Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-09 21:45:25 +08:00
Code Packages Activity Actions
discourse/plugins/discourse-assign/app
History
Exact
discoursebot 2213240a02
 SECURITY: Honor group visibility in discourse-assign group lookups [backport 2026.5] (#41195) 
Backport of #41176 to release/2026.5.

---

Add `ensure_can_see_group` to places where we needed it before returning
the group metadata.

Also added
`.visible_groups(@guardian.user).members_visible_groups(@guardian.user)`
to guard `advanced_filter` search

---------

Co-authored-by: Gabriel Grubba <gabriel@discourse.org>
Co-authored-by: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-25 13:58:12 -03:00
..
controllers/discourse_assign SECURITY: Honor group visibility in discourse-assign group lookups [backport 2026.5] (#41195) 2026-06-25 13:58:12 -03:00
jobs
mailers
models DEV: Always pass --force to annotaterb and reorder annotations (#39977) 2026-05-13 14:12:48 +01:00
serializers