Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Revert https://github.com/flarum/core/pull/1536 #2305

Merged
merged 2 commits into from
Sep 24, 2020

Conversation

askvortsov1
Copy link
Sponsor Member

@askvortsov1 askvortsov1 commented Sep 24, 2020

Refs #1680. The rest will be fixed in #2212, but we can get this particular bug fixed in time for the next release.

Essentially, among our permission scheme, we have the viewDiscussions and viewUserList permissions. The first actually serves as a generic access permission for the entire forum, while the second is intended for the LIST users API. IE, viewUserList controls whether the list of users can be searched. This is further explained in #1680 (comment).

This PR fixes the second part of that comment, so that people stop seeing errors when refreshing the page after going to a user profile. This means that the viewUserList permission can now be used as intended, and unnecessary user searching can be restricted.

The rest (renaming permissions) will be done in #2212, but we need to discuss (and agree upon) a permission naming convention first.

@clarkwinkelmann
Copy link
Member

Context? All the linked stuff seems to be from 2018?

@askvortsov1
Copy link
Sponsor Member Author

Sorry about that, I've updated the PR description.

Copy link
Member

@clarkwinkelmann clarkwinkelmann left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok, makes more sense.

Maybe I wouldn't have called this a revert since it's so long ago, but I agree with the change. I didn't test locally though.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants