Group Histories 的日志记录漏洞

martin · 2026年二月4日 06:21

抱歉，这花了一些时间，出现了其他优先事项。我已提交一个拉取请求（PR）供审查，应该不会太久了：

github.com/discourse/discourse

FIX: Logging hole in group user histories and convert group create to service (#37054)

main ← issue/group-logging-hole-and-refactor

opened 03:57AM - 12 Jan 26 UTC

martin-brennan

+501 -25

When creating groups, we weren't logging the group owner as being the owner in …group histories, nor were we logging them being added to the group. So it was not clear in the user logs where this user ever came from. This PR fixes the issue, and also converts the admin group create endpoint to use a service. Now the logs look like this when a group is created: <img width="830" height="378" alt="image" src="https://github.com/user-attachments/assets/871e319a-5512-411e-8565-3b63803e688c" /> c.f. https://meta.discourse.org/t/logging-hole-for-group-histories/392942

話題		回覆	觀看
New logging functionality: delete/add group Feature	0	421	2019年八月6日
Add group owners to manage group membership Site Management groups , how-to	2	12042	2026年四月29日
Logs for users added to groups Feature groups	0	57	2025年二月11日
"You cannot allow membership requests without any owners." UX	2	1190	2017年七月27日
Users cannot see who is a group owner Bug	1	103	2026年五月13日

Group Histories 的日志记录漏洞

相關主題