SIGN IN SIGN UP

fix(dashboards): Restore revisions with accessible projects (#122916)

Dashboard revision restore now authorizes the saved project IDs from the
revision snapshot before deserializing it. This aligns restore with
normal dashboard edits for users who have project access through
open-membership or global-role permissions but no explicit team
membership, fixing `403` responses for dashboards with saved project
filters such as duplicated dashboards.

The snapshot IDs only scope the project lookup: the requester's current
`has_project_access` permissions still apply, and the restore remains
forbidden if any saved project is inactive, belongs to another
organization, or is no longer accessible. Regression coverage includes
both the allowed open-membership case and the denied
inaccessible-project case.
S
Shaun Kaasten committed
ef97bf63041f0495fb4e8637335f64ca675267bc
Parent: b433ee1
Committed by GitHub <noreply@github.com> on 8/28/2026, 3:24:42 PM