Quoting a closed topic prefills category in composer that should be off-limits

awesomerobot · January 13, 2025, 10:28pm

I’ve got a little fix in the works here

github.com/discourse/discourse

UX: check category permission before new topic quote

main ← ux-quote-new-topic

merged 01:28PM - 14 Jan 25 UTC

awesomerobot

+3 -1

Reported here: https://meta.discourse.org/t/quoting-a-closed-topic-prefills-cate…gory-in-composer-that-should-be-off-limits/260009 Currently, if someone tries to quote a topic they don't have permission to reply to, we'll open a new topic composer with the quote so they can "continue the discussion". When doing this, we populate the current category, even if the user doesn't have permission to post in it. This is misleading, as when the user attempts to submit their topic they get an error because they lack the category permissions. This change checks the category permissions before populating it.

Topic		Replies	Views
Way to bypass restrictions on what categories you can post in Bug	4	115	January 13, 2025
Composer shortcut should be disabled if user isn't allowed to post Bug	11	1279	December 22, 2017
It is not possible to quote closed topics [Solved] Bug	12	1329	August 2, 2022
New Topic button enabled to restricted users Support	9	153	July 29, 2025
Force users to pick category Support composer	27	340	August 8, 2025

Quoting a closed topic prefills category in composer that should be off-limits

Related topics