Way to bypass restrictions on what categories you can post in

AI-generated summary

A user Esb678 reported a bug in Discourse where quoting a post from a restricted category (like a rules category) in the composer sets the new topic’s category to that restricted one, potentially allowing access to otherwise off-limits areas. awesomerobot confirmed this is a Discourse-wide issue but noted that posting is blocked unless the category is changed. The issue is considered a usability problem, as the composer should fall back to a default or no category instead of prefilling with a restricted one. Moin referenced a prior report on the same issue [here](https://meta.discourse.org/t/quoting-a-clo sed-topic-prefills-category-in-composer-that-should-be-off-limits/260009?u=moin).

I recently noticed this glitch where if you go to a category that you cannot post in (such as a rules category) and you quote something, it sets the category to that category that you quoted from. Here is an example from the Stateview Forums: where I quoted one random word:

This may only be on that site, but I just want to make sure that this isn’t a discourse wide issue, as this could be a problem.

Also, I haven’t actually tried posting it, I don’t want to get in trouble there.

3 Likes

I can reproduce this issue on a test site, so it’s a Discourse-wide issue, but when this happens you’re not allowed to post the topic unless you change the category to one you have permission to create in.

Ideally we should update this to fallback to the default category or no category selected.

Thanks for reporting it!

4 Likes

Oh, ok, but it should still be fixed so that it doesn’t show the current category, as it would cause confusion, and no problem!

2 Likes

I think this was already reported in Quoting a closed topic prefills category in composer that should be off-limits

4 Likes

Let’s keep it in the original topic (thanks for the report!)