Ghost/core/server
Naz Gargol 786eaac57e
Added permission restrictions to editing members flag (#11217)
no issue

- Added test cases to check edit permission on settings endpoints
- Added test to demonstrate owner-only being able to toggle members flag
- Permission check when editing settings `lab.members`
- Passed additional function to permissions to allow custom selection of unsafe attributes due to settings object structure.
- Fully implementing this check on controller level would be wrong architecturally and not that straight forward because we lack role data in "frame"
- Cleaned up test after moving default_content_visibility to it's own property
2019-10-09 10:26:54 +02:00
..
adapters Return correct error codes from storage adapter 2019-09-06 17:40:55 +01:00
api Added permission restrictions to editing members flag (#11217) 2019-10-09 10:26:54 +02:00
config Added members CSV import to Admin API (#11197) 2019-10-03 19:59:19 +02:00
data Added new requirePaymentForSignup setting for members (#11214) 2019-10-08 22:00:46 +05:30
lib Fixed error when saving unknown url in bookmark card (#11210) 2019-10-08 11:11:32 +01:00
models Added permission restrictions to editing members flag (#11217) 2019-10-09 10:26:54 +02:00
public Removed token param on page load for members 2019-10-09 13:36:06 +07:00
services Added guard for missing stripe tokens 2019-10-09 12:00:53 +07:00
translations Added guard to asset helper for missing paths 2019-09-09 13:02:45 +01:00
views Update default 404 page 2019-07-15 14:47:01 +02:00
web Added members CSV export to Admin API (#11198) 2019-10-03 20:36:22 +02:00
analytics-events.js Added event to integrations when created (#10588) 2019-03-11 15:28:17 +01:00
ghost-server.js Update Test & linting packages (major) (#10858) 2019-07-05 13:40:43 +02:00
index.js Extracted settings service part manipulating routes.yaml (#10800) 2019-06-25 18:33:56 +02:00
overrides.js Disabled bluebird debug logs 2018-08-13 14:01:31 +02:00
update-check.js Updated links to docs (#10941) 2019-07-22 18:17:50 +08:00