Discourse/discourse
Discourse/discourse
0
0
Fork 0
mirror of https://github.com/discourse/discourse.git synced 2026-08-06 13:08:40 +08:00
Code Packages Activity Actions
discourse/spec/lib/guardian
History
Exact
Régis Hanol eb75fa45f5
 FIX: allow category group moderators to view edit history (#37876) 
## Summary

- When `edit_history_visible_to_public` is disabled, category group
moderators using the review panel get an `invalid_access` error when
viewing edit history for posts in their moderated categories
- Allows category group moderators to view edit history for posts in
categories they moderate
- Updates the `edit_history_visible_to_public` setting description to
reflect this change
- Adds guardian specs plus request specs verifying category group
moderators can only view revisions in their moderated categories, and
that hidden revisions remain staff-only (both on the revisions endpoints
and the `?version=` post endpoint)

Based on #37025 by @small-lovely-cat.

Co-authored-by: small-lovely-cat <77799160+small-lovely-cat@users.noreply.github.com>
2026-07-24 16:29:06 +02:00
..
bookmark_guardian_spec.rb
flag_guardian_spec.rb
invite_guardian_spec.rb FEATURE: Allow inviting new users directly as admins (#41748) 2026-07-16 14:59:24 -07:00
localization_guardian_spec.rb FEATURE: Localizable /about page fields via its settings page (#41123) 2026-06-26 20:41:08 +08:00
post_guardian_spec.rb FIX: allow category group moderators to view edit history (#37876) 2026-07-24 16:29:06 +02:00
staff_action_log_guardian_spec.rb
tag_guardian_spec.rb FIX: Don't auto-remove chat members from logged_in_users group (#40543) 2026-06-03 18:15:32 +02:00
topic_guardian_spec.rb FEATURE: Allow topic_timers_allowed_groups to manage topic timers (#41126) 2026-06-23 12:46:56 -05:00
upload_guardian_spec.rb FIX: Enforce secure-upload ACL in AI bot prompt path (#39903) 2026-05-13 09:55:32 +08:00
user_guardian_spec.rb FIX: Reject DiscourseConnect SSO payloads when secret is blank (#40830) 2026-06-12 15:17:16 +03:00