Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-08 17:53:55 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-calendar/lib
History
Exact
Chris Alberti c253fb0197
 SECURITY: Remove stale invitee access for users removed from invited groups on private events (#42187) 
## Summary

Correctly restrict private calendar event access to current group
members. The patch replaces stale invitee-row authorization with active
invited-group membership checks across event detail serialization,
attendance searches, RSVP mutations, and livestream chat metadata, and
prunes stale invitee records when a user is removed from a group.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1377

Co-authored-by: discourse-patch-triage
<272280883+discourse-patch-triage[bot]@users.noreply.github.com>
2026-07-30 15:15:46 -05:00
..
discourse_calendar FEATURE: Embedded Zoom webinar for livestream events (#40973) 2026-07-16 10:58:56 +10:00
discourse_post_event SECURITY: Remove stale invitee access for users removed from invited groups on private events (#42187) 2026-07-30 15:15:46 -05:00
tasks DEV: Fix javascript:update_constants task (#35994) 2025-11-12 20:01:29 +01:00
calendar.rb
calendar_custom_fields_validator.rb FIX: Support uppercase and separators in event custom field names (#40995) 2026-06-24 17:02:32 +02:00
calendar_first_day_of_week.rb FEATURE: allow picking first day of week in calendar (#34670) 2025-09-02 12:44:50 +02:00
calendar_settings_validator.rb
calendar_upcoming_events_default_view.rb FEATURE: adds calendar_upcoming_events_default_view setting (#36014) 2025-11-13 19:19:13 +08:00
calendar_validator.rb
event_validator.rb FIX: Whisper messages should not create calendar events (#40282) 2026-06-01 12:04:51 -03:00
group_timezones.rb
holiday_status.rb DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
time_sniffer.rb DEV: Enable Style/RedundantSelf rubocop rule (#40098) 2026-05-19 19:27:45 +02:00
users_on_holiday.rb