NodeBB / NodeBB / 29118148155

85%

master: 85%

push

github

fix(topics): require topics:read on source category for owner topic moves

Topic owners could move topics from restricted categories to public
categories after losing topics:read access, exposing private replies
to guests.

Add a source-read check in the owner path of topicsAPI.move() to
prevent this. Admins and moderators of both source and destination
categories are unaffected.

Assisted-by: unsloth/Qwen3.6-27B-GGUF

14225 of 19367 branches covered (73.45%)

2 of 2 new or added lines in 1 file covered. (100.0%)

29473 of 34492 relevant lines covered (85.45%)

3330.82 hits per line