Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-11 02:59:07 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-data-explorer/lib
History
Exact
Sam ad96765bd5
 FIX: Prevent hidden Data Explorer queries leaking via bookmarks (#40327) 
Bookmark list and ICS feed responses included the name and
description of Data Explorer queries even when the underlying
query was hidden or its query group association had been removed.

Tighten `QueryGroupBookmarkable.can_see_bookmarkable?` so non-admins
can only see bookmarks for queries that are not hidden and that they
have access to via group membership, and exclude hidden queries from
the bookmark list query. Reminder delivery now also respects
`can_see?` to avoid sending reminders for queries the user can no
longer access.

Admins retain visibility of hidden query bookmarks.
2026-05-27 17:25:30 +10:00
..
discourse_data_explorer FIX: Prevent hidden Data Explorer queries leaking via bookmarks (#40327) 2026-05-27 17:25:30 +10:00
tasks FIX: Enforce max limit for data explorer queries (#38320) 2026-03-06 14:43:43 +08:00