-
Notifications
You must be signed in to change notification settings - Fork 2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
MM-54366 Check guest access to other members #4871
Conversation
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM 👍
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM!
Cherry pick is scheduled. |
* check guest access to other members * lint fix (cherry picked from commit 134422d)
/cherry-pick release-7.11 |
Cherry pick is scheduled. |
Error trying doing the automated Cherry picking. Please do this manually
|
* check guest access to other members * lint fix (cherry picked from commit 134422d)
…) (mattermost-community#4884) * check guest access to other members * lint fix (cherry picked from commit 134422d) Co-authored-by: Scott Bishel <scott.bishel@mattermost.com> (cherry picked from commit c120e12)
…) (mattermost-community#4884) * check guest access to other members * lint fix (cherry picked from commit 134422d) Co-authored-by: Scott Bishel <scott.bishel@mattermost.com> (cherry picked from commit c120e12)
Summary
Guests should only have access to other members if they are both members of the same channel or board. This PR enforces that on the '/user' post endpoint. Also required fixing queries.
Ticket Link
Fixes https://mattermost.atlassian.net/browse/MM-54366