Restrict themes to certain groups?

david · May 22, 2018, 12:11am

As a starting point, you could have a look at how theme access is overridden for the theme-creator.discourse.org system:

github.com/discourse/discourse-theme-creator

plugin.rb

933a72c6f


      
          # Override guardian to allow users to preview their own themes using the ?preview_theme_key= variable
          add_to_class(:guardian, :allow_theme?) do |theme_key|
            return true if Theme.user_theme_keys.include?(theme_key) # Is a 'user selectable theme'
            return false if not Theme.theme_keys.include?(theme_key) # Is not a valid theme
          
            # If you own the theme, you are allowed to view it using GET param
            # Even staff are not allowed to use GET to access other user's themes, to reduce XSS attack risk
            can_hotlink_user_theme? Theme.find_by(key: theme_key)
          end

The allow_theme? method is used in Discourse’s application controller here:

github.com/discourse/discourse

app/controllers/application_controller.rb

661d89f48


      
          def handle_theme
          
            return if request.xhr? || request.format == "json" || request.format == "js"
            return if request.method != "GET"
          
            resolve_safe_mode
            return if request.env[NO_CUSTOM]
          
            theme_key = request[:preview_theme_key]
          
            user_option = current_user&.user_option
          
            unless theme_key
              key, seq = cookies[:theme_key]&.split(",")
              if key && seq && seq.to_i == user_option&.theme_key_seq.to_i
                theme_key = key
              end
            end
          
            theme_key ||= user_option&.theme_key

This file has been truncated. show original

As Sam said, what you want to do is possible, but it will require a fair amount of development work to get it working smoothly

Topic		Replies	Views
Can I make a theme available to specific user groups only? Dev horizon-theme	11	193	April 21, 2025
How to define custom permissions for staff, admins, moderators Support	34	3554	April 29, 2023
Show/hide themes for specific groups? Support	16	1258	September 15, 2022
How to assign a theme to a group? Support	5	1175	June 8, 2024
Can I use a theme I created without allowing it to be used by others? Support	5	1117	January 19, 2021

Restrict themes to certain groups?

Related topics