mirror of
https://github.com/discourse/discourse.git
synced 2026-08-11 01:06:53 +08:00
f9f6863056Backport of #40919 to release/2026.1. --- ## Summary Prevent the exposure of raw Data Explorer SQL to non-admin group members when viewing report details. The sql attribute is now correctly gated to administrators within the query details serializer. ## Source - Patch Triage: https://patch.discourse.org/patch-triage/1290 - Affected file: https://github.com/discourse/discourse/blob/main/plugins/discourse-data-explorer/app/serializers/discourse_data_explorer/query_details_serializer.rb --- 🤖 Auto-generated from the patch diff via Patch Triage. Review carefully before merging. Co-authored-by: discourse-patch-triage <272280883+discourse-patch-triage[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| controllers/discourse_data_explorer | ||
| jobs/scheduled | ||
| models/discourse_data_explorer | ||
| serializers/discourse_data_explorer | ||
