0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-10 23:36:14 -05:00
ghost/core
Naz Gargol 786eaac57e
Added permission restrictions to editing members flag (#11217)
no issue

- Added test cases to check edit permission on settings endpoints
- Added test to demonstrate owner-only being able to toggle members flag
- Permission check when editing settings `lab.members`
- Passed additional function to permissions to allow custom selection of unsafe attributes due to settings object structure.
- Fully implementing this check on controller level would be wrong architecturally and not that straight forward because we lack role data in "frame"
- Cleaned up test after moving default_content_visibility to it's own property
2019-10-09 10:26:54 +02:00
..
client@ebe7c1475f Updated Ghost-Admin to 2.33.0 2019-10-08 11:25:41 +01:00
frontend Exposed @member.firstname in the theme data 2019-10-09 12:00:53 +07:00
server Added permission restrictions to editing members flag (#11217) 2019-10-09 10:26:54 +02:00
test Added permission restrictions to editing members flag (#11217) 2019-10-09 10:26:54 +02:00
index.js