Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Permissions Cleanup: Core #2212

Closed
wants to merge 4 commits into from
Closed

Permissions Cleanup: Core #2212

wants to merge 4 commits into from

Conversation

askvortsov1
Copy link
Sponsor Member

@askvortsov1 askvortsov1 commented Jun 27, 2020

Fixes #1680

Changes proposed in this pull request:

  • Rename viewDiscussions to viewForum
  • Rename viewUserList to searchUsers
  • Revert 40e4c0a
  • Add migrations to update permission keys
  • Fix an improperly configured test

Reviewers should focus on:
This is marked as draft until we agree upon #2202

Confirmed

  • Frontend changes: tested on a local Flarum installation.
  • Backend changes: tests are green (run composer test).

@askvortsov1 askvortsov1 marked this pull request as draft June 27, 2020 20:42
@askvortsov1 askvortsov1 changed the title Clean up viewDiscussions, viewUserList permissions Permissions Cleanup: Core Jun 27, 2020
@dsevillamartin
Copy link
Member

I do not think we should change the viewUserList permission to searchUsers as that is still misleading with its current behavior. It doesn't only prevent searching users, but also from visiting user profiles directly.

@askvortsov1
Copy link
Sponsor Member Author

That's also changed though, see the modifications to User Policy

@dsevillamartin
Copy link
Member

dsevillamartin commented Jun 28, 2020

Ah I see. That wasn't clear from the PR description so I got confused. 👍

@stale
Copy link

stale bot commented Sep 26, 2020

This issue has been automatically marked as stale because it has not had recent activity. It will be closed if no further activity occurs. We do this to keep the amount of open issues to a manageable minimum.
In any case, thanks for taking an interest in this software and contributing by opening the issue in the first place!

@stale stale bot added the stale Issues that have had over 90 days of inactivity label Sep 26, 2020
@askvortsov1 askvortsov1 added the org/keep Issues we want to keep open label Sep 26, 2020
@stale stale bot removed the stale Issues that have had over 90 days of inactivity label Sep 26, 2020
@askvortsov1
Copy link
Sponsor Member Author

If this happens, it will happen in a separate PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
org/keep Issues we want to keep open
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Guests can see user profile regardless of the permission "view user list"
3 participants