discourse/app
Natalie Tay 55bf0e21fb
FIX: Don't show that an existing user is invited_by another user (#27665)
If an existing user (John) accepts an invite created by Kenny to a group, John may be seen as invited by Kenny, despite already having an account on the site.

This fix removes the bug by excluding invites that determine the invited_by after the user's creation date. The delay buffer in the query accounts for invites that also create the user at the same time.
2024-07-04 10:27:37 +08:00
..
assets DEV: Drop diffhtml dependency (#27695) 2024-07-04 12:24:51 +10:00
controllers FEATURE: add option to delete user associated account on password reset (#27696) 2024-07-04 06:58:00 +05:30
helpers FIX: Regression in custom homepage modifier used in theme components (#27569) 2024-06-21 11:24:11 -04:00
jobs DEV: Remove summarization code (#27373) 2024-07-02 08:51:47 -07:00
mailers FIX: correctly compute the window for email summaries 2024-05-27 22:33:51 +02:00
models FIX: Don't show that an existing user is invited_by another user (#27665) 2024-07-04 10:27:37 +08:00
serializers SECURITY: Update reviewable user serializer payload 2024-07-03 20:49:19 +08:00
services SECURITY: Don't allow suspending staff users via other_user_ids param 2024-07-03 20:49:29 +08:00
views DEV: Block accidental serialization of entire AR models (#27668) 2024-07-01 17:08:48 -03:00