Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 21:45:25 +08:00
Code Packages Activity Actions
discourse/spec/requests/api
History
Exact
Natalie Tay 4dcdf09317
 SECURITY: Respect group member visibility for counts [backport 2026.1] (#41420) 
Backport of #41403 to release/2026.1.

---

When a group is visible but its members are hidden, some group payloads
still included the exact member count.

This PR serializes group member counts when the requester can see group
members, and we update the public API schemas to match the conditional
field.
2026-07-06 12:47:49 +08:00
..
schemas SECURITY: Respect group member visibility for counts [backport 2026.1] (#41420) 2026-07-06 12:47:49 +08:00
shared DEV: Apply syntax_tree formatting to spec/* 2023-01-09 11:49:28 +00:00
backups_spec.rb DEV: Apply syntax_tree formatting to spec/* 2023-01-09 11:49:28 +00:00
badges_spec.rb DEV: Allow fab! without block (#24314) 2023-11-09 16:47:59 -06:00
categories_spec.rb DEV: Apply syntax_tree formatting to spec/* 2023-01-09 11:49:28 +00:00
groups_spec.rb DEV: Fix api docs openapi spec validation errors (#35361) 2025-10-14 07:32:58 -06:00
invites_spec.rb DEV: Update api docs spec for invite enpoint (#34843) 2025-09-17 14:50:53 -05:00
multiple_invites_spec.rb FEATURE: change /invites.json api endpoint to optionally accept array of emails (#24853) 2023-12-28 10:16:04 -05:00
notifications_spec.rb DEV: Block accidental serialization of entire AR models (#27668) 2024-07-01 17:08:48 -03:00
posts_spec.rb DEV: Update api-docs for posts locked endpoint (#35453) 2025-10-16 12:56:34 -06:00
private_messages_spec.rb FIX: update id types in API docs to integers (#27412) 2024-06-26 20:44:39 -06:00
rate_limits_spec.rb DEV: API to register custom request rate limiting conditions (#30239) 2024-12-23 09:57:18 +08:00
search_spec.rb DEV: Document group param for search endpoint (#19806) 2023-01-09 14:46:07 -07:00
site_spec.rb DEV: Document basic-info endpoint (#26471) 2024-04-02 14:53:19 -06:00
tags_spec.rb DEV: Use tag_name/tag.name instead of tag_id/tag.id where the name is actually used (#36226) 2025-12-29 13:20:06 +08:00
topics_spec.rb DEV: Fix api docs openapi spec validation errors (#35361) 2025-10-14 07:32:58 -06:00
uploads_spec.rb DEV: Apply syntax_tree formatting to spec/* 2023-01-09 11:49:28 +00:00
user_badges_spec.rb DEV: Apply syntax_tree formatting to spec/* 2023-01-09 11:49:28 +00:00
users_spec.rb DEV: Add /admin/users.json to the api docs (#32512) 2025-04-29 09:28:47 -06:00