モデレーターがカテゴリを作成/変更するとアクセス権を失うことがある

zogstrip · 2025 年 12 月 12 日午後 4:24

ご報告ありがとうございます @Steradiant

カテゴリの権限を変更する際に、ユーザーがそのカテゴリへのアクセス権を失う可能性がある場合、確認ダイアログを表示するようにします。

github.com/discourse/discourse

UX: Warn moderators before they lock themselves out of a category

main ← prevent-moderator-self-lockout

opened 04:23PM - 12 Dec 25 UTC

ZogStriP

+123 -1

When moderators with `moderators_manage_categories` enabled change category perm…issions, they could accidentally remove their own access, requiring admin intervention to fix. This adds a client-side confirmation dialog that warns moderators before saving permission changes that would lock them out. If confirmed, the changes are saved and the user is redirected to the home page. Changes: - Add `_wouldLoseAccess()` check in edit-category controller that compares new permissions against the user's group memberships - Show confirmation dialog via `dialog.yesNoConfirm()` before saving - Redirect to home page after confirmed save (since user can no longer access the category edit page) - Fix `onSelectGroup` to properly set `group_id` for custom groups by looking up from `site.groups` (was only working for auto groups) Here's how the confirm dialog looks like <img width="1606" height="1043" alt="CleanShot 2025-12-12 at 17 12 55" src="https://github.com/user-attachments/assets/86e255dc-fa5c-4fde-8c86-3d3b0e03ce89" /> Ref - https://meta.discourse.org/t/390978

トピック		返信	表示
Moderators can change groups such that they lose access Bug groups	1	100	2025 年 12 月 19 日
Moderator without access to a category can't change category notification settings for a user who does Bug	12	2420	2017 年 6 月 1 日
Block Moderation on Admin Category Support	2	322	2023 年 5 月 3 日
Mod permissions and access Feature	6	3476	2019 年 7 月 22 日
Issue with category permissions only for moderators Bug	8	871	2019 年 5 月 10 日

モデレーターがカテゴリを作成/変更するとアクセス権を失うことがある

関連トピック