Ghost/core/server/models
Fabien O'Carroll 1962591c2e 🔒 Fixed permissible method for Integration Model
refs https://github.com/TryGhost/Ghost/security/advisories/GHSA-j5c2-hm46-wp5c

The permissible method of models overrides all permission logic, which
means we must manually check the user & api key permissions before
continuing.
2021-07-20 13:43:29 +01:00
..
base Added comments to all usages of lib/common/events 2021-07-07 16:02:44 +01:00
relations Improved single author deprecated notices 2021-05-04 17:11:12 +01:00
action.js Added model implementation for actions 2019-02-06 21:36:09 +01:00
api-key.js Extracted Bookshelf actions code to plugin 2021-06-17 12:04:38 +01:00
author.js Added plugin based author and public tag models in API v2 (#10284) 2019-01-03 20:30:35 +01:00
benefit.js Added Benefit model 2021-06-29 16:53:15 +01:00
email-batch.js Fixed creation of EmailBatch and EmailRecipient collections 2020-10-14 15:11:45 +01:00
email-recipient.js Removed unnecessary bookshelf-relations config in EmailRecipient model 2021-01-05 15:28:30 +00:00
email.js Added ability to send a newsletter to members with a certain label or product (#12932) 2021-05-07 11:56:41 +01:00
index.js Added Benefit model 2021-06-29 16:53:15 +01:00
integration.js 🔒 Fixed permissible method for Integration Model 2021-07-20 13:43:29 +01:00
invite.js Moved settings/cache to shared/settings-cache 2021-06-30 15:49:10 +01:00
label.js Moved i18n to shared 2021-05-04 13:03:38 +01:00
member-email-change-event.js Added member relation to events (#12656) 2021-02-16 16:14:20 +00:00
member-login-event.js Added member relation to events (#12656) 2021-02-16 16:14:20 +00:00
member-paid-subscription-event.js Added member relation to events (#12656) 2021-02-16 16:14:20 +00:00
member-payment-event.js Added member relation to events (#12656) 2021-02-16 16:14:20 +00:00
member-status-event.js Readded support for comped status in event aggregate (#13142) 2021-07-15 15:17:51 +01:00
member-stripe-customer.js Added error handling for failed member imports 2020-08-26 17:11:35 +12:00
member-subscribe-event.js Added member relation to events (#12656) 2021-02-16 16:14:20 +00:00
member.js 🐛 Fixed error on saving member with existing label 2021-07-16 14:01:47 +05:30
mobiledoc-revision.js Added mobiledoc revisions functionality 2018-10-09 15:31:09 +02:00
permission.js Updated var declarations to const/let and no lists 2020-04-29 16:51:13 +01:00
post.js Moved settings/cache to shared/settings-cache 2021-06-30 15:49:10 +01:00
posts-meta.js 🐛 Fixed performance regression introduced in 4.1.0 (#12807) 2021-03-23 09:11:24 +00:00
product.js Added benefits relation to Product model 2021-06-29 16:53:15 +01:00
role.js Moved i18n to shared 2021-05-04 13:03:38 +01:00
session.js 🔒 Added a "reset all passwords" feature (#13005) 2021-06-23 14:54:28 +02:00
settings.js Moved labs utlity to shared 2021-07-08 09:05:41 +01:00
single-use-token.js Change to use @tryghost/logging 2021-06-15 15:59:11 +01:00
snippet.js Fixed no-restricted-require warning for core/shared/url-utils.js 2021-05-25 21:13:57 +01:00
stripe-customer-subscription.js 🐛 Fixed members list not loading (#12930) 2021-05-26 19:52:42 +05:30
stripe-price.js Added models for stripe prices and products 2021-04-12 21:53:59 +05:30
stripe-product.js Added Product, StripeProduct & StripePrice relations (#12877) 2021-04-14 19:20:39 +01:00
tag-public.js Added plugin based author and public tag models in API v2 (#10284) 2019-01-03 20:30:35 +01:00
tag.js Moved i18n to shared 2021-05-04 13:03:38 +01:00
user.js Switch to @trghost/validator, remove validator 2021-06-16 08:11:22 +01:00
webhook.js Bumped webhook API defaults to v4 2021-03-02 12:31:52 +13:00