관리자가 카테고리를 생성하거나 변경하여 접근 권한을 잃을 수 있습니다

zogstrip · 12월 12, 2025, 4:24오후

보고해 주셔서 감사합니다 @Steradiant

사용자가 권한을 변경하여 카테고리 접근 권한을 잃게 될 경우 확인 다이얼로그를 표시하도록 개선되었습니다

github.com/discourse/discourse

UX: Warn moderators before they lock themselves out of a category (#36663)

main ← prevent-moderator-self-lockout

merged 08:47AM - 18 Dec 25 UTC

ZogStriP

+123 -1

When moderators with `moderators_manage_categories` enabled change category perm…issions, they could accidentally remove their own access, requiring admin intervention to fix. This adds a client-side confirmation dialog that warns moderators before saving permission changes that would lock them out. If confirmed, the changes are saved and the user is redirected to the home page. Changes: - Add `_wouldLoseAccess()` check in edit-category controller that compares new permissions against the user's group memberships - Show confirmation dialog via `dialog.yesNoConfirm()` before saving - Redirect to home page after confirmed save (since user can no longer access the category edit page) - Fix `onSelectGroup` to properly set `group_id` for custom groups by looking up from `site.groups` (was only working for auto groups) Here's how the confirm dialog looks like <img width="1606" height="1043" alt="CleanShot 2025-12-12 at 17 12 55" src="https://github.com/user-attachments/assets/86e255dc-fa5c-4fde-8c86-3d3b0e03ce89" /> Ref - https://meta.discourse.org/t/390978

글		댓글	조회수
Moderators can change groups such that they lose access Bug groups	1	137	12월 19, 2025
Moderator without access to a category can't change category notification settings for a user who does Bug	12	2479	6월 1, 2017
Block Moderation on Admin Category Support	2	365	5월 3, 2023
Mod permissions and access Feature	6	3542	7월 22, 2019
Issue with category permissions only for moderators Bug	8	926	5월 10, 2019

관리자가 카테고리를 생성하거나 변경하여 접근 권한을 잃을 수 있습니다

Related topics