jobDataSegmentFrameNumbers.length; ++index) {
-        const dataFrameID = jobDataSegmentFrameNumbers[index];
-
-        if (gtJobMeta.includedFrames && !gtJobMeta.includedFrames.includes(dataFrameID)) {
-            continue;
-        }
-
-        const frameID = jobFrameNumbers[includedIndex];
-
-        result.push({
-            key: frameID,
-            frame: frameID,
-            name: gtJobMeta.frames[index]?.name ?? gtJobMeta.frames[0].name,
-            active: !(frameID in gtJobMeta.deletedFrames),
-        });
-
-        ++includedIndex;
-    }
-
-    return result;
-}
-
 function AllocationTable(props: Readonly<Props>): JSX.Element {
     const {
-        task, gtJob, gtJobMeta,
+        task, gtJobId, gtJobMeta, validationLayout,
         onDeleteFrames, onRestoreFrames,
     } = props;
 
@@ -88,7 +48,13 @@ function AllocationTable(props: Readonly<Props>): JSX.Element {
         selectedRows: [],
     });
 
-    const data = getAllocationTableContents(gtJobMeta, gtJob);
+    const { disabledFrames } = validationLayout;
+    const data = validationLayout.validationFrames.map((frame: number, index: number) => ({
+        key: frame,
+        frame,
+        name: gtJobMeta.frames[index]?.name ?? gtJobMeta.frames[0].name,
+        active: !disabledFrames.includes(frame),
+    }));
 
     const columns = [
         {
@@ -104,7 +70,7 @@ function AllocationTable(props: Readonly<Props>): JSX.Element {
                         type='link'
                         onClick={(e: React.MouseEvent): void => {
                             e.preventDefault();
-                            history.push(`/tasks/${task.id}/jobs/${gtJob.id}?frame=${frame}`);
+                            history.push(`/tasks/${task.id}/jobs/${gtJobId}?frame=${frame}`);
                         }}
                     >
                         {`#${frame}`}
@@ -125,7 +91,7 @@ function AllocationTable(props: Readonly<Props>): JSX.Element {
                         type='link'
                         onClick={(e: React.MouseEvent): void => {
                             e.preventDefault();
-                            history.push(`/tasks/${task.id}/jobs/${gtJob.id}?frame=${record.frame}`);
+                            history.push(`/tasks/${task.id}/jobs/${gtJobId}?frame=${record.frame}`);
                         }}
                     >
                         {name}
diff --git a/cvat-ui/src/components/quality-control/task-quality/quality-magement-tab.tsx b/cvat-ui/src/components/quality-control/task-quality/quality-magement-tab.tsx
index 03e6103db861..6acc2770be3e 100644
--- a/cvat-ui/src/components/quality-control/task-quality/quality-magement-tab.tsx
+++ b/cvat-ui/src/components/quality-control/task-quality/quality-magement-tab.tsx
@@ -4,43 +4,41 @@
 
 import React from 'react';
 import { Row, Col } from 'antd/es/grid';
-import Spin from 'antd/lib/spin';
 
-import { FramesMetaData, Job, Task } from 'cvat-core-wrapper';
+import {
+    FramesMetaData, QualitySettings,
+    Task, TaskValidationLayout,
+} from 'cvat-core-wrapper';
 import AllocationTable from './allocation-table';
 import SummaryComponent from './summary';
 
 interface Props {
     task: Task;
-    gtJob: Job;
+    gtJobId: number;
     gtJobMeta: FramesMetaData;
-    fetching: boolean;
+    validationLayout: TaskValidationLayout;
+    qualitySettings: QualitySettings;
     onDeleteFrames: (frames: number[]) => void;
     onRestoreFrames: (frames: number[]) => void;
 }
 
 function QualityManagementTab(props: Readonly<Props>): JSX.Element {
     const {
-        task, gtJob, gtJobMeta, fetching,
+        task, gtJobId, gtJobMeta,
+        validationLayout, qualitySettings,
         onDeleteFrames, onRestoreFrames,
     } = props;
 
-    const totalCount = gtJobMeta.getDataFrameNumbers().length;
-    const excludedCount = Object.keys(gtJobMeta.deletedFrames).length;
+    const totalCount = validationLayout.validationFrames.length;
+    const excludedCount = validationLayout.disabledFrames.length;
     const activeCount = totalCount - excludedCount;
 
     return (
         <div className='cvat-quality-control-management-tab'>
-            {
-                fetching && (
-                    <div className='cvat-spinner-container'>
-                        <Spin className='cvat-spinner' />
-                    </div>
-                )
-            }
             <Row>
                 <Col span={24}>
                     <SummaryComponent
+                        mode={validationLayout.mode}
                         excludedCount={excludedCount}
                         activeCount={activeCount}
                         totalCount={totalCount}
@@ -51,8 +49,10 @@ function QualityManagementTab(props: Readonly<Props>): JSX.Element {
                 <Col span={24}>
                     <AllocationTable
                         task={task}
-                        gtJob={gtJob}
+                        gtJobId={gtJobId}
                         gtJobMeta={gtJobMeta}
+                        validationLayout={validationLayout}
+                        qualitySettings={qualitySettings}
                         onDeleteFrames={onDeleteFrames}
                         onRestoreFrames={onRestoreFrames}
                     />
diff --git a/cvat-ui/src/components/quality-control/task-quality/quality-overview-tab.tsx b/cvat-ui/src/components/quality-control/task-quality/quality-overview-tab.tsx
index 7bb03ebb31e0..04042a66678f 100644
--- a/cvat-ui/src/components/quality-control/task-quality/quality-overview-tab.tsx
+++ b/cvat-ui/src/components/quality-control/task-quality/quality-overview-tab.tsx
@@ -6,13 +6,13 @@ import React from 'react';
 import { useSelector } from 'react-redux';
 
 import config from 'config';
-import { TargetMetric, Task } from 'cvat-core-wrapper';
+import { QualitySettings, Task } from 'cvat-core-wrapper';
 import { CombinedState } from 'reducers';
 import PaidFeaturePlaceholder from 'components/paid-feature-placeholder/paid-feature-placeholder';
 
 interface Props {
     task: Task;
-    targetMetric: TargetMetric;
+    qualitySettings: QualitySettings;
 }
 
 function QualityOverviewTab(): JSX.Element {
diff --git a/cvat-ui/src/components/quality-control/task-quality/summary.tsx b/cvat-ui/src/components/quality-control/task-quality/summary.tsx
index 59767192ed0d..30fc859feb54 100644
--- a/cvat-ui/src/components/quality-control/task-quality/summary.tsx
+++ b/cvat-ui/src/components/quality-control/task-quality/summary.tsx
@@ -5,40 +5,51 @@
 import React from 'react';
 import { Row, Col } from 'antd/es/grid';
 import Text from 'antd/lib/typography/Text';
+
 import AnalyticsCard from 'components/analytics-page/views/analytics-card';
 
 export interface Props {
+    mode: 'gt' | 'gt_pool'
     excludedCount: number;
     totalCount: number;
     activeCount: number;
 }
 
 export default function SummaryComponent(props: Readonly<Props>): JSX.Element {
-    const { excludedCount, totalCount, activeCount } = props;
+    const {
+        excludedCount, totalCount, activeCount, mode,
+    } = props;
 
     const reportInfo = (
         <Row>
             <Col span={10} className='cvat-allocation-summary'>
                 <Row>
-                    <Col span={12} className='cvat-allocation-summary-excluded'>
+                    <Col span={12} className='cvat-allocation-summary-mode'>
                         <Text>
-                            Excluded count:
+                            Validation mode:
                             {' '}
-                            <Text strong>{excludedCount}</Text>
+                            <Text strong>{mode === 'gt' ? 'Ground Truth' : 'Honeypots'}</Text>
                         </Text>
                     </Col>
                     <Col span={12} className='cvat-allocation-summary-total'>
                         <Text>
-                            Total count:
+                            Total validation frames:
                             {' '}
                             <Text strong>{totalCount}</Text>
                         </Text>
                     </Col>
                 </Row>
                 <Row>
+                    <Col span={12} className='cvat-allocation-summary-excluded'>
+                        <Text>
+                            Excluded validation frames:
+                            {' '}
+                            <Text strong>{excludedCount}</Text>
+                        </Text>
+                    </Col>
                     <Col span={12} className='cvat-allocation-summary-active'>
                         <Text>
-                            Active count:
+                            Active validation frames:
                             {' '}
                             <Text strong>{activeCount}</Text>
                         </Text>
diff --git a/cvat-ui/src/components/tasks-page/automatic-annotation-progress.tsx b/cvat-ui/src/components/tasks-page/automatic-annotation-progress.tsx
index 8dbb152ef9e0..8b2ecd507680 100644
--- a/cvat-ui/src/components/tasks-page/automatic-annotation-progress.tsx
+++ b/cvat-ui/src/components/tasks-page/automatic-annotation-progress.tsx
@@ -63,7 +63,7 @@ export default function AutomaticAnnotationProgress(props: Props): JSX.Element |
                                 return (<>Unknown status received</>);
                             }
 
-                            return <>Automatic annotation accomplisted</>;
+                            return <>Automatic annotation accomplished</>;
                         })()}
                     </Text>
                 </div>
diff --git a/cvat-ui/src/containers/actions-menu/actions-menu.tsx b/cvat-ui/src/containers/actions-menu/actions-menu.tsx
index e9773c2b9051..3c200feb58a0 100644
--- a/cvat-ui/src/containers/actions-menu/actions-menu.tsx
+++ b/cvat-ui/src/containers/actions-menu/actions-menu.tsx
@@ -17,6 +17,7 @@ import {
 } from 'actions/tasks-actions';
 import { exportActions } from 'actions/export-actions';
 import { importActions } from 'actions/import-actions';
+import { RQStatus } from 'cvat-core-wrapper';
 
 interface OwnProps {
     taskInstance: any;
@@ -46,9 +47,12 @@ function mapStateToProps(state: CombinedState, own: OwnProps): StateToProps {
         formats: { annotationFormats },
     } = state;
 
+    const inference = state.models.inferences[tid];
+
     return {
         annotationFormats,
-        inferenceIsActive: tid in state.models.inferences,
+        inferenceIsActive: inference &&
+            ![RQStatus.FAILED, RQStatus.FINISHED].includes(inference.status),
     };
 }
 
diff --git a/cvat-ui/src/containers/annotation-page/standard-workspace/controls-side-bar/draw-shape-popover.tsx b/cvat-ui/src/containers/annotation-page/standard-workspace/controls-side-bar/draw-shape-popover.tsx
index 45325a7ec6ac..50e7ac511832 100644
--- a/cvat-ui/src/containers/annotation-page/standard-workspace/controls-side-bar/draw-shape-popover.tsx
+++ b/cvat-ui/src/containers/annotation-page/standard-workspace/controls-side-bar/draw-shape-popover.tsx
@@ -204,7 +204,7 @@ class DrawShapePopoverContainer extends React.PureComponent<Props, State> {
                 numberOfPoints={numberOfPoints}
                 rectDrawingMethod={rectDrawingMethod}
                 cuboidDrawingMethod={cuboidDrawingMethod}
-                repeatShapeShortcut={normalizedKeyMap.SWITCH_DRAW_MODE}
+                repeatShapeShortcut={normalizedKeyMap.SWITCH_DRAW_MODE_STANDARD_CONTROLS}
                 onChangeLabel={this.onChangeLabel}
                 onChangePoints={this.onChangePoints}
                 onChangeRectDrawingMethod={this.onChangeRectDrawingMethod}
diff --git a/cvat-ui/src/containers/annotation-page/standard-workspace/controls-side-bar/setup-tag-popover.tsx b/cvat-ui/src/containers/annotation-page/standard-workspace/controls-side-bar/setup-tag-popover.tsx
index 392dfa11785a..1c6236956197 100644
--- a/cvat-ui/src/containers/annotation-page/standard-workspace/controls-side-bar/setup-tag-popover.tsx
+++ b/cvat-ui/src/containers/annotation-page/standard-workspace/controls-side-bar/setup-tag-popover.tsx
@@ -154,7 +154,7 @@ class DrawShapePopoverContainer extends React.PureComponent<Props, State> {
             <SetupTagPopoverComponent
                 labels={this.satisfiedLabels}
                 selectedLabelID={selectedLabelID}
-                repeatShapeShortcut={normalizedKeyMap.SWITCH_DRAW_MODE}
+                repeatShapeShortcut={normalizedKeyMap.SWITCH_DRAW_MODE_STANDARD_CONTROLS}
                 onChangeLabel={this.onChangeLabel}
                 onSetup={this.onSetup}
             />
diff --git a/cvat-ui/src/containers/annotation-page/top-bar/top-bar.tsx b/cvat-ui/src/containers/annotation-page/top-bar/top-bar.tsx
index 4d81fa0822c2..e9d2785faf10 100644
--- a/cvat-ui/src/containers/annotation-page/top-bar/top-bar.tsx
+++ b/cvat-ui/src/containers/annotation-page/top-bar/top-bar.tsx
@@ -697,7 +697,7 @@ class AnnotationTopBarContainer extends React.PureComponent<Props> {
                 redoAction={redoAction}
                 undoShortcut={normalizedKeyMap.UNDO}
                 redoShortcut={normalizedKeyMap.REDO}
-                drawShortcut={normalizedKeyMap.SWITCH_DRAW_MODE}
+                drawShortcut={normalizedKeyMap.SWITCH_DRAW_MODE_STANDARD_CONTROLS}
                 switchToolsBlockerShortcut={normalizedKeyMap.SWITCH_TOOLS_BLOCKER_STATE}
                 playPauseShortcut={normalizedKeyMap.PLAY_PAUSE}
                 deleteFrameShortcut={normalizedKeyMap.DELETE_FRAME}
diff --git a/cvat-ui/src/cvat-core-wrapper.ts b/cvat-ui/src/cvat-core-wrapper.ts
index dac86011953a..275cedcc8ab9 100644
--- a/cvat-ui/src/cvat-core-wrapper.ts
+++ b/cvat-ui/src/cvat-core-wrapper.ts
@@ -35,7 +35,7 @@ import Comment from 'cvat-core/src/comment';
 import User from 'cvat-core/src/user';
 import Organization, { Membership, Invitation } from 'cvat-core/src/organization';
 import AnnotationGuide from 'cvat-core/src/guide';
-import ValidationLayout from 'cvat-core/src/validation-layout';
+import { JobValidationLayout, TaskValidationLayout } from 'cvat-core/src/validation-layout';
 import AnalyticsReport, { AnalyticsEntryViewType, AnalyticsEntry } from 'cvat-core/src/analytics-report';
 import { Dumper } from 'cvat-core/src/annotation-formats';
 import { Event } from 'cvat-core/src/event';
@@ -106,7 +106,8 @@ export {
     ActionParameterType,
     FrameSelectionType,
     Request,
-    ValidationLayout,
+    JobValidationLayout,
+    TaskValidationLayout,
 };
 
 export type {
diff --git a/cvat-ui/src/reducers/index.ts b/cvat-ui/src/reducers/index.ts
index 999d7d6c5419..6c297cd5f4ac 100644
--- a/cvat-ui/src/reducers/index.ts
+++ b/cvat-ui/src/reducers/index.ts
@@ -8,7 +8,7 @@ import { Canvas, RectDrawingMethod, CuboidDrawingMethod } from 'cvat-canvas-wrap
 import {
     Webhook, MLModel, Organization, Job, Task, Project, Label, User,
     QualityConflict, FramesMetaData, RQStatus, Event, Invitation, SerializedAPISchema,
-    Request, TargetMetric, ValidationLayout,
+    Request, JobValidationLayout, QualitySettings, TaskValidationLayout,
 } from 'cvat-core-wrapper';
 import { IntelligentScissors } from 'utils/opencv-wrapper/intelligent-scissors';
 import { KeyMap, KeyMapItem } from 'utils/mousetrap-react';
@@ -269,14 +269,16 @@ export interface PluginsState {
         qualityControlPage: {
             overviewTab: ((props: {
                 task: Task;
-                targetMetric: TargetMetric;
+                qualitySettings: QualitySettings;
             }) => JSX.Element)[];
 
             allocationTable: ((
                 props: {
                     task: Task;
-                    gtJob: Job;
+                    gtJobId: number;
                     gtJobMeta: FramesMetaData;
+                    qualitySettings: QualitySettings;
+                    validationLayout: TaskValidationLayout;
                     onDeleteFrames: (frames: number[]) => void;
                     onRestoreFrames: (frames: number[]) => void;
                 }) => JSX.Element)[];
@@ -730,7 +732,7 @@ export interface AnnotationState {
             defaultPointsCount: number | null;
         };
         groundTruthInfo: {
-            validationLayout: ValidationLayout | null;
+            validationLayout: JobValidationLayout | null;
             groundTruthJobFramesMeta: FramesMetaData | null;
             groundTruthInstance: Job | null;
         },
diff --git a/cvat-ui/src/utils/environment.ts b/cvat-ui/src/utils/environment.ts
index 15a6e4178b62..9f73417199c7 100644
--- a/cvat-ui/src/utils/environment.ts
+++ b/cvat-ui/src/utils/environment.ts
@@ -25,7 +25,7 @@ export function customWaViewHit(pageName?: string, queryString?: string, hashInf
             waHitFunction(pageName, queryString, hashInfo);
         } catch (error: any) {
             // eslint-disable-next-line
-            console.error(`Web analitycs hit function has failed. ${error.toString()}`);
+            console.error(`Web analytics hit function has failed. ${error.toString()}`);
         }
     }
 }
diff --git a/cvat-ui/src/utils/opencv-wrapper/opencv-wrapper.ts b/cvat-ui/src/utils/opencv-wrapper/opencv-wrapper.ts
index b2d045c32483..cc74252a824f 100644
--- a/cvat-ui/src/utils/opencv-wrapper/opencv-wrapper.ts
+++ b/cvat-ui/src/utils/opencv-wrapper/opencv-wrapper.ts
@@ -201,7 +201,7 @@ export class OpenCVWrapper {
                     cv.findContours(expanded, contours, hierarchy, cv.RETR_EXTERNAL, cv.CHAIN_APPROX_NONE);
                     for (let i = 0; i < contours.size(); i++) {
                         const contour = contours.get(i);
-                        // substract offset we created when copied source image
+                        // subtract offset we created when copied source image
                         jsContours.push(Array.from(contour.data32S as number[]).map((el) => el - 1));
                         contour.delete();
                     }
diff --git a/cvat/__init__.py b/cvat/__init__.py
index 0acd9281962f..33ddf9c436cf 100644
--- a/cvat/__init__.py
+++ b/cvat/__init__.py
@@ -4,6 +4,6 @@
 
 from cvat.utils.version import get_version
 
-VERSION = (2, 21, 1, 'final', 0)
+VERSION = (2, 21, 2, 'final', 0)
 
 __version__ = get_version(VERSION)
diff --git a/cvat/apps/dataset_manager/annotation.py b/cvat/apps/dataset_manager/annotation.py
index 32fbfda45c49..3971d5536919 100644
--- a/cvat/apps/dataset_manager/annotation.py
+++ b/cvat/apps/dataset_manager/annotation.py
@@ -131,7 +131,8 @@ def filter_track_shapes(shapes):
                 if last_key >= stop and scoped_shapes[-1]['points'] != segment_shapes[-1]['points']:
                     segment_shapes.append(scoped_shapes[-1])
                 elif scoped_shapes[-1]['keyframe'] and \
-                        scoped_shapes[-1]['outside']:
+                        scoped_shapes[-1]['outside'] and \
+                        (len(segment_shapes) == 0 or scoped_shapes[-1]['frame'] > segment_shapes[-1]['frame']):
                     segment_shapes.append(scoped_shapes[-1])
                 elif stop + 1 < len(interpolated_shapes) and \
                         interpolated_shapes[stop + 1]['outside']:
@@ -950,6 +951,11 @@ def propagate(shape, end_frame, *, included_frames=None):
                 break # The track finishes here
 
             if prev_shape:
+                if (
+                    curr_frame == prev_shape["frame"]
+                    and dict(shape, id=None, keyframe=None) == dict(prev_shape, id=None, keyframe=None)
+                ):
+                    continue
                 assert curr_frame > prev_shape["frame"], f"{curr_frame} > {prev_shape['frame']}. Track id: {track['id']}" # Catch invalid tracks
 
                 # Propagate attributes
diff --git a/cvat/apps/dataset_manager/tests/test_annotation.py b/cvat/apps/dataset_manager/tests/test_annotation.py
index 6687f692a0d3..ca845b156271 100644
--- a/cvat/apps/dataset_manager/tests/test_annotation.py
+++ b/cvat/apps/dataset_manager/tests/test_annotation.py
@@ -2,14 +2,15 @@
 #
 # SPDX-License-Identifier: MIT
 
-from cvat.apps.dataset_manager.annotation import TrackManager
-
 from unittest import TestCase
 
+from cvat.apps.dataset_manager.annotation import AnnotationIR, TrackManager
+from cvat.apps.engine.models import DimensionType
+
 
 class TrackManagerTest(TestCase):
     def _check_interpolation(self, track):
-        interpolated = TrackManager.get_interpolated_shapes(track, 0, 7, '2d')
+        interpolated = TrackManager.get_interpolated_shapes(track, 0, 7, "2d")
 
         self.assertEqual(
             [
@@ -24,7 +25,7 @@ def _check_interpolation(self, track):
             [
                 {k: v for k, v in shape.items() if k in ["frame", "keyframe", "outside"]}
                 for shape in interpolated
-            ]
+            ],
         )
 
     def test_point_interpolation(self):
@@ -41,7 +42,7 @@ def test_point_interpolation(self):
                     "type": "points",
                     "occluded": False,
                     "outside": False,
-                    "attributes": []
+                    "attributes": [],
                 },
                 {
                     "frame": 2,
@@ -49,7 +50,7 @@ def test_point_interpolation(self):
                     "points": [3.0, 4.0, 5.0, 6.0],
                     "type": "points",
                     "occluded": False,
-                    "outside": True
+                    "outside": True,
                 },
                 {
                     "frame": 4,
@@ -57,9 +58,9 @@ def test_point_interpolation(self):
                     "points": [3.0, 4.0, 5.0, 6.0],
                     "type": "points",
                     "occluded": False,
-                    "outside": False
+                    "outside": False,
                 },
-            ]
+            ],
         }
 
         self._check_interpolation(track)
@@ -78,7 +79,7 @@ def test_polygon_interpolation(self):
                     "type": "polygon",
                     "occluded": False,
                     "outside": False,
-                    "attributes": []
+                    "attributes": [],
                 },
                 {
                     "frame": 2,
@@ -86,7 +87,7 @@ def test_polygon_interpolation(self):
                     "points": [3.0, 4.0, 5.0, 6.0, 7.0, 6.0, 4.0, 5.0],
                     "type": "polygon",
                     "occluded": False,
-                    "outside": True
+                    "outside": True,
                 },
                 {
                     "frame": 4,
@@ -94,9 +95,9 @@ def test_polygon_interpolation(self):
                     "points": [3.0, 4.0, 5.0, 6.0, 7.0, 6.0, 4.0, 5.0],
                     "type": "polygon",
                     "occluded": False,
-                    "outside": False
+                    "outside": False,
                 },
-            ]
+            ],
         }
 
         self._check_interpolation(track)
@@ -116,7 +117,7 @@ def test_bbox_interpolation(self):
                     "type": "rectangle",
                     "occluded": False,
                     "outside": False,
-                    "attributes": []
+                    "attributes": [],
                 },
                 {
                     "frame": 2,
@@ -125,7 +126,7 @@ def test_bbox_interpolation(self):
                     "rotation": 0,
                     "type": "rectangle",
                     "occluded": False,
-                    "outside": True
+                    "outside": True,
                 },
                 {
                     "frame": 4,
@@ -134,9 +135,9 @@ def test_bbox_interpolation(self):
                     "rotation": 0,
                     "type": "rectangle",
                     "occluded": False,
-                    "outside": False
+                    "outside": False,
                 },
-            ]
+            ],
         }
 
         self._check_interpolation(track)
@@ -156,7 +157,7 @@ def test_line_interpolation(self):
                     "type": "polyline",
                     "occluded": False,
                     "outside": False,
-                    "attributes": []
+                    "attributes": [],
                 },
                 {
                     "frame": 2,
@@ -165,7 +166,7 @@ def test_line_interpolation(self):
                     "rotation": 0,
                     "type": "polyline",
                     "occluded": False,
-                    "outside": True
+                    "outside": True,
                 },
                 {
                     "frame": 4,
@@ -174,9 +175,9 @@ def test_line_interpolation(self):
                     "rotation": 0,
                     "type": "polyline",
                     "occluded": False,
-                    "outside": False
+                    "outside": False,
                 },
-            ]
+            ],
         }
 
         self._check_interpolation(track)
@@ -196,7 +197,7 @@ def test_outside_bbox_interpolation(self):
                     "type": "rectangle",
                     "occluded": False,
                     "outside": False,
-                    "attributes": []
+                    "attributes": [],
                 },
                 {
                     "frame": 2,
@@ -214,9 +215,9 @@ def test_outside_bbox_interpolation(self):
                     "type": "rectangle",
                     "occluded": False,
                     "outside": True,
-                    "attributes": []
-                }
-            ]
+                    "attributes": [],
+                },
+            ],
         }
 
         expected_shapes = [
@@ -228,7 +229,7 @@ def test_outside_bbox_interpolation(self):
                 "occluded": False,
                 "outside": False,
                 "attributes": [],
-                "keyframe": True
+                "keyframe": True,
             },
             {
                 "frame": 1,
@@ -238,7 +239,7 @@ def test_outside_bbox_interpolation(self):
                 "occluded": False,
                 "outside": False,
                 "attributes": [],
-                "keyframe": False
+                "keyframe": False,
             },
             {
                 "frame": 2,
@@ -248,7 +249,7 @@ def test_outside_bbox_interpolation(self):
                 "occluded": False,
                 "outside": True,
                 "attributes": [],
-                "keyframe": True
+                "keyframe": True,
             },
             {
                 "frame": 4,
@@ -258,11 +259,11 @@ def test_outside_bbox_interpolation(self):
                 "occluded": False,
                 "outside": True,
                 "attributes": [],
-                "keyframe": True
-            }
+                "keyframe": True,
+            },
         ]
 
-        interpolated_shapes = TrackManager.get_interpolated_shapes(track, 0, 5, '2d')
+        interpolated_shapes = TrackManager.get_interpolated_shapes(track, 0, 5, "2d")
         self.assertEqual(expected_shapes, interpolated_shapes)
 
     def test_outside_polygon_interpolation(self):
@@ -279,7 +280,7 @@ def test_outside_polygon_interpolation(self):
                     "type": "polygon",
                     "occluded": False,
                     "outside": False,
-                    "attributes": []
+                    "attributes": [],
                 },
                 {
                     "frame": 2,
@@ -287,9 +288,9 @@ def test_outside_polygon_interpolation(self):
                     "type": "polygon",
                     "occluded": False,
                     "outside": True,
-                    "attributes": []
-                }
-            ]
+                    "attributes": [],
+                },
+            ],
         }
 
         expected_shapes = [
@@ -300,7 +301,7 @@ def test_outside_polygon_interpolation(self):
                 "occluded": False,
                 "outside": False,
                 "attributes": [],
-                "keyframe": True
+                "keyframe": True,
             },
             {
                 "frame": 1,
@@ -309,7 +310,7 @@ def test_outside_polygon_interpolation(self):
                 "occluded": False,
                 "outside": False,
                 "attributes": [],
-                "keyframe": False
+                "keyframe": False,
             },
             {
                 "frame": 2,
@@ -318,9 +319,98 @@ def test_outside_polygon_interpolation(self):
                 "occluded": False,
                 "outside": True,
                 "attributes": [],
-                "keyframe": True
-            }
+                "keyframe": True,
+            },
+        ]
+
+        interpolated_shapes = TrackManager.get_interpolated_shapes(track, 0, 3, "2d")
+        self.assertEqual(expected_shapes, interpolated_shapes)
+
+    def test_duplicated_shape_interpolation(self):
+        # there should not be any new tracks with duplicated shapes,
+        # but it is possible that the database still contains some
+        expected_shapes = [
+            {
+                "type": "rectangle",
+                "occluded": False,
+                "outside": False,
+                "points": [100, 100, 200, 200],
+                "frame": 0,
+                "attributes": [],
+                "rotation": 0,
+            },
+            {
+                "type": "rectangle",
+                "occluded": False,
+                "outside": True,
+                "points": [100, 100, 200, 200],
+                "frame": 1,
+                "attributes": [],
+                "rotation": 0,
+            },
         ]
+        track = {
+            "id": 666,
+            "frame": 0,
+            "group": None,
+            "source": "manual",
+            "attributes": [],
+            "elements": [],
+            "label": "cat",
+            "shapes": expected_shapes + [expected_shapes[-1]],
+        }
 
-        interpolated_shapes = TrackManager.get_interpolated_shapes(track, 0, 3, '2d')
+        interpolated_shapes = TrackManager.get_interpolated_shapes(track, 0, 2, "2d")
         self.assertEqual(expected_shapes, interpolated_shapes)
+
+
+class AnnotationIRTest(TestCase):
+    def test_slice_track_does_not_duplicate_outside_frame_on_the_end(self):
+        track_shapes = [
+            {
+                "type": "rectangle",
+                "occluded": False,
+                "outside": False,
+                "points": [100, 100, 200, 200],
+                "frame": 0,
+                "attributes": [],
+                "rotation": 0,
+            },
+            {
+                "type": "rectangle",
+                "occluded": False,
+                "outside": True,
+                "points": [100, 100, 200, 200],
+                "frame": 1,
+                "attributes": [],
+                "rotation": 0,
+            },
+            {
+                "type": "rectangle",
+                "occluded": False,
+                "outside": False,
+                "points": [111, 111, 222, 222],
+                "frame": 10,
+                "attributes": [],
+                "rotation": 0,
+            },
+        ]
+        data = {
+            "tags": [],
+            "shapes": [],
+            "tracks": [
+                {
+                    "id": 666,
+                    "frame": 0,
+                    "group": None,
+                    "source": "manual",
+                    "attributes": [],
+                    "elements": [],
+                    "label": "cat",
+                    "shapes": track_shapes,
+                }
+            ],
+        }
+        annotation = AnnotationIR(dimension=DimensionType.DIM_2D, data=data)
+        sliced_annotation = annotation.slice(0, 1)
+        self.assertEqual(sliced_annotation.data["tracks"][0]["shapes"], track_shapes[0:2])
diff --git a/cvat/apps/dataset_manager/tests/test_rest_api_formats.py b/cvat/apps/dataset_manager/tests/test_rest_api_formats.py
index d60660a55c79..3350a4180efe 100644
--- a/cvat/apps/dataset_manager/tests/test_rest_api_formats.py
+++ b/cvat/apps/dataset_manager/tests/test_rest_api_formats.py
@@ -27,7 +27,6 @@
 from attr import define, field
 from datumaro.components.dataset import Dataset
 from datumaro.components.operations import ExactComparator
-from datumaro.util.test_utils import TestDir
 from django.contrib.auth.models import Group, User
 from PIL import Image
 from rest_framework import status
@@ -35,6 +34,7 @@
 import cvat.apps.dataset_manager as dm
 from cvat.apps.dataset_manager.bindings import CvatTaskOrJobDataExtractor, TaskData
 from cvat.apps.dataset_manager.task import TaskAnnotation
+from cvat.apps.dataset_manager.tests.utils import TestDir
 from cvat.apps.dataset_manager.util import get_export_cache_lock
 from cvat.apps.dataset_manager.views import clear_export_cache, export, parse_export_file_path
 from cvat.apps.engine.models import Task
diff --git a/cvat/apps/dataset_manager/tests/utils.py b/cvat/apps/dataset_manager/tests/utils.py
new file mode 100644
index 000000000000..9a134b887bf7
--- /dev/null
+++ b/cvat/apps/dataset_manager/tests/utils.py
@@ -0,0 +1,78 @@
+# Copyright (C) 2024 CVAT.ai Corporation
+#
+# SPDX-License-Identifier: MIT
+
+import os
+import tempfile
+import unittest
+from types import TracebackType
+from typing import Optional, Type
+
+from datumaro.util.os_util import rmfile, rmtree
+
+from cvat.apps.dataset_manager.util import current_function_name
+
+
+class FileRemover:
+    def __init__(self, path: str, is_dir: bool = False):
+        self.path = path
+        self.is_dir = is_dir
+
+    def __enter__(self) -> str:
+        return self.path
+
+    def __exit__(
+        self,
+        exc_type: Optional[Type[BaseException]],
+        exc_value: Optional[BaseException],
+        traceback: Optional[TracebackType],
+    ) -> None:
+        if self.is_dir:
+            try:
+                rmtree(self.path)
+            except unittest.SkipTest:
+                # Suppress skip test errors from git.util.rmtree
+                if not exc_type:
+                    raise
+        else:
+            rmfile(self.path)
+
+
+class TestDir(FileRemover):
+    """
+    Creates a temporary directory for a test. Uses the name of
+    the test function to name the directory.
+
+    Usage:
+
+    .. code-block::
+
+        with TestDir() as test_dir:
+            ...
+    """
+
+    def __init__(self, path: Optional[str] = None, frame_id: int = 2):
+        if not path:
+            prefix = f"temp_{current_function_name(frame_id)}-"
+        else:
+            prefix = None
+        self._prefix = prefix
+
+        super().__init__(path, is_dir=True)
+
+    def __enter__(self) -> str:
+        """
+        Creates a test directory.
+
+        Returns: path to the directory
+        """
+
+        path = self.path
+
+        if path is None:
+            path = tempfile.mkdtemp(dir=os.getcwd(), prefix=self._prefix)
+            self.path = path
+        else:
+            os.makedirs(path, exist_ok=False)
+
+        return path
diff --git a/cvat/apps/dataset_manager/views.py b/cvat/apps/dataset_manager/views.py
index 35e40c8c03a3..1dbff55ed08d 100644
--- a/cvat/apps/dataset_manager/views.py
+++ b/cvat/apps/dataset_manager/views.py
@@ -85,7 +85,6 @@ def _patched_retry(*_1, **_2):
                 **current_rq_job.kwargs,
                 job_id=current_rq_job.id,
                 meta=current_rq_job.meta,
-                depends_on=current_rq_job.dependency_ids,
                 job_ttl=current_rq_job.ttl,
                 job_result_ttl=current_rq_job.result_ttl,
                 job_description=current_rq_job.description,
diff --git a/cvat/apps/engine/cache.py b/cvat/apps/engine/cache.py
index b2a3437ddf3f..990b2b31009a 100644
--- a/cvat/apps/engine/cache.py
+++ b/cvat/apps/engine/cache.py
@@ -54,7 +54,7 @@
     ZipChunkWriter,
     ZipCompressedChunkWriter,
 )
-from cvat.apps.engine.utils import md5_hash, preload_images
+from cvat.apps.engine.utils import md5_hash, load_image
 from utils.dataset_manifest import ImageManifestManager
 
 slogger = ServerLogManager(__name__)
@@ -321,15 +321,13 @@ def _read_raw_images(
                 cloud_storage_instance.bulk_download_to_dir(
                     files=files_to_download, upload_dir=tmp_dir
                 )
-                media = preload_images(media)
 
-                for checksum, (_, fs_filename, _) in zip(checksums, media):
-                    if checksum and not md5_hash(fs_filename) == checksum:
+                for checksum, media_item in zip(checksums, media):
+                    if checksum and not md5_hash(media_item[1]) == checksum:
                         slogger.cloud_storage[db_cloud_storage.id].warning(
                             "Hash sums of files {} do not match".format(file_name)
                         )
-
-                yield from media
+                    yield load_image(media_item)
         else:
             requested_frame_iter = iter(frame_ids)
             next_requested_frame_id = next(requested_frame_iter, None)
@@ -359,7 +357,7 @@ def _read_raw_images(
             assert next_requested_frame_id is None
 
             if db_task.dimension == models.DimensionType.DIM_2D:
-                media = preload_images(media)
+                media = map(load_image, media)
 
             yield from media
 
diff --git a/cvat/apps/engine/management/__init__.py b/cvat/apps/engine/management/__init__.py
new file mode 100644
index 000000000000..e69de29bb2d1
diff --git a/cvat/apps/engine/management/commands/__init__.py b/cvat/apps/engine/management/commands/__init__.py
new file mode 100644
index 000000000000..e69de29bb2d1
diff --git a/cvat/apps/engine/management/commands/syncperiodicjobs.py b/cvat/apps/engine/management/commands/syncperiodicjobs.py
new file mode 100644
index 000000000000..097f468b337f
--- /dev/null
+++ b/cvat/apps/engine/management/commands/syncperiodicjobs.py
@@ -0,0 +1,76 @@
+# Copyright (C) 2024 CVAT.ai Corporation
+#
+# SPDX-License-Identifier: MIT
+
+from argparse import ArgumentParser
+from collections import defaultdict
+
+from django.core.management.base import BaseCommand
+from django.conf import settings
+
+import django_rq
+
+class Command(BaseCommand):
+    help = "Synchronize periodic jobs in Redis with the project configuration"
+
+    _PERIODIC_JOBS_KEY_PREFIX = 'cvat:utils:periodic-jobs:'
+
+    def add_arguments(self, parser: ArgumentParser) -> None:
+        parser.add_argument('--clear', action='store_true', help='Remove jobs from Redis instead of updating them')
+
+    def handle(self, *args, **options):
+        configured_jobs = defaultdict(dict)
+
+        if not options["clear"]:
+            for job in settings.PERIODIC_RQ_JOBS:
+                configured_jobs[job['queue']][job['id']] = job
+
+        for queue_name in settings.RQ_QUEUES:
+            self.stdout.write(f"Processing queue {queue_name}...")
+
+            periodic_jobs_key = self._PERIODIC_JOBS_KEY_PREFIX + queue_name
+
+            queue = django_rq.get_queue(queue_name)
+            scheduler = django_rq.get_scheduler(queue_name, queue=queue)
+
+            stored_jobs_for_queue = {
+                member.decode('UTF-8') for member in queue.connection.smembers(periodic_jobs_key)
+            }
+            configured_jobs_for_queue = configured_jobs[queue_name]
+
+            # Delete jobs that are no longer in the configuration
+            jobs_to_delete = stored_jobs_for_queue.difference(configured_jobs_for_queue.keys())
+
+            for job_id in jobs_to_delete:
+                self.stdout.write(f"Deleting job {job_id}...")
+                scheduler.cancel(job_id)
+                if job := queue.fetch_job(job_id):
+                    job.delete()
+
+                queue.connection.srem(periodic_jobs_key, job_id)
+
+            # Add/update jobs from the configuration
+            for job_definition in configured_jobs_for_queue.values():
+                job_id = job_definition['id']
+
+                if job := queue.fetch_job(job_id):
+                    if (
+                        job.func_name == job_definition['func']
+                        and job.meta.get('cron_string') == job_definition['cron_string']
+                    ):
+                        self.stdout.write(f"Job {job_id} is unchanged")
+                        queue.connection.sadd(periodic_jobs_key, job_id)
+                        continue
+
+                    self.stdout.write(f"Recreating job {job_id}...")
+                    job.delete()
+                else:
+                    self.stdout.write(f"Creating job {job_id}...")
+
+                scheduler.cron(
+                    cron_string=job_definition['cron_string'],
+                    func=job_definition['func'],
+                    id=job_id,
+                )
+
+                queue.connection.sadd(periodic_jobs_key, job_id)
diff --git a/cvat/apps/engine/migrations/0086_profile_has_analytics_access.py b/cvat/apps/engine/migrations/0086_profile_has_analytics_access.py
new file mode 100644
index 000000000000..efd66a0fe230
--- /dev/null
+++ b/cvat/apps/engine/migrations/0086_profile_has_analytics_access.py
@@ -0,0 +1,35 @@
+# Generated by Django 4.2.16 on 2024-10-22 08:41
+
+from django.conf import settings
+from django.db import migrations, models
+
+
+def set_has_analytics_access(apps, schema_editor):
+    User = apps.get_model('auth', 'User')
+    for user in User.objects.all():
+        is_admin = user.groups.filter(name=settings.IAM_ADMIN_ROLE).exists()
+        user.profile.has_analytics_access = user.is_superuser or is_admin
+        user.profile.save()
+
+
+class Migration(migrations.Migration):
+
+    dependencies = [
+        ("engine", "0085_segment_chunks_updated_date"),
+    ]
+
+    operations = [
+        migrations.AddField(
+            model_name="profile",
+            name="has_analytics_access",
+            field=models.BooleanField(
+                default=False,
+                help_text="Designates whether the user can access analytics.",
+                verbose_name="has access to analytics",
+            ),
+        ),
+        migrations.RunPython(
+            set_has_analytics_access,
+            reverse_code=migrations.RunPython.noop,
+        ),
+    ]
diff --git a/cvat/apps/engine/models.py b/cvat/apps/engine/models.py
index 647a0ada552a..6212ce3a8bc0 100644
--- a/cvat/apps/engine/models.py
+++ b/cvat/apps/engine/models.py
@@ -16,19 +16,21 @@
 
 from django.conf import settings
 from django.contrib.auth.models import User
-from django.core.files.storage import FileSystemStorage
 from django.core.exceptions import ValidationError
+from django.core.files.storage import FileSystemStorage
 from django.db import IntegrityError, models, transaction
-from django.db.models.fields import FloatField
 from django.db.models import Q, TextChoices
+from django.db.models.fields import FloatField
+from django.utils.translation import gettext_lazy as _
 from drf_spectacular.types import OpenApiTypes
 from drf_spectacular.utils import extend_schema_field
 
 from cvat.apps.engine.lazy_list import LazyList
 from cvat.apps.engine.model_utils import MaybeUndefined
-from cvat.apps.engine.utils import parse_specific_attributes, chunked_list
+from cvat.apps.engine.utils import chunked_list, parse_specific_attributes
 from cvat.apps.events.utils import cache_deleted
 
+
 class SafeCharField(models.CharField):
     def get_prep_value(self, value):
         value = super().get_prep_value(value)
@@ -1091,9 +1093,16 @@ class TrackedShapeAttributeVal(AttributeVal):
     shape = models.ForeignKey(TrackedShape, on_delete=models.DO_NOTHING,
         related_name='attributes', related_query_name='attribute')
 
+
 class Profile(models.Model):
     user = models.OneToOneField(User, on_delete=models.CASCADE)
     rating = models.FloatField(default=0.0)
+    has_analytics_access = models.BooleanField(
+        _("has access to analytics"),
+        default=False,
+        help_text=_("Designates whether the user can access analytics."),
+    )
+
 
 class Issue(TimestampedModel):
     frame = models.PositiveIntegerField()
diff --git a/cvat/apps/engine/serializers.py b/cvat/apps/engine/serializers.py
index 6b858ceb25e4..5b3845f8260e 100644
--- a/cvat/apps/engine/serializers.py
+++ b/cvat/apps/engine/serializers.py
@@ -223,21 +223,28 @@ class Meta:
         model = User
         fields = ('url', 'id', 'username', 'first_name', 'last_name')
 
+
 class UserSerializer(serializers.ModelSerializer):
     groups = serializers.SlugRelatedField(many=True,
         slug_field='name', queryset=Group.objects.all())
+    has_analytics_access = serializers.BooleanField(
+        source='profile.has_analytics_access',
+        required=False,
+        read_only=True,
+    )
 
     class Meta:
         model = User
         fields = ('url', 'id', 'username', 'first_name', 'last_name', 'email',
             'groups', 'is_staff', 'is_superuser', 'is_active', 'last_login',
-            'date_joined')
-        read_only_fields = ('last_login', 'date_joined')
+            'date_joined', 'has_analytics_access')
+        read_only_fields = ('last_login', 'date_joined', 'has_analytics_access')
         write_only_fields = ('password', )
         extra_kwargs = {
             'last_login': { 'allow_null': True }
         }
 
+
 class DelimitedStringListField(serializers.ListField):
     def to_representation(self, value):
         return super().to_representation(value.split('\n'))
@@ -245,6 +252,7 @@ def to_representation(self, value):
     def to_internal_value(self, data):
         return '\n'.join(super().to_internal_value(data))
 
+
 class AttributeSerializer(serializers.ModelSerializer):
     id = serializers.IntegerField(required=False)
     values = DelimitedStringListField(allow_empty=True,
@@ -255,6 +263,7 @@ class Meta:
         model = models.AttributeSpec
         fields = ('id', 'name', 'mutable', 'input_type', 'default_value', 'values')
 
+
 class SublabelSerializer(serializers.ModelSerializer):
     id = serializers.IntegerField(required=False)
     attributes = AttributeSerializer(many=True, source='attributespec_set', default=[],
@@ -273,6 +282,7 @@ class Meta:
         fields = ('id', 'name', 'color', 'attributes', 'type', 'has_parent', )
         read_only_fields = ('parent',)
 
+
 class SkeletonSerializer(serializers.ModelSerializer):
     id = serializers.IntegerField(required=False)
     svg = serializers.CharField(allow_blank=True, required=False)
@@ -281,6 +291,7 @@ class Meta:
         model = models.Skeleton
         fields = ('id', 'svg',)
 
+
 class LabelSerializer(SublabelSerializer):
     deleted = serializers.BooleanField(required=False, write_only=True,
         help_text='Delete the label. Only applicable in the PATCH methods of a project or a task.')
diff --git a/cvat/apps/engine/signals.py b/cvat/apps/engine/signals.py
index 297baec9488f..3a964d90c2cc 100644
--- a/cvat/apps/engine/signals.py
+++ b/cvat/apps/engine/signals.py
@@ -1,13 +1,14 @@
 # Copyright (C) 2019-2022 Intel Corporation
-# Copyright (C) 2023 CVAT.ai Corporation
+# Copyright (C) 2023-2024 CVAT.ai Corporation
 #
 # SPDX-License-Identifier: MIT
 import functools
 import shutil
 
+from django.conf import settings
 from django.contrib.auth.models import User
 from django.db import transaction
-from django.db.models.signals import post_delete, post_save
+from django.db.models.signals import m2m_changed, post_delete, post_save
 from django.dispatch import receiver
 
 from .models import CloudStorage, Data, Job, Profile, Project, StatusChoice, Task, Asset
@@ -36,13 +37,28 @@ def __save_job_handler(instance, created, **kwargs):
         db_task.status = status
         db_task.save(update_fields=["status", "updated_date"])
 
-@receiver(post_save, sender=User,
-    dispatch_uid=__name__ + ".save_user_handler")
-def __save_user_handler(instance, **kwargs):
+
+@receiver(post_save, sender=User, dispatch_uid=__name__ + ".save_user_handler")
+def __save_user_handler(instance: User, **kwargs):
+    should_access_analytics = instance.is_superuser or instance.groups.filter(name=settings.IAM_ADMIN_ROLE).exists()
     if not hasattr(instance, 'profile'):
         profile = Profile()
         profile.user = instance
+        profile.has_analytics_access = should_access_analytics
         profile.save()
+    elif should_access_analytics and not instance.profile.has_analytics_access:
+        instance.profile.has_analytics_access = True
+        instance.profile.save()
+
+
+@receiver(m2m_changed, sender=User.groups.through, dispatch_uid=__name__ + ".m2m_user_groups_change_handler")
+def __m2m_user_groups_change_handler(sender, instance: User, action: str, **kwargs):
+    if action == 'post_add':
+        is_admin = instance.groups.filter(name=settings.IAM_ADMIN_ROLE).exists()
+        if is_admin and hasattr(instance, 'profile') and not instance.profile.has_analytics_access:
+            instance.profile.has_analytics_access = True
+            instance.profile.save()
+
 
 @receiver(post_delete, sender=Project,
     dispatch_uid=__name__ + ".delete_project_handler")
diff --git a/cvat/apps/engine/task.py b/cvat/apps/engine/task.py
index 446cdabb082c..542f1521b053 100644
--- a/cvat/apps/engine/task.py
+++ b/cvat/apps/engine/task.py
@@ -38,7 +38,7 @@
 from cvat.apps.engine.models import RequestAction, RequestTarget
 from cvat.apps.engine.utils import (
     av_scan_paths, format_list,get_rq_job_meta,
-    define_dependent_job, get_rq_lock_by_user, preload_images
+    define_dependent_job, get_rq_lock_by_user, load_image
 )
 from cvat.apps.engine.rq_job_handler import RQId
 from cvat.utils.http import make_requests_session, PROXIES_FOR_UNTRUSTED_URLS
@@ -1537,7 +1537,7 @@ def save_chunks(
                 MEDIA_TYPES['archive']['extractor'],
             ))
         ):
-            chunk_data = preload_images(chunk_data)
+            chunk_data = list(map(load_image, chunk_data))
 
         # TODO: extract into a class
 
diff --git a/cvat/apps/engine/tests/test_rest_api.py b/cvat/apps/engine/tests/test_rest_api.py
index 8331856a5fad..07e01461ab73 100644
--- a/cvat/apps/engine/tests/test_rest_api.py
+++ b/cvat/apps/engine/tests/test_rest_api.py
@@ -37,7 +37,8 @@
 from rest_framework import status
 from rest_framework.test import APIClient
 
-from datumaro.util.test_utils import current_function_name, TestDir
+from cvat.apps.dataset_manager.tests.utils import TestDir
+from cvat.apps.dataset_manager.util import current_function_name
 from cvat.apps.engine.models import (AttributeSpec, AttributeType, Data, Job,
     Project, Segment, StageChoice, StatusChoice, Task, Label, StorageMethodChoice,
     StorageChoice, DimensionType, SortingMethod)
@@ -637,6 +638,8 @@ def _check_data(self, user, data, is_full):
         extra_check("is_active", data)
         extra_check("last_login", data)
         extra_check("date_joined", data)
+        extra_check("has_analytics_access", data)
+
 
 class UserListAPITestCase(UserAPITestCase):
     def _run_api_v2_users(self, user):
@@ -671,6 +674,7 @@ def test_api_v2_users_no_auth(self):
         response = self._run_api_v2_users(None)
         self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)
 
+
 class UserSelfAPITestCase(UserAPITestCase):
     def _run_api_v2_users_self(self, user):
         with ForceLogin(user, self.client):
@@ -698,6 +702,7 @@ def test_api_v2_users_self_no_auth(self):
         response = self._run_api_v2_users_self(None)
         self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)
 
+
 class UserGetAPITestCase(UserAPITestCase):
     def _run_api_v2_users_id(self, user, user_id):
         with ForceLogin(user, self.client):
@@ -740,6 +745,7 @@ def test_api_v2_users_id_no_auth(self):
         response = self._run_api_v2_users_id(None, self.user.id)
         self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)
 
+
 class UserPartialUpdateAPITestCase(UserAPITestCase):
     def _run_api_v2_users_id(self, user, user_id, data):
         with ForceLogin(user, self.client):
@@ -786,6 +792,7 @@ def test_api_v2_users_id_no_auth_partial(self):
         response = self._run_api_v2_users_id(None, self.user.id, data)
         self.assertEqual(response.status_code, status.HTTP_401_UNAUTHORIZED)
 
+
 class UserDeleteAPITestCase(UserAPITestCase):
     def _run_api_v2_users_id(self, user, user_id):
         with ForceLogin(user, self.client):
diff --git a/cvat/apps/engine/tests/test_rest_api_3D.py b/cvat/apps/engine/tests/test_rest_api_3D.py
index 9f000be5d218..67791c3c113c 100644
--- a/cvat/apps/engine/tests/test_rest_api_3D.py
+++ b/cvat/apps/engine/tests/test_rest_api_3D.py
@@ -20,9 +20,9 @@
 from django.contrib.auth.models import Group, User
 from rest_framework import status
 
+from cvat.apps.dataset_manager.tests.utils import TestDir
 from cvat.apps.engine.media_extractors import ValidateDimension
 from cvat.apps.dataset_manager.task import TaskAnnotation
-from datumaro.util.test_utils import TestDir
 
 from cvat.apps.engine.tests.utils import get_paginated_collection, ApiTestBase, ForceLogin
 
diff --git a/cvat/apps/engine/utils.py b/cvat/apps/engine/utils.py
index 256094837598..b45cb1baf020 100644
--- a/cvat/apps/engine/utils.py
+++ b/cvat/apps/engine/utils.py
@@ -11,7 +11,7 @@
 import sys
 import traceback
 from contextlib import suppress, nullcontext
-from typing import Any, Dict, Optional, Callable, Sequence, Union, Iterable
+from typing import Any, Dict, Optional, Callable, Sequence, Union
 import subprocess
 import os
 import urllib.parse
@@ -363,14 +363,11 @@ def sendfile(
 
     return _sendfile(request, filename, attachment, attachment_filename, mimetype, encoding)
 
-def preload_image(image: tuple[str, str, str])-> tuple[Image.Image, str, str]:
+def load_image(image: tuple[str, str, str])-> tuple[Image.Image, str, str]:
     pil_img = Image.open(image[0])
     pil_img.load()
     return pil_img, image[1], image[2]
 
-def preload_images(images: Iterable[tuple[str, str, str]]) -> list[tuple[Image.Image, str, str]]:
-    return list(map(preload_image, images))
-
 def build_backup_file_name(
     *,
     class_name: str,
diff --git a/cvat/apps/engine/views.py b/cvat/apps/engine/views.py
index 0dd84acab90f..ac046b1d0b26 100644
--- a/cvat/apps/engine/views.py
+++ b/cvat/apps/engine/views.py
@@ -226,7 +226,7 @@ def annotation_formats(request):
     def plugins(request):
         data = {
             'GIT_INTEGRATION': False, # kept for backwards compatibility
-            'ANALYTICS': to_bool(os.environ.get("CVAT_ANALYTICS", False)),
+            'ANALYTICS': settings.ANALYTICS_ENABLED,
             'MODELS': to_bool(os.environ.get("CVAT_SERVERLESS", False)),
             'PREDICT': False, # FIXME: it is unused anymore (for UI only)
         }
diff --git a/cvat/apps/iam/admin.py b/cvat/apps/iam/admin.py
index 1cfceb19d600..648e15dc2da4 100644
--- a/cvat/apps/iam/admin.py
+++ b/cvat/apps/iam/admin.py
@@ -1,4 +1,5 @@
 # Copyright (C) 2021-2022 Intel Corporation
+# Copyright (C) 2024 CVAT.ai Corporation
 #
 # SPDX-License-Identifier: MIT
 
@@ -7,7 +8,19 @@
 from django.contrib.auth.admin import GroupAdmin, UserAdmin
 from django.utils.translation import gettext_lazy as _
 
+from cvat.apps.engine.models import Profile
+
+
+class ProfileInline(admin.StackedInline):
+    model = Profile
+
+    fieldsets = (
+        (None, {'fields': ('has_analytics_access', )}),
+    )
+
+
 class CustomUserAdmin(UserAdmin):
+    inlines = (ProfileInline,)
     list_display = ("username", "email", "first_name", "last_name", "is_active", "is_staff")
     fieldsets = (
         (None, {'fields': ('username', 'password')}),
diff --git a/cvat/apps/iam/permissions.py b/cvat/apps/iam/permissions.py
index 366f85192a8d..55a91cc570b9 100644
--- a/cvat/apps/iam/permissions.py
+++ b/cvat/apps/iam/permissions.py
@@ -15,7 +15,7 @@
 from attrs import define, field
 from django.apps import AppConfig
 from django.conf import settings
-from django.db.models import Q, Model
+from django.db.models import Model, Q
 from rest_framework.exceptions import PermissionDenied
 from rest_framework.permissions import BasePermission
 
@@ -24,15 +24,18 @@
 
 from .utils import add_opa_rules_path
 
+
 class StrEnum(str, Enum):
     def __str__(self) -> str:
         return self.value
 
+
 @define
 class PermissionResult:
     allow: bool
     reasons: List[str] = field(factory=list)
 
+
 def get_organization(request, obj):
     # Try to get organization from an object otherwise, return the organization that is specified in query parameters
     if isinstance(obj, Organization):
@@ -56,6 +59,7 @@ def get_organization(request, obj):
 
     return request.iam_context['organization']
 
+
 def get_membership(request, organization):
     if organization is None:
         return None
@@ -66,6 +70,7 @@ def get_membership(request, organization):
         is_active=True
     ).first()
 
+
 def build_iam_context(request, organization: Optional[Organization], membership: Optional[Membership]):
     return {
         'user_id': request.user.id,
@@ -126,7 +131,7 @@ def __init__(self, **kwargs):
                 'auth': {
                     'user': {
                         'id': self.user_id,
-                        'privilege': self.group_name
+                        'privilege': self.group_name,
                     },
                     'organization': {
                         'id': self.org_id,
@@ -219,11 +224,14 @@ def get_per_field_update_scopes(cls, request, scopes_per_field):
 
         return scopes
 
+
 T = TypeVar('T', bound=Model)
 
+
 def is_public_obj(obj: T) -> bool:
     return getattr(obj, "is_public", False)
 
+
 class PolicyEnforcer(BasePermission):
     # pylint: disable=no-self-use
     def check_permission(self, request, view, obj) -> bool:
@@ -258,13 +266,15 @@ def is_metadata_request(request, view):
         return request.method == 'OPTIONS' \
             or (request.method == 'POST' and view.action == 'metadata' and len(request.data) == 0)
 
+
 class IsAuthenticatedOrReadPublicResource(BasePermission):
     def has_object_permission(self, request, view, obj) -> bool:
         return bool(
-            request.user and request.user.is_authenticated or
-            request.method == 'GET' and is_public_obj(obj)
+            (request.user and request.user.is_authenticated) or
+            (request.method == 'GET' and is_public_obj(obj))
         )
 
+
 def load_app_permissions(config: AppConfig) -> None:
     """
     Ensures that permissions and OPA rules from the given app are loaded.
diff --git a/cvat/apps/iam/utils.py b/cvat/apps/iam/utils.py
index 9cd122ab1ba3..a13de3367336 100644
--- a/cvat/apps/iam/utils.py
+++ b/cvat/apps/iam/utils.py
@@ -2,9 +2,13 @@
 from typing import Tuple
 import functools
 import hashlib
+import importlib
 import io
 import tarfile
 
+from django.conf import settings
+from django.contrib.sessions.backends.base import SessionBase
+
 _OPA_RULES_PATHS = {
     Path(__file__).parent / 'rules',
 }
@@ -43,3 +47,7 @@ def get_dummy_user(email):
         if email.verified:
             return None
     return user
+
+def clean_up_sessions() -> None:
+    SessionStore: type[SessionBase] = importlib.import_module(settings.SESSION_ENGINE).SessionStore
+    SessionStore.clear_expired()
diff --git a/cvat/apps/log_viewer/permissions.py b/cvat/apps/log_viewer/permissions.py
index 2d9500a29ea2..c50cf9302c61 100644
--- a/cvat/apps/log_viewer/permissions.py
+++ b/cvat/apps/log_viewer/permissions.py
@@ -5,9 +5,12 @@
 
 from django.conf import settings
 
-from cvat.apps.iam.permissions import OpenPolicyAgentPermission, StrEnum
+from cvat.apps.iam.permissions import OpenPolicyAgentPermission, StrEnum, get_iam_context
+
 
 class LogViewerPermission(OpenPolicyAgentPermission):
+    has_analytics_access: bool
+
     class Scopes(StrEnum):
         VIEW = 'view'
 
@@ -21,8 +24,21 @@ def create(cls, request, view, obj, iam_context):
 
         return permissions
 
-    def __init__(self, **kwargs):
+    @classmethod
+    def create_base_perm(cls, request, view, scope, iam_context, obj=None, **kwargs):
+        if not iam_context and request:
+            iam_context = get_iam_context(request, obj)
+        return cls(
+            scope=scope,
+            obj=obj,
+            has_analytics_access=request.user.profile.has_analytics_access,
+            **iam_context,
+            **kwargs
+        )
+
+    def __init__(self, has_analytics_access=False, **kwargs):
         super().__init__(**kwargs)
+        self.payload['input']['auth']['user']['has_analytics_access'] = has_analytics_access
         self.url = settings.IAM_OPA_DATA_URL + '/analytics/allow'
 
     @staticmethod
diff --git a/cvat/apps/log_viewer/rules/analytics.rego b/cvat/apps/log_viewer/rules/analytics.rego
index 970a6a3e97d1..b43a9c1b1115 100644
--- a/cvat/apps/log_viewer/rules/analytics.rego
+++ b/cvat/apps/log_viewer/rules/analytics.rego
@@ -9,7 +9,8 @@ import data.utils
 #     "auth": {
 #         "user": {
 #             "id": <num>,
-#             "privilege": <"admin"|"business"|"user"|"worker"> or null
+#             "privilege": <"admin"|"business"|"user"|"worker"> or null,
+#             "has_analytics_access": <true|false>
 #         },
 #         "organization": {
 #             "id": <num>,
@@ -28,12 +29,12 @@ import data.utils
 
 default allow := false
 
-allow if {
-    utils.is_admin
-}
-
 allow if {
     input.resource.visibility == utils.PUBLIC
     input.scope == utils.VIEW
     utils.has_perm(utils.BUSINESS)
 }
+
+allow if {
+    input.auth.user.has_analytics_access
+}
diff --git a/cvat/apps/log_viewer/rules/tests/configs/analytics.csv b/cvat/apps/log_viewer/rules/tests/configs/analytics.csv
index d38b0514425c..a581e0716e5f 100644
--- a/cvat/apps/log_viewer/rules/tests/configs/analytics.csv
+++ b/cvat/apps/log_viewer/rules/tests/configs/analytics.csv
@@ -1,3 +1,3 @@
-Scope,Resource,Context,Ownership,Limit,Method,URL,Privilege,Membership
-view,Analytics,N/A,N/A,resource['visibility']=='public',GET,"/analytics",business,N/A
-view,Analytics,N/A,N/A,,GET,"/analytics",admin,N/A
+Scope,Resource,Context,Ownership,Limit,Method,URL,Privilege,Membership,HasAnalyticsAccess
+view,Analytics,N/A,N/A,resource['visibility']=='public',GET,"/analytics",business,N/A,N/A
+view,Analytics,N/A,N/A,,GET,"/analytics",none,N/A,true
diff --git a/cvat/apps/log_viewer/rules/tests/generators/analytics_test.gen.rego.py b/cvat/apps/log_viewer/rules/tests/generators/analytics_test.gen.rego.py
index ce4b50a7c8fb..7e40f092607c 100644
--- a/cvat/apps/log_viewer/rules/tests/generators/analytics_test.gen.rego.py
+++ b/cvat/apps/log_viewer/rules/tests/generators/analytics_test.gen.rego.py
@@ -1,4 +1,4 @@
-# Copyright (C) 2022 CVAT.ai Corporation
+# Copyright (C) 2022-2024 CVAT.ai Corporation
 #
 # SPDX-License-Identifier: MIT
 
@@ -43,6 +43,7 @@ def read_rules(name):
 OWNERSHIPS = ["none"]
 GROUPS = ["admin", "business", "user", "worker", "none"]
 ORG_ROLES = ["owner", "maintainer", "supervisor", "worker", None]
+HAS_ANALYTICS_ACCESS = [True, False]
 
 
 def RESOURCES(scope):
@@ -55,10 +56,7 @@ def RESOURCES(scope):
     return [None]
 
 
-def eval_rule(scope, context, ownership, privilege, membership, data):
-    if privilege == "admin":
-        return True
-
+def eval_rule(scope, context, ownership, privilege, membership, data, has_analytics_access):
     rules = list(filter(lambda r: scope == r["scope"], simple_rules))
     rules = list(filter(lambda r: r["context"] == "na" or context == r["context"], rules))
     rules = list(filter(lambda r: r["ownership"] == "na" or ownership == r["ownership"], rules))
@@ -70,17 +68,22 @@ def eval_rule(scope, context, ownership, privilege, membership, data):
         )
     )
     rules = list(filter(lambda r: GROUPS.index(privilege) <= GROUPS.index(r["privilege"]), rules))
+    rules = list(filter(lambda r: r["hasanalyticsaccess"] in ("na", str(has_analytics_access).lower()), rules))
     resource = data["resource"]
-    rules = list(filter(lambda r: eval(r["limit"], {"resource": resource}), rules))
+    rules = list(filter(lambda r: not r["limit"] or eval(r["limit"], {"resource": resource}), rules))
 
     return bool(rules)
 
 
-def get_data(scope, context, ownership, privilege, membership, resource):
+def get_data(scope, context, ownership, privilege, membership, resource, has_analytics_access):
     data = {
         "scope": scope,
         "auth": {
-            "user": {"id": random.randrange(0, 100), "privilege": privilege},
+            "user": {
+                "id": random.randrange(0, 100),  # nosec B311 NOSONAR
+                "privilege": privilege,
+                "has_analytics_access": has_analytics_access,
+            },
             "organization": {
                 "id": random.randrange(100, 200),
                 "owner": {"id": random.randrange(200, 300)},
@@ -123,7 +126,7 @@ def _get_name(prefix, **kwargs):
     return name
 
 
-def get_name(scope, context, ownership, privilege, membership, resource):
+def get_name(scope, context, ownership, privilege, membership, resource, has_analytics_access):
     return _get_name("test", **locals())
 
 
@@ -139,16 +142,16 @@ def is_valid(scope, context, ownership, privilege, membership, resource):
 def gen_test_rego(name):
     with open(f"{name}_test.gen.rego", "wt") as f:
         f.write(f"package {name}\nimport rego.v1\n\n")
-        for scope, context, ownership, privilege, membership in product(
-            SCOPES, CONTEXTS, OWNERSHIPS, GROUPS, ORG_ROLES
+        for scope, context, ownership, privilege, membership, has_analytics_access in product(
+            SCOPES, CONTEXTS, OWNERSHIPS, GROUPS, ORG_ROLES, HAS_ANALYTICS_ACCESS
         ):
             for resource in RESOURCES(scope):
                 if not is_valid(scope, context, ownership, privilege, membership, resource):
                     continue
 
-                data = get_data(scope, context, ownership, privilege, membership, resource)
-                test_name = get_name(scope, context, ownership, privilege, membership, resource)
-                result = eval_rule(scope, context, ownership, privilege, membership, data)
+                data = get_data(scope, context, ownership, privilege, membership, resource, has_analytics_access)
+                test_name = get_name(scope, context, ownership, privilege, membership, resource, has_analytics_access)
+                result = eval_rule(scope, context, ownership, privilege, membership, data, has_analytics_access)
                 f.write(
                     "{test_name} if {{\n    {allow} with input as {data}\n}}\n\n".format(
                         test_name=test_name,
diff --git a/cvat/schema.yml b/cvat/schema.yml
index b06ff69b79ab..b05b2989d53b 100644
--- a/cvat/schema.yml
+++ b/cvat/schema.yml
@@ -1,7 +1,7 @@
 openapi: 3.0.3
 info:
   title: CVAT REST API
-  version: 2.21.1
+  version: 2.21.2
   description: REST API for Computer Vision Annotation Tool (CVAT)
   termsOfService: https://www.google.com/policies/terms/
   contact:
@@ -11103,6 +11103,9 @@ components:
           type: string
           format: date-time
           readOnly: true
+        has_analytics_access:
+          type: boolean
+          readOnly: true
       required:
       - groups
       - username
diff --git a/cvat/settings/base.py b/cvat/settings/base.py
index d698fe563531..f439000f9d21 100644
--- a/cvat/settings/base.py
+++ b/cvat/settings/base.py
@@ -177,7 +177,9 @@ def generate_secret_key():
     'OLD_PASSWORD_FIELD_ENABLED': True,
 }
 
-if to_bool(os.getenv('CVAT_ANALYTICS', False)):
+ANALYTICS_ENABLED = to_bool(os.getenv('CVAT_ANALYTICS', False))
+
+if ANALYTICS_ENABLED:
     INSTALLED_APPS += ['cvat.apps.log_viewer']
 
 MIDDLEWARE = [
@@ -339,6 +341,15 @@ class CVAT_QUEUES(Enum):
     'cvat.apps.events.handlers.handle_rq_exception',
 ]
 
+PERIODIC_RQ_JOBS = [
+    {
+        'queue': CVAT_QUEUES.CLEANING.value,
+        'id': 'clean_up_sessions',
+        'func': 'cvat.apps.iam.utils.clean_up_sessions',
+        'cron_string': '0 0 * * *',
+    },
+]
+
 # JavaScript and CSS compression
 # https://django-compressor.readthedocs.io
 
diff --git a/dev/format_python_code.sh b/dev/format_python_code.sh
index 257915acfdc2..2e70e5b0ea4e 100755
--- a/dev/format_python_code.sh
+++ b/dev/format_python_code.sh
@@ -30,6 +30,8 @@ for paths in \
     "cvat/apps/engine/default_settings.py" \
     "cvat/apps/engine/field_validation.py" \
     "cvat/apps/engine/model_utils.py" \
+    "cvat/apps/dataset_manager/tests/test_annotation.py" \
+    "cvat/apps/dataset_manager/tests/utils.py" \
     ; do
     ${BLACK} -- ${paths}
     ${ISORT} -- ${paths}
diff --git a/docker-compose.yml b/docker-compose.yml
index 081e59553289..45399e0c39ea 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -79,7 +79,7 @@ services:
 
   cvat_server:
     container_name: cvat_server
-    image: cvat/server:${CVAT_VERSION:-v2.21.1}
+    image: cvat/server:${CVAT_VERSION:-v2.21.2}
     restart: always
     depends_on:
       <<: *backend-deps
@@ -113,7 +113,7 @@ services:
 
   cvat_utils:
     container_name: cvat_utils
-    image: cvat/server:${CVAT_VERSION:-v2.21.1}
+    image: cvat/server:${CVAT_VERSION:-v2.21.2}
     restart: always
     depends_on: *backend-deps
     environment:
@@ -130,7 +130,7 @@ services:
 
   cvat_worker_import:
     container_name: cvat_worker_import
-    image: cvat/server:${CVAT_VERSION:-v2.21.1}
+    image: cvat/server:${CVAT_VERSION:-v2.21.2}
     restart: always
     depends_on: *backend-deps
     environment:
@@ -146,7 +146,7 @@ services:
 
   cvat_worker_export:
     container_name: cvat_worker_export
-    image: cvat/server:${CVAT_VERSION:-v2.21.1}
+    image: cvat/server:${CVAT_VERSION:-v2.21.2}
     restart: always
     depends_on: *backend-deps
     environment:
@@ -162,7 +162,7 @@ services:
 
   cvat_worker_annotation:
     container_name: cvat_worker_annotation
-    image: cvat/server:${CVAT_VERSION:-v2.21.1}
+    image: cvat/server:${CVAT_VERSION:-v2.21.2}
     restart: always
     depends_on: *backend-deps
     environment:
@@ -178,7 +178,7 @@ services:
 
   cvat_worker_webhooks:
     container_name: cvat_worker_webhooks
-    image: cvat/server:${CVAT_VERSION:-v2.21.1}
+    image: cvat/server:${CVAT_VERSION:-v2.21.2}
     restart: always
     depends_on: *backend-deps
     environment:
@@ -194,7 +194,7 @@ services:
 
   cvat_worker_quality_reports:
     container_name: cvat_worker_quality_reports
-    image: cvat/server:${CVAT_VERSION:-v2.21.1}
+    image: cvat/server:${CVAT_VERSION:-v2.21.2}
     restart: always
     depends_on: *backend-deps
     environment:
@@ -210,7 +210,7 @@ services:
 
   cvat_worker_analytics_reports:
     container_name: cvat_worker_analytics_reports
-    image: cvat/server:${CVAT_VERSION:-v2.21.1}
+    image: cvat/server:${CVAT_VERSION:-v2.21.2}
     restart: always
     depends_on: *backend-deps
     environment:
@@ -226,7 +226,7 @@ services:
 
   cvat_ui:
     container_name: cvat_ui
-    image: cvat/ui:${CVAT_VERSION:-v2.21.1}
+    image: cvat/ui:${CVAT_VERSION:-v2.21.2}
     restart: always
     depends_on:
       - cvat_server
@@ -329,6 +329,7 @@ services:
 
   cvat_grafana:
     image: grafana/grafana-oss:10.1.2
+    restart: always
     container_name: cvat_grafana
     environment:
       <<: *clickhouse-env
diff --git a/helm-chart/values.yaml b/helm-chart/values.yaml
index 209266da0b41..fc1e841bec43 100644
--- a/helm-chart/values.yaml
+++ b/helm-chart/values.yaml
@@ -129,7 +129,7 @@ cvat:
       additionalVolumeMounts: []
     replicas: 1
     image: cvat/server
-    tag: v2.21.1
+    tag: v2.21.2
     imagePullPolicy: Always
     permissionFix:
       enabled: true
@@ -153,7 +153,7 @@ cvat:
   frontend:
     replicas: 1
     image: cvat/ui
-    tag: v2.21.1
+    tag: v2.21.2
     imagePullPolicy: Always
     labels: {}
     #  test: test
diff --git a/site/content/en/docs/contributing/development-environment.md b/site/content/en/docs/contributing/development-environment.md
index cf2b1c01d713..e54929609e48 100644
--- a/site/content/en/docs/contributing/development-environment.md
+++ b/site/content/en/docs/contributing/development-environment.md
@@ -168,6 +168,7 @@ description: 'Installing a development environment for different operating syste
   ```bash
   python manage.py migrate
   python manage.py collectstatic
+  python manage.py syncperiodicjobs
   python manage.py createsuperuser
   ```
 
diff --git a/site/content/en/docs/manual/advanced/serverless-tutorial.md b/site/content/en/docs/manual/advanced/serverless-tutorial.md
index 7355d22d982e..5211886208e8 100644
--- a/site/content/en/docs/manual/advanced/serverless-tutorial.md
+++ b/site/content/en/docs/manual/advanced/serverless-tutorial.md
@@ -974,9 +974,9 @@ you can use the Ubuntu subsystem, for this do the following:
 [detectron2-tutorial]: https://detectron2.readthedocs.io/en/latest/tutorials/getting_started.html
 [retinanet-model-zoo]: https://github.com/facebookresearch/detectron2/blob/master/MODEL_ZOO.md#retinanet
 [faster-rcnn-function]: https://raw.githubusercontent.com/cvat-ai/cvat/38b774046d41d604ed85a521587e4bacce61b69c/serverless/tensorflow/faster_rcnn_inception_v2_coco/nuclio/function.yaml
-[nuclio-doc]: https://nuclio.io/docs/latest/reference/function-configuration/function-configuration-reference/
-[nuclio-http-trigger-doc]: https://nuclio.io/docs/latest/reference/triggers/http/
-[nuclio-bkms-doc]: https://nuclio.io/docs/latest/concepts/best-practices-and-common-pitfalls/
+[nuclio-doc]: https://nuclio.io/docs/latest/reference/function-configuration/function-configuration-reference.html
+[nuclio-http-trigger-doc]: https://nuclio.io/docs/latest/reference/triggers/http.html
+[nuclio-bkms-doc]: https://nuclio.io/docs/latest/concepts/best-practices-and-common-pitfalls.html
 [retinanet-function-yaml]: https://github.com/cvat-ai/cvat/blob/b2f616859ca64687c385e636b4a25014fbb9d17c/serverless/pytorch/facebookresearch/detectron2/retinanet/nuclio/function.yaml
 [retinanet-main-py]: https://github.com/cvat-ai/cvat/blob/b2f616859ca64687c385e636b4a25014fbb9d17c/serverless/pytorch/facebookresearch/detectron2/retinanet/nuclio/main.py
 [nuclio-homepage]: https://nuclio.io/
diff --git a/tests/python/rest_api/test_analytics.py b/tests/python/rest_api/test_analytics.py
index 7ac3004e63ff..f14cdd206f84 100644
--- a/tests/python/rest_api/test_analytics.py
+++ b/tests/python/rest_api/test_analytics.py
@@ -35,11 +35,18 @@ def _test_cannot_see(self, user):
         assert response.status_code == HTTPStatus.FORBIDDEN
 
     @pytest.mark.parametrize(
-        "privilege, is_allow",
-        [("admin", True), ("business", True), ("worker", False), ("user", False)],
+        "conditions, is_allow",
+        [
+            (dict(privilege="admin"), True),
+            (dict(privilege="business"), True),
+            (dict(privilege="worker", has_analytics_access=False), False),
+            (dict(privilege="worker", has_analytics_access=True), True),
+            (dict(privilege="user", has_analytics_access=False), False),
+            (dict(privilege="user", has_analytics_access=True), True),
+        ],
     )
-    def test_can_see(self, privilege, is_allow, find_users):
-        user = find_users(privilege=privilege)[0]["username"]
+    def test_can_see(self, conditions, is_allow, find_users):
+        user = find_users(**conditions)[0]["username"]
 
         if is_allow:
             self._test_can_see(user)
diff --git a/tests/python/shared/assets/cvat_db/data.json b/tests/python/shared/assets/cvat_db/data.json
index 8a836d7d6958..7bb20c4507c8 100644
--- a/tests/python/shared/assets/cvat_db/data.json
+++ b/tests/python/shared/assets/cvat_db/data.json
@@ -6180,54 +6180,6 @@
     "frames": "[]"
   }
 },
-{
-  "model": "engine.segment",
-  "pk": 38,
-  "fields": {
-    "task": 29,
-    "start_frame": 0,
-    "stop_frame": 7,
-    "chunks_updated_date": "2024-10-02T08:13:16.623Z",
-    "type": "range",
-    "frames": "[]"
-  }
-},
-{
-  "model": "engine.segment",
-  "pk": 39,
-  "fields": {
-    "task": 29,
-    "start_frame": 8,
-    "stop_frame": 15,
-    "chunks_updated_date": "2024-10-02T08:13:16.623Z",
-    "type": "range",
-    "frames": "[]"
-  }
-},
-{
-  "model": "engine.segment",
-  "pk": 40,
-  "fields": {
-    "task": 29,
-    "start_frame": 16,
-    "stop_frame": 22,
-    "chunks_updated_date": "2024-10-02T08:13:16.623Z",
-    "type": "range",
-    "frames": "[]"
-  }
-},
-{
-  "model": "engine.segment",
-  "pk": 41,
-  "fields": {
-    "task": 29,
-    "start_frame": 23,
-    "stop_frame": 28,
-    "chunks_updated_date": "2024-10-02T08:13:16.623Z",
-    "type": "range",
-    "frames": "[]"
-  }
-},
 {
   "model": "engine.job",
   "pk": 2,
@@ -12710,7 +12662,8 @@
     "user": [
       "admin1"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": true
   }
 },
 {
@@ -12720,7 +12673,8 @@
     "user": [
       "user1"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12730,7 +12684,8 @@
     "user": [
       "user2"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12740,7 +12695,8 @@
     "user": [
       "user3"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12750,7 +12706,8 @@
     "user": [
       "user4"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": true
   }
 },
 {
@@ -12760,7 +12717,8 @@
     "user": [
       "worker1"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12770,7 +12728,8 @@
     "user": [
       "worker2"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12780,7 +12739,8 @@
     "user": [
       "worker3"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12790,7 +12750,8 @@
     "user": [
       "worker4"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": true
   }
 },
 {
@@ -12800,7 +12761,8 @@
     "user": [
       "business1"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12810,7 +12772,8 @@
     "user": [
       "business2"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12820,7 +12783,8 @@
     "user": [
       "business3"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12830,7 +12794,8 @@
     "user": [
       "business4"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12840,7 +12805,8 @@
     "user": [
       "dummy1"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12850,7 +12816,8 @@
     "user": [
       "dummy2"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12860,7 +12827,8 @@
     "user": [
       "dummy3"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12870,7 +12838,8 @@
     "user": [
       "dummy4"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12880,7 +12849,8 @@
     "user": [
       "admin2"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": true
   }
 },
 {
@@ -12890,7 +12860,8 @@
     "user": [
       "user5"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12900,7 +12871,8 @@
     "user": [
       "user6"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
@@ -12910,7 +12882,8 @@
     "user": [
       "lonely_user"
     ],
-    "rating": 0.0
+    "rating": 0.0,
+    "has_analytics_access": false
   }
 },
 {
diff --git a/tests/python/shared/assets/users.json b/tests/python/shared/assets/users.json
index 7a3172c70a43..d3a420b297a7 100644
--- a/tests/python/shared/assets/users.json
+++ b/tests/python/shared/assets/users.json
@@ -10,6 +10,7 @@
       "groups": [
         "user"
       ],
+      "has_analytics_access": false,
       "id": 21,
       "is_active": true,
       "is_staff": false,
@@ -26,6 +27,7 @@
       "groups": [
         "user"
       ],
+      "has_analytics_access": false,
       "id": 20,
       "is_active": true,
       "is_staff": false,
@@ -42,6 +44,7 @@
       "groups": [
         "user"
       ],
+      "has_analytics_access": false,
       "id": 19,
       "is_active": true,
       "is_staff": false,
@@ -58,6 +61,7 @@
       "groups": [
         "admin"
       ],
+      "has_analytics_access": true,
       "id": 18,
       "is_active": true,
       "is_staff": true,
@@ -72,6 +76,7 @@
       "email": "dummy4@cvat.org",
       "first_name": "Dummy",
       "groups": [],
+      "has_analytics_access": false,
       "id": 17,
       "is_active": true,
       "is_staff": false,
@@ -86,6 +91,7 @@
       "email": "dummy3@cvat.org",
       "first_name": "Dummy",
       "groups": [],
+      "has_analytics_access": false,
       "id": 16,
       "is_active": true,
       "is_staff": false,
@@ -100,6 +106,7 @@
       "email": "dummy2@cvat.org",
       "first_name": "Dummy",
       "groups": [],
+      "has_analytics_access": false,
       "id": 15,
       "is_active": true,
       "is_staff": false,
@@ -114,6 +121,7 @@
       "email": "dummy1@cvat.org",
       "first_name": "Dummy",
       "groups": [],
+      "has_analytics_access": false,
       "id": 14,
       "is_active": true,
       "is_staff": false,
@@ -130,6 +138,7 @@
       "groups": [
         "business"
       ],
+      "has_analytics_access": false,
       "id": 13,
       "is_active": true,
       "is_staff": false,
@@ -146,6 +155,7 @@
       "groups": [
         "business"
       ],
+      "has_analytics_access": false,
       "id": 12,
       "is_active": true,
       "is_staff": false,
@@ -162,6 +172,7 @@
       "groups": [
         "business"
       ],
+      "has_analytics_access": false,
       "id": 11,
       "is_active": true,
       "is_staff": false,
@@ -178,6 +189,7 @@
       "groups": [
         "business"
       ],
+      "has_analytics_access": false,
       "id": 10,
       "is_active": true,
       "is_staff": false,
@@ -194,6 +206,7 @@
       "groups": [
         "worker"
       ],
+      "has_analytics_access": true,
       "id": 9,
       "is_active": true,
       "is_staff": false,
@@ -210,6 +223,7 @@
       "groups": [
         "worker"
       ],
+      "has_analytics_access": false,
       "id": 8,
       "is_active": true,
       "is_staff": false,
@@ -226,6 +240,7 @@
       "groups": [
         "worker"
       ],
+      "has_analytics_access": false,
       "id": 7,
       "is_active": true,
       "is_staff": false,
@@ -242,6 +257,7 @@
       "groups": [
         "worker"
       ],
+      "has_analytics_access": false,
       "id": 6,
       "is_active": true,
       "is_staff": false,
@@ -258,6 +274,7 @@
       "groups": [
         "user"
       ],
+      "has_analytics_access": true,
       "id": 5,
       "is_active": true,
       "is_staff": false,
@@ -274,6 +291,7 @@
       "groups": [
         "user"
       ],
+      "has_analytics_access": false,
       "id": 4,
       "is_active": true,
       "is_staff": false,
@@ -290,6 +308,7 @@
       "groups": [
         "user"
       ],
+      "has_analytics_access": false,
       "id": 3,
       "is_active": true,
       "is_staff": false,
@@ -306,6 +325,7 @@
       "groups": [
         "user"
       ],
+      "has_analytics_access": false,
       "id": 2,
       "is_active": true,
       "is_staff": false,
@@ -322,6 +342,7 @@
       "groups": [
         "admin"
       ],
+      "has_analytics_access": true,
       "id": 1,
       "is_active": true,
       "is_staff": true,
diff --git a/tests/python/shared/fixtures/data.py b/tests/python/shared/fixtures/data.py
index 64ac7d09cbbc..13f128d2edf8 100644
--- a/tests/python/shared/fixtures/data.py
+++ b/tests/python/shared/fixtures/data.py
@@ -367,14 +367,28 @@ def find(**kwargs):
 @pytest.fixture(scope="session")
 def test_db(users, users_by_name, memberships):
     data = []
-    fields = ["username", "id", "privilege", "role", "org", "membership_id", "is_superuser"]
+    fields = [
+        "username",
+        "id",
+        "privilege",
+        "role",
+        "org",
+        "membership_id",
+        "is_superuser",
+        "has_analytics_access",
+    ]
 
     def add_row(**kwargs):
         data.append({field: kwargs.get(field) for field in fields})
 
     for user in users:
         for group in user["groups"]:
-            add_row(username=user["username"], id=user["id"], privilege=group)
+            add_row(
+                username=user["username"],
+                id=user["id"],
+                privilege=group,
+                has_analytics_access=user["has_analytics_access"],
+            )
 
     for membership in memberships:
         username = membership["user"]["username"]
@@ -386,6 +400,7 @@ def add_row(**kwargs):
                 id=membership["user"]["id"],
                 org=membership["organization"],
                 membership_id=membership["id"],
+                has_analytics_access=users_by_name[username]["has_analytics_access"],
             )
 
     return data
diff --git a/wait-for-it.sh b/wait-for-it.sh
deleted file mode 100755
index 12f10ee7dcd7..000000000000
--- a/wait-for-it.sh
+++ /dev/null
@@ -1,178 +0,0 @@
-#!/usr/bin/env bash
-#   Use this script to test if a given TCP host/port are available
-#   https://github.com/vishnubob/wait-for-it
-
-cmdname=$(basename $0)
-
-echoerr() { if [[ $QUIET -ne 1 ]]; then echo "$@" 1>&2; fi }
-
-usage()
-{
-    cat << USAGE >&2
-Usage:
-    $cmdname host:port [-s] [-t timeout] [-- command args]
-    -h HOST | --host=HOST       Host or IP under test
-    -p PORT | --port=PORT       TCP port under test
-                                Alternatively, you specify the host and port as host:port
-    -s | --strict               Only execute subcommand if the test succeeds
-    -q | --quiet                Don't output any status messages
-    -t TIMEOUT | --timeout=TIMEOUT
-                                Timeout in seconds, zero for no timeout
-    -- COMMAND ARGS             Execute command with args after the test finishes
-USAGE
-    exit 1
-}
-
-wait_for()
-{
-    if [[ $TIMEOUT -gt 0 ]]; then
-        echoerr "$cmdname: waiting $TIMEOUT seconds for $HOST:$PORT"
-    else
-        echoerr "$cmdname: waiting for $HOST:$PORT without a timeout"
-    fi
-    start_ts=$(date +%s)
-    while :
-    do
-        if [[ $ISBUSY -eq 1 ]]; then
-            nc -z $HOST $PORT
-            result=$?
-        else
-            (echo > /dev/tcp/$HOST/$PORT) >/dev/null 2>&1
-            result=$?
-        fi
-        if [[ $result -eq 0 ]]; then
-            end_ts=$(date +%s)
-            echoerr "$cmdname: $HOST:$PORT is available after $((end_ts - start_ts)) seconds"
-            break
-        fi
-        sleep 1
-    done
-    return $result
-}
-
-wait_for_wrapper()
-{
-    # In order to support SIGINT during timeout: http://unix.stackexchange.com/a/57692
-    if [[ $QUIET -eq 1 ]]; then
-        timeout $BUSYTIMEFLAG $TIMEOUT $0 --quiet --child --host=$HOST --port=$PORT --timeout=$TIMEOUT &
-    else
-        timeout $BUSYTIMEFLAG $TIMEOUT $0 --child --host=$HOST --port=$PORT --timeout=$TIMEOUT &
-    fi
-    PID=$!
-    trap "kill -INT -$PID" INT
-    wait $PID
-    RESULT=$?
-    if [[ $RESULT -ne 0 ]]; then
-        echoerr "$cmdname: timeout occurred after waiting $TIMEOUT seconds for $HOST:$PORT"
-    fi
-    return $RESULT
-}
-
-# process arguments
-while [[ $# -gt 0 ]]
-do
-    case "$1" in
-        *:* )
-        hostport=(${1//:/ })
-        HOST=${hostport[0]}
-        PORT=${hostport[1]}
-        shift 1
-        ;;
-        --child)
-        CHILD=1
-        shift 1
-        ;;
-        -q | --quiet)
-        QUIET=1
-        shift 1
-        ;;
-        -s | --strict)
-        STRICT=1
-        shift 1
-        ;;
-        -h)
-        HOST="$2"
-        if [[ $HOST == "" ]]; then break; fi
-        shift 2
-        ;;
-        --host=*)
-        HOST="${1#*=}"
-        shift 1
-        ;;
-        -p)
-        PORT="$2"
-        if [[ $PORT == "" ]]; then break; fi
-        shift 2
-        ;;
-        --port=*)
-        PORT="${1#*=}"
-        shift 1
-        ;;
-        -t)
-        TIMEOUT="$2"
-        if [[ $TIMEOUT == "" ]]; then break; fi
-        shift 2
-        ;;
-        --timeout=*)
-        TIMEOUT="${1#*=}"
-        shift 1
-        ;;
-        --)
-        shift
-        CLI=("$@")
-        break
-        ;;
-        --help)
-        usage
-        ;;
-        *)
-        echoerr "Unknown argument: $1"
-        usage
-        ;;
-    esac
-done
-
-if [[ "$HOST" == "" || "$PORT" == "" ]]; then
-    echoerr "Error: you need to provide a host and port to test."
-    usage
-fi
-
-TIMEOUT=${TIMEOUT:-15}
-STRICT=${STRICT:-0}
-CHILD=${CHILD:-0}
-QUIET=${QUIET:-0}
-
-# check to see if timeout is from busybox?
-# check to see if timeout is from busybox?
-TIMEOUT_PATH=$(realpath $(which timeout))
-if [[ $TIMEOUT_PATH =~ "busybox" ]]; then
-        ISBUSY=1
-        BUSYTIMEFLAG="-t"
-else
-        ISBUSY=0
-        BUSYTIMEFLAG=""
-fi
-
-if [[ $CHILD -gt 0 ]]; then
-    wait_for
-    RESULT=$?
-    exit $RESULT
-else
-    if [[ $TIMEOUT -gt 0 ]]; then
-        wait_for_wrapper
-        RESULT=$?
-    else
-        wait_for
-        RESULT=$?
-    fi
-fi
-
-if [[ $CLI != "" ]]; then
-    if [[ $RESULT -ne 0 && $STRICT -eq 1 ]]; then
-        echoerr "$cmdname: strict mode, refusing to execute subprocess"
-        exit $RESULT
-    fi
-    exec "${CLI[@]}"
-else
-    exit $RESULT
-fi
diff --git a/wait_for_deps.sh b/wait_for_deps.sh
index c78950cf96c4..6cf96886fd69 100755
--- a/wait_for_deps.sh
+++ b/wait_for_deps.sh
@@ -11,8 +11,8 @@
 # but it's too resource-intensive to execute for every worker we might be running
 # in a container. Instead, it's in backend_entrypoint.sh.
 
-~/wait-for-it.sh "${CVAT_POSTGRES_HOST}:${CVAT_POSTGRES_PORT:-5432}" -t 0
-~/wait-for-it.sh "${CVAT_REDIS_INMEM_HOST}:${CVAT_REDIS_INMEM_PORT}" -t 0
-~/wait-for-it.sh "${CVAT_REDIS_ONDISK_HOST}:${CVAT_REDIS_ONDISK_PORT}" -t 0
+wait-for-it "${CVAT_POSTGRES_HOST}:${CVAT_POSTGRES_PORT:-5432}" -t 0
+wait-for-it "${CVAT_REDIS_INMEM_HOST}:${CVAT_REDIS_INMEM_PORT}" -t 0
+wait-for-it "${CVAT_REDIS_ONDISK_HOST}:${CVAT_REDIS_ONDISK_PORT}" -t 0
 
 exec "$@"