Ghost/core/server/models
Katharina Irrgang 217bc6914d 🐛 Fixed returning roles for the public user resource (#9039)
no issue

- this bug fix affects all endpoints for the public user access
- we allowed fetching `roles` via the public api by accident
- see our docs: https://api.ghost.org/docs/users)
  - we only allow `count.posts`
- returning roles via the public api exposes too many details
- this was never attentional
2017-09-25 11:18:23 +01:00
..
base 🐛 Fixed returning roles for the public user resource (#9039) 2017-09-25 11:18:23 +01:00
plugins 🐛 Added 409 UpdateCollisionError for the editor (#8899) 2017-08-15 12:06:40 +02:00
accesstoken.js 🎨 register events in base model (#7560) 2016-10-14 13:37:01 +01:00
app-field.js Misc cleanup: moving files & naming functions 2015-06-15 09:43:19 +01:00
app-setting.js Misc cleanup: moving files & naming functions 2015-06-15 09:43:19 +01:00
app.js 🎨 register events in base model (#7560) 2016-10-14 13:37:01 +01:00
client-trusted-domain.js Add table columns for OAuth 2015-09-02 13:39:22 +01:00
client.js 🎨 😎 config env usages (#7929) 2017-02-03 18:25:39 +00:00
index.js 🎨 Separate invites from user 2016-09-26 11:08:43 +02:00
invite.js 🎨 invites roles table into a field on the invites table (#7705) 2016-11-16 09:33:44 +00:00
permission.js Misc cleanup: moving files & naming functions 2015-06-15 09:43:19 +01:00
post.js 🐛 Fixed disqus comment id when exporting/importing 1.x content 2017-09-12 16:29:59 +01:00
refreshtoken.js Misc cleanup: moving files & naming functions 2015-06-15 09:43:19 +01:00
role.js Error creation (#7477) 2016-10-06 13:27:35 +01:00
settings.js 🎨 do not run model listeners on import (#8720) 2017-07-21 09:58:58 +01:00
subscriber.js replace auto increment id's by object id (#7495) 2016-11-17 09:09:11 +00:00
tag.js 🎨 register events in base model (#7560) 2016-10-14 13:37:01 +01:00
user.js 🐛 Fixed returning roles for the public user resource (#9039) 2017-09-25 11:18:23 +01:00