mirror of
https://github.com/discourse/discourse.git
synced 2026-08-08 17:53:55 +08:00
f9f6863056Backport of #40919 to release/2026.1. --- ## Summary Prevent the exposure of raw Data Explorer SQL to non-admin group members when viewing report details. The sql attribute is now correctly gated to administrators within the query details serializer. ## Source - Patch Triage: https://patch.discourse.org/patch-triage/1290 - Affected file: https://github.com/discourse/discourse/blob/main/plugins/discourse-data-explorer/app/serializers/discourse_data_explorer/query_details_serializer.rb --- 🤖 Auto-generated from the patch diff via Patch Triage. Review carefully before merging. Co-authored-by: discourse-patch-triage <272280883+discourse-patch-triage[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| automation | ||
| fabricators | ||
| integration | ||
| jobs/scheduled | ||
| lib | ||
| models | ||
| requests | ||
| system | ||
| tasks | ||
| data_explorer_spec.rb | ||
| guardian_spec.rb | ||
| report_generator_spec.rb | ||
| result_format_converter_spec.rb | ||
| result_to_markdown_spec.rb | ||
