Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://gh.wpcy.net/https://github.com/discourse/discourse.git synced 2026-06-19 02:05:37 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-ai/app/models/shared_ai_conversation.rb.lock
Sam 3a45cd902e
FIX: GET preview performs state changes and can publish artifacts even when sharing is denied (#38224) 
The `preview` GET endpoint on `SharedAiConversationsController` performs
state changes (making artifacts public via `AiArtifact.share_publicly`)
and bypasses authorization by only blocking `:not_allowed` errors while
allowing `:other_people_in_pm` and `:other_content_in_pm` errors
through.

The intent was not to allow sharing in that case.
2026-04-21 15:01:07 +10:00

0 lines
Text
Vendored
Raw Permalink Blame History