discourse/lib/guardian
Martin Brennan 56eaf91589
FIX: Do not error when anon user looks at secure upload for deleted post (#19792)
If a secure upload's access_control_post was trashed, and an anon user
tried to look at that upload, they would get a 500 error rather than
the correct 403 because of an error inside the PostGuardian logic.
2023-01-09 16:12:10 +10:00
..
bookmark_guardian.rb FEATURE: Promote polymorphic bookmarks to default and migrate (#16729) 2022-05-23 10:07:15 +10:00
category_guardian.rb FIX: access to category chat only when user can create post (#19488) 2022-12-19 11:35:28 +11:00
ensure_magic.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
group_guardian.rb DEV: Remove usages of enable_personal_messages (#18437) 2022-10-05 10:50:20 +10:00
post_guardian.rb FIX: Do not error when anon user looks at secure upload for deleted post (#19792) 2023-01-09 16:12:10 +10:00
post_revision_guardian.rb DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
tag_guardian.rb DEV: TODO followups (#18936) 2022-11-09 07:48:05 +10:00
topic_guardian.rb SECURITY: Restrict unlisted topic creation (#19259) 2022-12-01 10:26:35 +00:00
user_guardian.rb FEATURE: users with no posts shouldn't able to edit username after the allowed period. (#17583) 2022-07-21 04:46:15 +05:30