Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-12 05:37:26 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-ai/app/models
History
Exact
Isaac Janzen eae3120429
 SECURITY: Shared conversations and artifacts remain accessible (#41554) 
## Summary

Prevent unauthorized access to shared AI conversations and artifacts by
verifying the visibility of source topics and posts before rendering.
The patch also ensures that destroying a shared conversation correctly
restores privacy settings for artifacts and uploads even when the source
topic has been trashed.

## Source

- Patch Triage: https://patch.discourse.org/patch-triage/1398

Co-authored-by: discourse-patch-triage
<272280883+discourse-patch-triage[bot]@users.noreply.github.com>
2026-07-08 14:41:02 -05:00
..
discourse_ai/ai_bot FEATURE: Star AI bot conversations in sidebar (#39869) 2026-05-14 15:04:31 +10:00
ai_agent.rb FIX: Bust cache so that group additions to AI helper can take effect (#41539) 2026-07-08 21:41:30 +08:00
ai_agent_mcp_server.rb FEATURE: Add MCP server integration to AI agents (#38706) 2026-03-25 17:32:27 +11:00
ai_api_audit_log.rb FEATURE: add cost limits to LLM quotas (#41277) 2026-06-30 15:59:24 +10:00
ai_api_request_stat.rb FEATURE: add cost limits to LLM quotas (#41277) 2026-06-30 15:59:24 +10:00
ai_artifact.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
ai_artifact_key_value.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
ai_artifact_version.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
ai_mcp_oauth_token.rb FEATURE: Add MCP server integration to AI agents (#38706) 2026-03-25 17:32:27 +11:00
ai_mcp_server.rb DEV: Support other OAuth token auth methods (#41219) 2026-06-26 20:30:53 +08:00
ai_moderation_setting.rb DEV: AI persona to agent migration (#38319) 2026-03-10 15:59:45 +11:00
ai_secret.rb FEATURE: Add MCP server integration to AI agents (#38706) 2026-03-25 17:32:27 +11:00
ai_spam_log.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
ai_summary.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
ai_tool.rb DEV: AI persona to agent migration (#38319) 2026-03-10 15:59:45 +11:00
ai_tool_action.rb FEATURE: Add human-in-the-loop approval queue for AI agent tool actions (#38446) 2026-03-13 12:46:59 -03:00
ai_tool_secret_binding.rb FEATURE: add credential bindings for AI tools (#37891) 2026-02-20 07:56:15 +11:00
chat_message_custom_prompt.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
classification_result.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
completion_prompt.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
embedding_definition.rb DEV: Enable Style/RedundantSelf rubocop rule (#40098) 2026-05-19 19:27:45 +02:00
inferred_concept.rb
inferred_concept_post.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
inferred_concept_topic.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
llm_credit_allocation.rb FIX: Make credit limit reset time translatable (#37226) 2026-02-19 12:36:53 +01:00
llm_credit_daily_usage.rb DEV: Move AI credits daily usage to it's own table (#36369) 2025-12-02 11:54:58 -08:00
llm_feature_credit_cost.rb
llm_model.rb FEATURE: add cost limits to LLM quotas (#41277) 2026-06-30 15:59:24 +10:00
llm_quota.rb FEATURE: add cost limits to LLM quotas (#41277) 2026-06-30 15:59:24 +10:00
llm_quota_usage.rb FEATURE: add cost limits to LLM quotas (#41277) 2026-06-30 15:59:24 +10:00
model_accuracy.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
post_custom_prompt.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
rag_document_fragment.rb DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
reviewable_ai_chat_message.rb DEV: Enable Style/RedundantParentheses rubocop rule (#40095) 2026-05-19 15:48:09 +02:00
reviewable_ai_post.rb DEV: Enable Style/RedundantParentheses rubocop rule (#40095) 2026-05-19 15:48:09 +02:00
reviewable_ai_tool_action.rb FEATURE: Allow nested automation triggers up to a recursion limit (#40672) 2026-06-09 17:03:36 +02:00
shared_ai_conversation.rb SECURITY: Shared conversations and artifacts remain accessible (#41554) 2026-07-08 14:41:02 -05:00
shared_ai_conversation.rb.lock FIX: GET preview performs state changes and can publish artifacts even when sharing is denied (#38224) 2026-04-21 15:01:07 +10:00