discourse/spec/lib/guardian
Sam 852e9b69fa
FIX: Moderators can receive another user's private bookmark content (#39777)
Security hardening, disallow mods from seeing bookmarks on random users
2026-05-06 16:35:08 +10:00
..
bookmark_guardian_spec.rb DEV: Consistently use Guardian helper methods (#34024) 2025-08-14 15:23:42 +08:00
flag_guardian_spec.rb FEATURE: allow edit custom flags (#32344) 2025-04-17 12:31:52 +08:00
invite_guardian_spec.rb DEV: Invites destroy_all_expired allows staff to delete any user's expired invites (#38281) 2026-03-05 09:59:48 -06:00
localization_guardian_spec.rb FIX: Also check if user can see post or topic prior to letting them localize it (#36749) 2025-12-18 02:12:58 +08:00
post_guardian_spec.rb SECURITY: Restrict deleted posts index endpoint to staff only 2026-03-19 15:21:28 +00:00
staff_action_log_guardian_spec.rb SECURITY: Restrict staff action logs visibility for moderators 2026-01-28 17:11:14 +00:00
tag_guardian_spec.rb SECURITY: Prevent users from editing or synonymizing hidden tags they can't see 2026-03-19 15:21:28 +00:00
topic_guardian_spec.rb DEV: Deprecate the assignment of nil to site settings (#36093) 2025-12-01 15:04:23 +08:00
user_guardian_spec.rb FIX: Moderators can receive another user's private bookmark content (#39777) 2026-05-06 16:35:08 +10:00