Skip to content

Introduce a new relation for members finders

What does this MR do and why?

This is a follow-up of !144446 (merged) and !143651 (merged).

I have introduced a new relation called shared_including_no_access_groups to include invited private group members when the current user is a member of the shared group. If the current user is not a member of the shared group then we return the public and visible members. The reason for introducing this new relation is to make it explicit to the consumers of these finders that they're including private members and they should mask the relevant information from unauthorized users like masking group name/path from non-members of the invited private group.

MR acceptance checklist

Please evaluate this MR against the MR acceptance checklist. It helps you analyze changes to reduce risks in quality, performance, reliability, security, and maintainability.

Query plans

Queries haven't changed. If you want to see the query plans refer to:

How to set up and validate locally

See How to set up and validate locally in !143651 (merged) and !144446 (merged).

Related to #418789

Merge request reports