Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-07 13:19:19 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-assign
History
Exact
discoursebot 2213240a02
 SECURITY: Honor group visibility in discourse-assign group lookups [backport 2026.5] (#41195) 
Backport of #41176 to release/2026.5.

---

Add `ensure_can_see_group` to places where we needed it before returning
the group metadata.

Also added
`.visible_groups(@guardian.user).members_visible_groups(@guardian.user)`
to guard `advanced_filter` search

---------

Co-authored-by: Gabriel Grubba <gabriel@discourse.org>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-25 13:58:12 -03:00
..
app SECURITY: Honor group visibility in discourse-assign group lookups [backport 2026.5] (#41195) 2026-06-25 13:58:12 -03:00
assets DEV: Remove enable_simplified_category_creation old code (#40108) 2026-05-27 10:04:46 +10:00
config I18N: Update translations (#40991) 2026-06-17 18:35:30 +02:00
db/migrate DEV: Skip backfill INSERTs in old migrations on fresh installs (#39976) 2026-05-13 13:59:28 +01:00
lib DEV: Enable Style/RedundantParentheses rubocop rule (#40095) 2026-05-19 15:48:09 +02:00
spec SECURITY: Honor group visibility in discourse-assign group lookups [backport 2026.5] (#41195) 2026-06-25 13:58:12 -03:00
svg-icons
test/javascripts FIX: Assignments tab can render for groups whose member list is forbidden, leading to a guaranteed 403 (#40006) 2026-05-13 15:27:11 -05:00
package.json DEV: Add a script for generating external types in discourse-types (#37095) 2026-03-09 20:37:43 +01:00
plugin.rb SECURITY: Honor group visibility in discourse-assign group lookups [backport 2026.5] (#41195) 2026-06-25 13:58:12 -03:00
README.md
tsconfig.json DEV: Add a script for generating external types in discourse-types (#37095) 2026-03-09 20:37:43 +01:00

README.md

Assign Plugin

Allows you to assign topics and individual posts (both private and public) to a user or group.

For more information, please see: https://meta.discourse.org/t/discourse-assign/58044