版主可以创建/更改类别，导致他们失去访问权限

zogstrip · 2025年十二月12日 16:24

感谢您的报告 @Steradiant

如果用户更改了类别的权限，我们将显示一个确认对话框，提示用户即将失去对该类别的访问权限

github.com/discourse/discourse

UX: Warn moderators before they lock themselves out of a category

main ← prevent-moderator-self-lockout

opened 04:23PM - 12 Dec 25 UTC

ZogStriP

+123 -1

When moderators with `moderators_manage_categories` enabled change category perm…issions, they could accidentally remove their own access, requiring admin intervention to fix. This adds a client-side confirmation dialog that warns moderators before saving permission changes that would lock them out. If confirmed, the changes are saved and the user is redirected to the home page. Changes: - Add `_wouldLoseAccess()` check in edit-category controller that compares new permissions against the user's group memberships - Show confirmation dialog via `dialog.yesNoConfirm()` before saving - Redirect to home page after confirmed save (since user can no longer access the category edit page) - Fix `onSelectGroup` to properly set `group_id` for custom groups by looking up from `site.groups` (was only working for auto groups) Here's how the confirm dialog looks like <img width="1606" height="1043" alt="CleanShot 2025-12-12 at 17 12 55" src="https://github.com/user-attachments/assets/86e255dc-fa5c-4fde-8c86-3d3b0e03ce89" /> Ref - https://meta.discourse.org/t/390978

話題		回覆	觀看
Moderators can change groups such that they lose access Bug groups	1	141	2025年十二月19日
Moderator without access to a category can't change category notification settings for a user who does Bug	12	2498	2017年六月1日
Block Moderation on Admin Category Support	2	381	2023年五月3日
Mod permissions and access Feature	6	3574	2019年七月22日
Issue with category permissions only for moderators Bug	8	958	2019年五月10日

版主可以创建/更改类别，导致他们失去访问权限

相關主題