FIX: Do not require trust level to invite to group (#13230)

It used to require SiteSetting.min_trust_level_to_allow_invite to
invite a user to a group, even if the user existed and the inviter was
a group owner.
This commit is contained in:
Dan Ungureanu
2021-06-02 16:28:21 +03:00
committed by GitHub
parent 9d6780f03d
commit d2135b23c4
2 changed files with 11 additions and 5 deletions

View File

@ -328,8 +328,6 @@ class GroupsController < ApplicationController
unless current_user.staff?
RateLimiter.new(current_user, "public_group_membership", 3, 1.minute).performed!
end
elsif !current_user.has_trust_level?(SiteSetting.min_trust_level_to_allow_invite.to_i)
raise Discourse::InvalidAccess
end
emails = []
@ -340,6 +338,8 @@ class GroupsController < ApplicationController
end
end
guardian.ensure_can_invite_to_forum!([group]) if emails.present?
if users.empty? && emails.empty?
raise Discourse::InvalidParameters.new(I18n.t("groups.errors.usernames_or_emails_required"))
end