zulip/zerver
Sahil Batra d2ff4bda4c streams: Check creation permission when updating channel privacy.
User who did not have permission to create public channels
could create them by first creating a private or web-public
channel, if they had the permission to create them, and then
changing privacy of that stream to be a public stream.

Similarly user without permission to create private channels
could also create them.

This commit fixes both these bugs.
2025-05-15 15:37:41 -07:00
..
actions registration: Enable import from slack using realm registration form. 2025-05-14 13:24:38 -07:00
data_import migration: Rename 'populate_db' Client to 'ZulipDataImport'. 2025-05-08 12:18:34 -07:00
integration_fixtures/nagios
lib stream: Add subscriber_count field. 2025-05-13 17:36:53 -07:00
management thumbnail: Add a tool to re-thumbnail spinners, or process old images. 2025-04-23 17:41:51 -07:00
migrations stream: Add subscriber_count field. 2025-05-13 17:36:53 -07:00
models stream: Add subscriber_count field. 2025-05-13 17:36:53 -07:00
openapi users: Allow spectators to access /users API endpoint. 2025-05-15 12:37:29 -07:00
tests streams: Check creation permission when updating channel privacy. 2025-05-15 15:37:41 -07:00
tornado streams: Fix events send when archiving and unarchiving streams. 2025-04-08 12:41:09 -07:00
transaction_tests test_user_groups: Add durable=True to the independent transaction. 2024-11-21 14:55:15 -08:00
views streams: Check creation permission when updating channel privacy. 2025-05-15 15:37:41 -07:00
webhooks integrations: Use real replace_link in Slack webhook. 2025-05-07 12:45:27 -07:00
worker registration: Enable import from slack using realm registration form. 2025-05-14 13:24:38 -07:00
__init__.py
apps.py ruff: Fix UP007 Use X | Y for type annotations. 2024-07-13 22:28:22 -07:00
context_processors.py realm_creation_form: Capture import_from if realm import enabled. 2025-04-30 00:06:43 -07:00
decorator.py settings: Add "can_manage_billing_group" realm setting. 2025-03-10 09:36:30 -07:00
filters.py filters: Do not report AVATAR_SALT, or other salts. 2025-03-13 09:36:07 -07:00
forms.py registration: Enable import from slack using realm registration form. 2025-05-14 13:24:38 -07:00
logging_handlers.py ruff: Fix UP007 Use X | Y for type annotations. 2024-07-13 22:28:22 -07:00
middleware.py middleware: Parse Accept header properly. 2025-03-26 22:29:09 -07:00
signals.py send_email: Set the Date header according to local enqueue time. 2025-03-10 16:48:08 -07:00