Scoping of tags in search returns 403
This one threw me off, because when I tried to reproduce it off meta I accidentially loaded a category rather than a tag in the search context. That was fortunate, as when I realized my mistake I at least knew how the search queries are being produced for those contexts.
Using Customization > Theme and Customization > Theme component for examples:
When we use the search context for tags our request looks like https://meta.discourse.org/search?q=topic&page=1&search_context[type]=tag&search_context[id]=theme-component, which returns 403.
When we use search context for categories, our request looks like https://meta.discourse.org/search?q=topic&page=1&search_context[type]=category&search_context[id]=61, which returns results as expected.
Alternatively, if we choose a tag from the advanced search filters our request looks like https://meta.discourse.org/search?q=tags:theme-component&page=1 and returns results with that tag.
I’m able to reproduce the &search_context[type]=tag&search_context[id]=theme-component path returning a 403 in safe-mode as well.
Are there other search_context types? I glanced at the code but wasn’t able to determine; if so, we can test them as well.