0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-03-11 02:12:21 -05:00
ghost/core
Jacob Gable 298077582b ACL and strict rules for Settings API
Ref #2061

- Add canThis permission checks to settings api calls
- Add strict rules about accessing core settings without internal: true
- Omit core settings in browse() call unless internal: true
- Update unit tests to call api.settings with contexts
- Add a couple unit tests for new scenarios
- Update all api.settings calls in the app to call with internal context
- Re-arrange permissions.init in server startup so config.theme.update
can access settings without permissions error
2014-05-07 10:56:03 -05:00
..
client Move to new API format for Settings. 2014-05-06 19:02:55 +00:00
server ACL and strict rules for Settings API 2014-05-07 10:56:03 -05:00
shared Improving the showdown extensions 2014-03-20 17:08:13 +00:00
test ACL and strict rules for Settings API 2014-05-07 10:56:03 -05:00
bootstrap.js Replace JSLint with JSHint. 2014-03-04 15:47:39 +00:00
index.js Add promise to ghost startup process to allow 2014-03-11 11:41:45 -04:00
server.js Shims for deleted (refactored away) files 2014-01-09 09:21:09 -06:00