discourse

mirror of https://github.com/discourse/discourse.git synced 2026-08-03 09:53:24 -05:00

Files

T

Natalie Tay 90f3dc738e FIX: Enforce tag group permissions for non-admin staff (#37377 )

When a tag group is restricted to "admin only" (admins group has `full`
permission, everyone has `readonly`), moderators could still see and use
these tags. This happens because several routes use `is_staff?` to
bypass all permission filtering, treating moderators identically to
admins.

This commit changes `is_staff?` to `is_admin?`, so that the group permission
checks work as intended, and moderators will not be able to see or use
tags from "admin"-only tag groups. This affects these locations

- Tag picker when creating/editing topics
- Tag search and autocomplete
- Tag listing pages
- Tag group listings

2026-01-29 18:06:38 +08:00

bookmark_guardian.rb

DEV: Consistently use Guardian helper methods (#34024 )

2025-08-14 15:23:42 +08:00

category_guardian.rb

FEATURE: Split setting for allowing mods to manage categories and groups (#35174 )

2025-10-06 10:43:42 +03:00

ensure_magic.rb

DEV: Prefer \A and \z over ^ and $ in regexes (#19936 )

2023-01-20 12:52:49 -06:00

flag_guardian.rb

FEATURE: allow edit custom flags (#32344 )