fix(dashboards): Restore revisions with accessible projects (#122916)
Dashboard revision restore now authorizes the saved project IDs from the revision snapshot before deserializing it. This aligns restore with normal dashboard edits for users who have project access through open-membership or global-role permissions but no explicit team membership, fixing `403` responses for dashboards with saved project filters such as duplicated dashboards. The snapshot IDs only scope the project lookup: the requester's current `has_project_access` permissions still apply, and the restore remains forbidden if any saved project is inactive, belongs to another organization, or is no longer accessible. Regression coverage includes both the allowed open-membership case and the denied inaccessible-project case.
S
Shaun Kaasten committed
ef97bf63041f0495fb4e8637335f64ca675267bc
Parent: b433ee1
Committed by GitHub <noreply@github.com>
on 8/28/2026, 3:24:42 PM