Skip to content

Comments

temp: Restrict forum bulk-delete to global staff only#37401

Closed
kdmccormick wants to merge 1 commit intomasterfrom
kdmccormick/forum-bulk-delete-staff-only
Closed

temp: Restrict forum bulk-delete to global staff only#37401
kdmccormick wants to merge 1 commit intomasterfrom
kdmccormick/forum-bulk-delete-staff-only

Conversation

@kdmccormick
Copy link
Member

@kdmccormick kdmccormick commented Sep 29, 2025

This is one potential solution for:

See that ^ issue for details and rationale.

This is a stop-gap solution so that the API can exist in Ulmo, but afterwards, we will either need to:

  • add MySQL forum support to this API
  • OR remove the API entirely

@kdmccormick
Copy link
Member Author

@jristau1984 @e0d , here is one potential solution for the Forum Bulk-Delete REST API. It would keep the API as-is, but it would restrict it to global staff only. This is a stop-gap solution that would allow the REST API to continue existing in Ulmo, but without security concerns. In order to keep the REST API in the platform for Verawood, it would need to be retrofitted to support MySQL forums (in addition to MongoDB forums, which it currently supports).

@kdmccormick
Copy link
Member Author

Dupe of #37683

@kdmccormick kdmccormick deleted the kdmccormick/forum-bulk-delete-staff-only branch January 14, 2026 21:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant