Group Histories 的日志记录漏洞

martin · 2026 年2 月 4 日 06:21

抱歉，这花了一些时间，出现了其他优先事项。我已提交一个拉取请求（PR）供审查，应该不会太久了：

github.com/discourse/discourse

FIX: Logging hole in group user histories and convert group create to service (#37054)

main ← issue/group-logging-hole-and-refactor

opened 03:57AM - 12 Jan 26 UTC

martin-brennan

+501 -25

When creating groups, we weren't logging the group owner as being the owner in …group histories, nor were we logging them being added to the group. So it was not clear in the user logs where this user ever came from. This PR fixes the issue, and also converts the admin group create endpoint to use a service. Now the logs look like this when a group is created: <img width="830" height="378" alt="image" src="https://github.com/user-attachments/assets/871e319a-5512-411e-8565-3b63803e688c" /> c.f. https://meta.discourse.org/t/logging-hole-for-group-histories/392942

话题		回复	浏览量
New logging functionality: delete/add group Feature	0	406	2019 年8 月 6 日
Logs for users added to groups Feature groups	0	45	2025 年2 月 11 日
Add group owners to manage group membership Site Management groups , how-to	2	11890	2026 年4 月 29 日
Users cannot see who is a group owner Bug	2	57	2026 年5 月 14 日
Adding owners/members UX is inconsistent and misleading UX	26	3121	2018 年4 月 20 日

Group Histories 的日志记录漏洞

相关话题