Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-11 02:59:07 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-assign/app
History
Exact
Gabriel Grubba 8bcf5126e8
 SECURITY: Honor group visibility in discourse-assign group lookups (#41176) 
Add `ensure_can_see_group` to places where we needed it before returning
the group metadata.

Also added
`.visible_groups(@guardian.user).members_visible_groups(@guardian.user)`
to guard `advanced_filter` search

---------

Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-25 13:57:46 -03:00
..
controllers/discourse_assign SECURITY: Honor group visibility in discourse-assign group lookups (#41176) 2026-06-25 13:57:46 -03:00
jobs FEATURE: Add category-level assignment permissions (#40412) 2026-06-08 09:59:40 -05:00
mailers
models FEATURE: Add category-level assignment permissions (#40412) 2026-06-08 09:59:40 -05:00
serializers