Group Histories 的日志记录漏洞

martin · 2026 年2 月 4 日 06:21

抱歉，这花了一些时间，出现了其他优先事项。我已提交一个拉取请求（PR）供审查，应该不会太久了：

github.com/discourse/discourse

FIX: Logging hole in group user histories and convert group create to service (#37054)

main ← issue/group-logging-hole-and-refactor

opened 03:57AM - 12 Jan 26 UTC

martin-brennan

+501 -25

When creating groups, we weren't logging the group owner as being the owner in …group histories, nor were we logging them being added to the group. So it was not clear in the user logs where this user ever came from. This PR fixes the issue, and also converts the admin group create endpoint to use a service. Now the logs look like this when a group is created: <img width="830" height="378" alt="image" src="https://github.com/user-attachments/assets/871e319a-5512-411e-8565-3b63803e688c" /> c.f. https://meta.discourse.org/t/logging-hole-for-group-histories/392942

话题		回复	浏览量
New logging functionality: delete/add group Feature	0	403	2019 年8 月 6 日
Logs for users added to groups Feature groups	0	36	2025 年2 月 11 日
Add group owners to manage group membership Site Management groups , how-to	0	11757	2015 年12 月 2 日
Adding owners/members UX is inconsistent and misleading UX	26	3029	2018 年4 月 20 日
"You cannot allow membership requests without any owners." UX	3	1116	2023 年4 月 5 日

Group Histories 的日志记录漏洞

相关话题