FIX: moderators can add/remove group owners (#10960)

If `SiteSetting.moderators_manage_categories_and_groups` is enabled, a moderator shoud be able to add/remove group owners.
This commit is contained in:
jbrw
2020-10-19 16:30:21 -04:00
committed by GitHub
parent 5597aeb1b9
commit a74805d3f8
9 changed files with 172 additions and 7 deletions

View File

@ -90,6 +90,8 @@ class Admin::GroupsController < Admin::AdminController
raise Discourse::NotFound unless group
return can_not_modify_automatic if group.automatic
guardian.ensure_can_edit_group!(group)
users = User.where(username: group_params[:usernames].split(","))
users.each do |user|
@ -117,6 +119,7 @@ class Admin::GroupsController < Admin::AdminController
raise Discourse::NotFound unless group
return can_not_modify_automatic if group.automatic
guardian.ensure_can_edit_group!(group)
user = User.find(params[:user_id].to_i)
group.group_users.where(user_id: user.id).update_all(owner: false)