匿名ユーザーとログインユーザー向けのグループベースのきめ細かい権限

martin · 2026 年 7 月 16 日午前 3:48

martin:

例えば、グループのサイドバーメニューから取得したこの項目ですが、同じ仕組みで動作するようにすると思います。つまり、設定には以下のように記述します：
groups:
  type: groups
  required: true
  resolve_group_memberships: true
  validations:
    max: 20
その後、クライアント側では groups がブール値の user_in_groups として扱われます。

以下の PR でこれを実装しました：

github.com/discourse/discourse

DEV: Add resolve_group_membership for theme object settings of group type (#41756)

main ← dev/resolve-group-membership-theme-object-group

merged 12:19AM - 17 Jul 26 UTC

martin-brennan

+601 -14

Followup 7e77ce4bd3889820d67b52a5788357ac6f7b2f58 We need to automatically re…solve group membership into a boolean for theme object type settings which are of the group type, similar to what we did in the original commit above for group list type settings. This behaves in the same way -- for an object setting schema like this: ``` menu_sections: type: objects default: - name: section 1 groups: - 1 - 3 schema: name: menu section properties: name: type: string groups: type: groups resolve_group_membership: true ``` We replace `groups` with a boolean `user_in_groups` (groups is just the property name, it could be foo_bar etc.) and then you can do this on the client: ``` for (const section of settings.menu_sections) { if (section.user_in_groups) { // User is in at least one selected group for this section. } } ``` Rather than inspecting the `currentUser.groups`, which only includes visible groups, not all groups the user is a member of. This allows for more accurate permission checks for theme settings that are group based. Also c.f. https://meta.discourse.org/t/granular-group-based-permissions-for-anonymous-and-logged-in-users/402273/18?u=martin

また、@Lilly さんの group-sidebar-menus テーマコンポーネントに対して、フォークからこの機能を後方互換性のある形で適用する PR を作成しました：

github.com/Lillinator/group-sidebar-menus

DEV: Apply resolve_group_membership changes from core (#5)

main ← martin-brennan:dev/apply-resolve-group-changes

opened 03:43AM - 16 Jul 26 UTC

martin-brennan

+23 -12

See https://github.com/discourse/discourse/pull/41756, which must be merged fir…st `resolve_group_membership` can now be used on group type of theme setting object settings, so instead of relying on currentUser.groups which only has visible groups in the client, we can use `user_in_groups` which is automatically resolved from the server side This is backwards-compatible with sites that don't yet have the core functionality deployed

次に disallowed_groups の部分を対応させます。

トピック		返信	表示
Simpler and faster Category Settings page UX category-groups	23	424	2025 年 3 月 27 日
Changes coming to settings for giving access to features (from trust levels to groups) Announcements trust-levels	30	5656	2025 年 3 月 2 日
New category permission - "cannot see"/"exclude" Feature	36	4601	2024 年 9 月 4 日
Add groups to the /about page Theme component about-page	22	699	2025 年 3 月 21 日
Respect the visibility settings of all automatic groups Feature groups	14	883	2023 年 10 月 23 日

匿名ユーザーとログインユーザー向けのグループベースのきめ細かい権限

関連トピック