mirror of
https://github.com/discourse/discourse.git
synced 2026-08-06 13:08:40 +08:00
7e6c7362c2## Summary Prevent users removed from whisper-allowed groups from accessing or modifying their own whisper posts via single-post endpoints. The fix ensures that post-type visibility requirements are enforced in the Guardian even for post owners, preventing unauthorized read and write access to the staff-only whisper stream. ## Source - Patch Triage: https://patch.discourse.org/patch-triage/1316 Co-authored-by: discourse-patch-triage <272280883+discourse-patch-triage[bot]@users.noreply.github.com> |
||
|---|---|---|
| .. | ||
| bookmark_guardian.rb | ||
| category_guardian.rb | ||
| ensure_magic.rb | ||
| flag_guardian.rb | ||
| group_guardian.rb | ||
| invite_guardian.rb | ||
| localization_guardian.rb | ||
| permalink_guardian.rb | ||
| post_guardian.rb | ||
| post_revision_guardian.rb | ||
| sidebar_guardian.rb | ||
| staff_action_log_guardian.rb | ||
| tag_guardian.rb | ||
| topic_guardian.rb | ||
| upload_guardian.rb | ||
| user_guardian.rb | ||
