0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-11 02:59:07 +08:00
discourse/plugins/discourse-assign/spec
Gabriel Grubba 8bcf5126e8
SECURITY: Honor group visibility in discourse-assign group lookups (#41176)
Add `ensure_can_see_group` to places where we needed it before returning
the group metadata.

Also added
`.visible_groups(@guardian.user).members_visible_groups(@guardian.user)`
to guard `advanced_filter` search

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-25 13:57:46 -03:00
..
components SECURITY: Honor group visibility in discourse-assign group lookups (#41176) 2026-06-25 13:57:46 -03:00
fabricators
integration DEV: Allow multiple solutions in solved plugin (#39806) 2026-05-28 07:12:28 -05:00
jobs DEV: Update rubocop-discourse to 3.13 and autofix issues (#35073) 2025-10-06 16:11:01 +02:00
lib FEATURE: assigned trigger for workflows (#40831) 2026-06-12 16:42:27 +02:00
models FIX: show group Assignments tab based on assignable_level (#39085) 2026-04-08 16:50:27 +02:00
requests SECURITY: Honor group visibility in discourse-assign group lookups (#41176) 2026-06-25 13:57:46 -03:00
serializers FEATURE: Add category-level assignment permissions (#40412) 2026-06-08 09:59:40 -05:00
support
system FEATURE: add bootstrap first admin job (#39851) 2026-05-08 16:16:18 -03:00
plugin_helper.rb FEATURE: Add category-level assignment permissions (#40412) 2026-06-08 09:59:40 -05:00
plugin_spec.rb FEATURE: Add category-level assignment permissions (#40412) 2026-06-08 09:59:40 -05:00