# Embedded media post allowed groups conflicts with post moderation workflow: unhide! fails with ActiveRecord::RecordInvalid

**URL:** <https://meta.discourse.org/t/embedded-media-post-allowed-groups-conflicts-with-post-moderation-workflow-unhide-fails-with-activerecord-recordinvalid/390575>\
**Category:** Bug\
**Created:** [December 6, 2025, 11:30am UTC](https://meta.discourse.org/t/embedded-media-post-allowed-groups-conflicts-with-post-moderation-workflow-unhide-fails-with-activerecord-recordinvalid/390575 "2025-12-06T11:30:31Z")\
**Posts on this page:** 1\
**Showing post:** 2

<div class="post-metadata">

**Author:** ![sam](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/sam/32/102149_2.png) [@sam](https://meta.discourse.org/u/sam)\
**Post date:** [December 8, 2025, 1:01am UTC](https://meta.discourse.org/t/embedded-media-post-allowed-groups-conflicts-with-post-moderation-workflow-unhide-fails-with-activerecord-recordinvalid/390575/2 "2025-12-08T01:01:48Z")

</div>

@kris.kotlarek how do you feel about

[https://github.com/discourse/discourse/pull/36512](https://github.com/discourse/discourse/pull/36512)

I think it is safe, specifically cause there is a callsite that still expects validation: `PostRevisor#remove_flags_and_unhide_post` so the extra param allows us to give it a bit more safety.

That said, these code paths are very complicated… so it is worth a careful review.

---

_[View the full topic](https://meta.discourse.org/t/embedded-media-post-allowed-groups-conflicts-with-post-moderation-workflow-unhide-fails-with-activerecord-recordinvalid/390575)._