-
- Downloads
Don't treat anonymous users as owners when group has pending invites
The `members` table can have entries where `user_id: nil`, because people can invite group members by email. We never want to include those as members, because it might cause confusion with the anonymous (logged out) user.
Showing
- app/models/group.rb 5 additions, 1 deletionapp/models/group.rb
- app/policies/project_policy.rb 2 additions, 1 deletionapp/policies/project_policy.rb
- changelogs/unreleased/35444-error-500-viewing-notes-with-anonymous-user.yml 4 additions, 0 deletions...sed/35444-error-500-viewing-notes-with-anonymous-user.yml
- spec/models/ability_spec.rb 4 additions, 4 deletionsspec/models/ability_spec.rb
- spec/models/group_spec.rb 4 additions, 0 deletionsspec/models/group_spec.rb
- spec/policies/project_policy_spec.rb 18 additions, 0 deletionsspec/policies/project_policy_spec.rb
Loading
Please register or sign in to comment