mirror of
https://gh.wpcy.net/https://github.com/discourse/discourse.git
synced 2026-05-13 15:52:34 +08:00
a2031bbaac
We could potentially return limited information to moderators who shouldn't have access to it. We considered this as FIX and not SECURITY as this endpoint is limited to staff only and is only returning group names. Also you would need to know the category ID as it wouldn't show in the UI if you can't access it. |
||
|---|---|---|
| .. | ||
| admin | ||
| api | ||
| api_controller.rb | ||
| base_controller.rb | ||
| chat_controller.rb | ||
| direct_messages_controller.rb | ||
| incoming_webhooks_controller.rb | ||
