0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-10 21:51:49 +08:00
discourse/plugins/discourse-ai/app/jobs/regular
discoursebot d433b7e1e7
SECURITY: Shared conversations and artifacts remain accessible [backport 2026.1] (#41560)
Backport of #41554 to release/2026.1.

---

## Summary

Prevent unauthorized access to shared AI conversations and artifacts by
verifying the visibility of source topics and posts before rendering.
The patch also ensures that destroying a shared conversation correctly
restores privacy settings for artifacts and uploads even when the source
topic has been trashed.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1398

Co-authored-by: discourse-patch-triage
<272280883+discourse-patch-triage[bot]@users.noreply.github.com>

Co-authored-by: Isaac Janzen <50783505+janzenisaac@users.noreply.github.com>
2026-07-08 15:02:39 -05:00
..
ai_spam_scan.rb
create_ai_chat_reply.rb DEV: Clean up scope resolution operators in plugins (#34979) 2025-09-30 14:36:34 +02:00
create_ai_reply.rb FIX: Ensure regeneration always uses the correct llm (#36585) 2025-12-10 16:23:47 +11:00
detect_translate_post.rb FIX: Also automatically translate to site's default locale (#37292) 2026-01-24 00:08:34 +08:00
detect_translate_topic.rb FIX: Also automatically translate to site's default locale (#37292) 2026-01-24 00:08:34 +08:00
digest_rag_upload.rb DEV: Clean up scope resolution operators in plugins (#34979) 2025-09-30 14:36:34 +02:00
fast_track_topic_gist.rb DEV: Clean up scope resolution operators in plugins (#34979) 2025-09-30 14:36:34 +02:00
generate_chat_thread_title.rb
generate_embeddings.rb
generate_inferred_concepts.rb
generate_rag_embeddings.rb DEV: Clean up scope resolution operators in plugins (#34979) 2025-09-30 14:36:34 +02:00
localize_categories.rb FIX: Also automatically translate to site's default locale (#37292) 2026-01-24 00:08:34 +08:00
localize_posts.rb FIX: Also automatically translate to site's default locale (#37292) 2026-01-24 00:08:34 +08:00
localize_tags.rb FEATURE: Introduce tag localizations with API, without UI yet (#36754) 2025-12-18 18:25:58 +08:00
localize_topics.rb FIX: Also automatically translate to site's default locale (#37292) 2026-01-24 00:08:34 +08:00
manage_embedding_def_search_index.rb DEV: Clean up scope resolution operators in plugins (#34979) 2025-09-30 14:36:34 +02:00
post_sentiment_analysis.rb DEV: Clean up scope resolution operators in plugins (#34979) 2025-09-30 14:36:34 +02:00
shared_conversation_adjust_upload_security.rb SECURITY: Shared conversations and artifacts remain accessible [backport 2026.1] (#41560) 2026-07-08 15:02:39 -05:00
stream_composer_helper.rb FEATURE: Hosted LLM credit system (#35162) 2025-10-14 07:48:20 -07:00
stream_discord_reply.rb
stream_discover_reply.rb FIX: Pass user to Discovery BotContext for usage tracking (#36493) 2025-12-05 17:32:08 -03:00
stream_post_helper.rb SECURITY: Prevent 'Explain' feature from exposing hidden posts [backport 2026.1] 2026-05-19 00:26:55 +01:00
stream_topic_ai_summary.rb SECURITY: Force regeneration for edit-outdated summaries and block stale fallback [backport 2026.1] 2026-03-31 15:12:50 +01:00