0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-11 02:59:07 +08:00
discourse/plugins/discourse-assign
Gabriel Grubba 8bcf5126e8
SECURITY: Honor group visibility in discourse-assign group lookups (#41176)
Add `ensure_can_see_group` to places where we needed it before returning
the group metadata.

Also added
`.visible_groups(@guardian.user).members_visible_groups(@guardian.user)`
to guard `advanced_filter` search

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-25 13:57:46 -03:00
..
app SECURITY: Honor group visibility in discourse-assign group lookups (#41176) 2026-06-25 13:57:46 -03:00
assets UX: Remove btn-default from bulk action buttons (#41131) 2026-06-23 13:57:23 -05:00
config I18N: Update translations (#40993) 2026-06-17 18:35:15 +02:00
db/migrate DEV: Skip backfill INSERTs in old migrations on fresh installs (#39976) 2026-05-13 13:59:28 +01:00
lib FEATURE: assigned trigger for workflows (#40831) 2026-06-12 16:42:27 +02:00
spec SECURITY: Honor group visibility in discourse-assign group lookups (#41176) 2026-06-25 13:57:46 -03:00
svg-icons
test/javascripts FEATURE: Add category-level assignment permissions (#40412) 2026-06-08 09:59:40 -05:00
package.json DEV: Add a script for generating external types in discourse-types (#37095) 2026-03-09 20:37:43 +01:00
plugin.rb SECURITY: Honor group visibility in discourse-assign group lookups (#41176) 2026-06-25 13:57:46 -03:00
README.md
tsconfig.json DEV: Add a script for generating external types in discourse-types (#37095) 2026-03-09 20:37:43 +01:00

Assign Plugin

Allows you to assign topics and individual posts (both private and public) to a user or group.

For more information, please see: https://meta.discourse.org/t/discourse-assign/58044