Tim Abbott 41d499d44c message_edit: Require access to messages to move between streams. ...

Currently, moving messages between streams is an action limited to
organization administrators. A big part of the motivation for that
restriction was to prevent users from moving messages from a private
stream without shared history as a way to access messages they should
not have access to.

Organization administrators can already just make the stream have
shared history if they want to access its messages, but allowing
non-administrators to move messages between would have
introduced a security bug without this change.

2021-05-12 16:23:22 -07:00

..

fixtures

markdown: Add support for sms and tel links.

2021-05-10 15:15:34 -07:00

images

…

__init__.py

…

test_alert_words.py

alert_words: Fix highlighting of adjacent alert words.

2021-04-28 07:54:50 -07:00

test_archive.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_attachments.py

…

test_audit_log.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_auth_backends.py

tests: Remove duplicate verify_backend() calls.

2021-05-10 13:56:06 -07:00

test_bots.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_cache.py

…

test_compatibility.py

…

test_context_processors.py

UI: Add Zulip version in gear menu.

2021-04-30 17:58:08 -07:00

test_create_video_call.py

api: Fix encoding of strings in video calls endpoint.

2021-05-07 14:11:48 -07:00

test_custom_profile_data.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_data_types.py

…

test_decorators.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_digest.py

…

test_docs.py

navbar: Adjust label for usage statistics.

2021-05-12 10:34:12 -07:00

test_drafts.py

python: Strip leading and trailing spaces from docstrings.

2021-05-07 22:42:39 -07:00

test_email_change.py

test_email_change: User create_confirmation_link for url.

2021-05-04 10:48:51 -07:00

test_email_log.py

…

test_email_mirror.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_email_notifications.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_embedded_bot_system.py

logging: use assertEqual to assert logging output.

2021-03-25 01:10:03 -07:00

test_event_queue.py

refactor: Make acting_user a mandatory kwarg for do_change_subscription_property.

2021-04-08 17:50:10 -07:00

test_event_system.py

presence: Disable live presence updates in larger realms.

2021-05-05 08:50:42 -07:00

test_events.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_external.py

…

test_github.py

…

test_gitter_importer.py

…

test_home.py

tests: Create assertNotInHomePage helper function.

2021-05-12 10:34:12 -07:00

test_hotspots.py

api: Fix encoding of strings in hotspot endpoint.

2021-05-07 11:45:25 -07:00

test_i18n.py

templates: Remove context argument from {{#tr}} block helper.

2021-04-13 18:59:46 -07:00

test_import_export.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_integrations_dev_panel.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_integrations.py

tests: Add a test for fixtures for non-webhook integrations.

2021-04-28 08:16:51 -07:00

test_internet.py

…

test_legacy_subject.py

…

test_link_embed.py

backend: Extract check_update_message from update_message_backend.

2021-05-09 20:44:04 -07:00

test_logging_handlers.py

…

test_management_commands.py

send_custom_email: Improve printing of outgoing emails.

2021-04-27 21:36:17 -07:00

test_markdown.py

markdown: Fix silent wildcard mentions bug.

2021-05-10 12:19:40 -07:00

test_mattermost_importer.py

…

test_message_dict.py

CVE-2021-30478: Prevent API super users from forging messages to other organizations.

2021-04-14 12:37:34 -07:00

test_message_edit_notifications.py

emails: Rename "missed message email" to "message notification email".

2021-04-21 10:10:54 -07:00

test_message_edit.py

message_edit: Require access to messages to move between streams.

2021-05-12 16:23:22 -07:00

test_message_fetch.py

refactor: Make acting_user a mandatory kwarg for do_deactivate_user.

2021-03-29 15:51:45 -07:00

test_message_flags.py

bulk_access_messages: Bulk fetch Subscription details.

2021-05-12 16:23:22 -07:00

test_message_send.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_message_topics.py

…

test_messages.py

…

test_middleware.py

…

test_migrations.py

…

test_mirror_users.py

…

test_muting_topics.py

refactor: Rename backend muting tests to be specific.

2021-04-05 18:04:31 -07:00

test_muting_users.py

mute user: Mark as read old messages immediately.

2021-04-13 09:08:47 -07:00

test_new_users.py

test users: Add an escape char to a test username.

2021-04-13 11:42:06 -07:00

test_onboarding.py

…

test_openapi.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_outgoing_http.py

outgoing_http: Provide a convenient way to set default headers.

2021-05-07 08:39:36 -07:00

test_outgoing_webhook_interfaces.py

outgoing_webhook: Improve invalid json handling when parsing response.

2021-04-26 09:32:35 -07:00

test_outgoing_webhook_system.py

outgoing_webhook: Send response payload to bot owner if it was invalid.

2021-05-11 14:27:00 -07:00

test_populate_db.py

…

test_presence.py

docs: Add missing space to compound verbs “log in”, “set up”, etc.

2021-04-26 09:31:08 -07:00

test_push_notifications.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_queue_worker.py

emails: Transform SMTPException into EmailNotDeliveredException.

2021-05-05 20:16:11 -07:00

test_queue.py

…

test_rate_limiter.py

…

test_reactions.py

docs: Fix spelling errors caught by codespell.

2021-04-26 09:31:08 -07:00

test_realm_domains.py

tests: Clean up tests for realm_domain and update_streams endpoint.

2021-05-12 12:38:16 -07:00

test_realm_emoji.py

…

test_realm_export.py

…

test_realm_linkifiers.py

linkifiers: Add an API to support the editing of linkifier.

2021-04-19 18:01:45 -07:00

test_realm_playgrounds.py

playgrounds: Avoid json encoding each field in POST /realm/playgrounds.

2021-04-19 11:23:09 -07:00

test_realm.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_redis_utils.py

…

test_report.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_retention.py

python: Strip leading and trailing spaces from docstrings.

2021-05-07 22:42:39 -07:00

test_send_email.py

send_email: Show more information about messages which failed to send.

2021-05-11 14:27:45 -10:00

test_service_bot_system.py

…

test_sessions.py

migrations: Subscription.is_user_active denormalization - step one.

2021-03-30 09:19:03 -07:00

test_settings.py

api: Fix encoding of strings in display settings endpoint.

2021-05-10 10:03:32 -07:00

test_signup.py

management: Rename the deliver_email command to deliver_scheduled_email.

2021-05-11 13:07:29 -07:00

test_slack_importer.py

audit log: Create audit log when a realm is created.

2021-04-30 09:25:11 -07:00

test_slack_message_conversion.py

…

test_soft_deactivation.py

performance: Add get_subscriptions_for_send_message.

2021-05-12 08:10:57 -07:00

test_subdomains.py

markdown: Rewrite all external images to use Camo.

2021-04-30 10:36:16 -07:00

test_submessage.py

…

test_subs.py

tests: Clean up tests for realm_domain and update_streams endpoint.

2021-05-12 12:38:16 -07:00

test_templates.py

…

test_thumbnail.py

requirements: Remove Thumbor.

2021-05-06 20:07:32 -07:00

test_timestamp.py

…

test_timezone.py

docs: Fix spelling errors caught by codespell.

2021-04-26 09:31:08 -07:00

test_tornado.py

tornado: Explicitly mark requests as varying by cookie.

2021-04-02 14:55:22 -07:00

test_transfer.py

…

test_tutorial.py

api: Fix encoding of strings in tutorial endpoint.

2021-05-07 14:06:54 -07:00

test_type_debug.py

…

test_typing.py

typing: Support sending stream/topic typing status.

2021-04-27 20:52:21 -07:00

test_upload.py

upload: Refactor and add tests for ensure_avatar_image in upload.py.

2021-04-29 21:18:13 -07:00

test_urls.py

api: Delete ancient fetch_google_client_id endpoint.

2021-04-08 06:10:39 -07:00

test_user_groups.py

docs: Fix capitalization mistakes.

2021-05-10 09:57:26 -07:00

test_user_status.py

…

test_users.py

performance: Add get_subscriptions_for_send_message.

2021-05-12 08:10:57 -07:00

test_webhooks_common.py

…

test_widgets.py

…

test_zcommand.py

…

test_zephyr.py

docs: Add missing space to compound verbs “log in”, “set up”, etc.

2021-04-26 09:31:08 -07:00