0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-03 23:00:14 -05:00
ghost/core/server
Fabien O'Carroll 05330482e6
Stopped api key from assigning the 'Owner' role (#9971)
* Stopped api key from assigning the 'Owner' role

refs #9865

We do not want api keys to be able to assign the Owner role to any other
key or user.

* Cleaned up Role model permissible method

no-issue
2018-10-12 15:38:57 +07:00
..
adapters Refactored direct usages of api controllers 2018-09-21 15:18:22 +02:00
api Implemented global validation on defined fields (#9992) 2018-10-12 15:16:12 +07:00
apps 🐛 Fixed redirect issue with private sites (#9960) 2018-10-08 16:31:08 +07:00
config Updated overrides config for api versions with v0.1 to deprecated (#9921) 2018-09-27 19:34:12 +02:00
data 🐛 Fixed migration from v1 to 2.2.1 (#9984) 2018-10-11 09:04:47 +02:00
helpers Switched to eslint-plugin-ghost (#9835) 2018-09-17 20:49:30 +02:00
lib Extended sequence utility 2018-10-03 00:17:45 +02:00
models Stopped api key from assigning the 'Owner' role (#9971) 2018-10-12 15:38:57 +07:00
public Removed change frequency and priority fields from sitemap generator (#9771) 2018-09-24 19:16:31 +02:00
services 🐛 Fixed session auth for blogs running on sub dir (#9986) 2018-10-11 14:11:24 +07:00
translations Included expected and actual origin in csrf error (#9974) 2018-10-10 14:36:45 +07:00
views Fixed error trying to render 404 for missing asset 2017-12-22 20:08:59 +00:00
web Migrated roles controller to API v2 2018-10-10 16:48:22 +02:00
analytics-events.js Cleared out old unused events 2017-12-13 09:08:25 +00:00
filters.js Switched to eslint-plugin-ghost (#9835) 2018-09-17 20:49:30 +02:00
ghost-server.js Switched to eslint-plugin-ghost (#9835) 2018-09-17 20:49:30 +02:00
index.js Refactored method urlFor to use versionType instead of admin: true 2018-10-04 16:49:55 +05:30
overrides.js Disabled bluebird debug logs 2018-08-13 14:01:31 +02:00
update-check.js Updated docs links 2018-08-16 12:13:24 +02:00