mirror of
https://github.com/TryGhost/Ghost.git
synced 2025-01-13 22:41:32 -05:00
298077582b
Ref #2061 - Add canThis permission checks to settings api calls - Add strict rules about accessing core settings without internal: true - Omit core settings in browse() call unless internal: true - Update unit tests to call api.settings with contexts - Add a couple unit tests for new scenarios - Update all api.settings calls in the app to call with internal context - Re-arrange permissions.init in server startup so config.theme.update can access settings without permissions error |
||
---|---|---|
.. | ||
api_db_spec.js | ||
api_notifications_spec.js | ||
api_posts_spec.js | ||
api_settings_spec.js | ||
api_tags_spec.js | ||
api_users_spec.js |