익명 및 로그인 사용자를 위한 그룹별 세밀한 권한 관리

martin · 7월 16, 2026, 3:48오전

martin:

예를 들어 그룹 사이드바 메뉴의 경우, 동일한 방식으로 작동하도록 만들 것 같습니다. 그러면 설정에서 다음과 같이 사용할 수 있습니다:
groups:
  type: groups
  required: true
  resolve_group_memberships: true
  validations:
    max: 20
이렇게 하면 클라이언트에서 groups가 user_in_groups라는 불리언 값으로 변환됩니다.

아래 PR에서 이를 구현했습니다:

github.com/discourse/discourse

DEV: Add resolve_group_membership for theme object settings of group type (#41756)

main ← dev/resolve-group-membership-theme-object-group

merged 12:19AM - 17 Jul 26 UTC

martin-brennan

+601 -14

Followup 7e77ce4bd3889820d67b52a5788357ac6f7b2f58 We need to automatically re…solve group membership into a boolean for theme object type settings which are of the group type, similar to what we did in the original commit above for group list type settings. This behaves in the same way -- for an object setting schema like this: ``` menu_sections: type: objects default: - name: section 1 groups: - 1 - 3 schema: name: menu section properties: name: type: string groups: type: groups resolve_group_membership: true ``` We replace `groups` with a boolean `user_in_groups` (groups is just the property name, it could be foo_bar etc.) and then you can do this on the client: ``` for (const section of settings.menu_sections) { if (section.user_in_groups) { // User is in at least one selected group for this section. } } ``` Rather than inspecting the `currentUser.groups`, which only includes visible groups, not all groups the user is a member of. This allows for more accurate permission checks for theme settings that are group based. Also c.f. https://meta.discourse.org/t/granular-group-based-permissions-for-anonymous-and-logged-in-users/402273/18?u=martin

그리고 @Lilly 님, 포크를 통해 group-sidebar-menus 테마 컴포넌트에 대해 이 기능을 하위 호환 방식으로 적용하는 PR을 만들었습니다:

github.com/Lillinator/group-sidebar-menus

DEV: Apply resolve_group_membership changes from core (#5)

main ← martin-brennan:dev/apply-resolve-group-changes

merged 02:56PM - 17 Jul 26 UTC

martin-brennan

+23 -12

See https://github.com/discourse/discourse/pull/41756, which must be merged fir…st `resolve_group_membership` can now be used on group type of theme setting object settings, so instead of relying on currentUser.groups which only has visible groups in the client, we can use `user_in_groups` which is automatically resolved from the server side This is backwards-compatible with sites that don't yet have the core functionality deployed

다음으로 disallowed_groups 부분을 작업할 예정입니다.

글		댓글	조회수
The road to stable, then permanent, for granular_anonymous_and_logged_in_groups_permissions Development upcoming-changes	0	90	8월 17, 2026
Simpler and faster Category Settings page UX category-groups	23	482	3월 27, 2025
Changes coming to settings for giving access to features (from trust levels to groups) Announcements trust-levels	30	5949	3월 2, 2025
New category permission - "cannot see"/"exclude" Feature	36	4780	9월 4, 2024
Custom Homepage for Groups Theme component	104	9845	8월 6, 2025

익명 및 로그인 사용자를 위한 그룹별 세밀한 권한 관리

Related topics