Ghost/core/server/api/canary/utils
Naz Gargol 786eaac57e
Added permission restrictions to editing members flag (#11217)
no issue

- Added test cases to check edit permission on settings endpoints
- Added test to demonstrate owner-only being able to toggle members flag
- Permission check when editing settings `lab.members`
- Passed additional function to permissions to allow custom selection of unsafe attributes due to settings object structure.
- Fully implementing this check on controller level would be wrong architecturally and not that straight forward because we lack role data in "frame"
- Cleaned up test after moving default_content_visibility to it's own property
2019-10-09 10:26:54 +02:00
..
serializers 🐛 Fixed "unsaved changes" modal displaying when post has been saved 2019-10-07 22:59:19 +01:00
validators Added handling for PUT members endpoint (#11194) 2019-10-03 13:38:22 +02:00
index.js 💡 Added canary api endpoint 2019-08-09 20:46:49 +05:30
permissions.js Added permission restrictions to editing members flag (#11217) 2019-10-09 10:26:54 +02:00