Files
discourse/lib
Joffrey JAFFEUX 31f5185577 FIX: Add server-side trust level check for delete all posts (#37773)
The original commit
https://github.com/discourse/discourse/commit/ce2ca19d added a
frontend-only restriction to hide the "delete all posts" option when penalizing users at trust level 2 or above. However, this restriction was not enforced on the server side.

This is not security as it's mostly a safeguard and not a security feature. The same user could delete posts one by one if they wanted to.
2026-02-13 09:07:18 +01:00
..
2022-04-28 11:51:03 +02:00
2024-08-12 10:41:13 +02:00
2025-11-25 13:35:32 -05:00
2024-11-06 06:27:49 +08:00
2023-02-21 10:30:48 +01:00
2020-07-21 15:55:03 +08:00
2025-07-24 22:04:13 +02:00