0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-10 23:36:14 -05:00
ghost/core/test/regression/api/canary/admin
Naz Gargol 786eaac57e
Added permission restrictions to editing members flag (#11217)
no issue

- Added test cases to check edit permission on settings endpoints
- Added test to demonstrate owner-only being able to toggle members flag
- Permission check when editing settings `lab.members`
- Passed additional function to permissions to allow custom selection of unsafe attributes due to settings object structure.
- Fully implementing this check on controller level would be wrong architecturally and not that straight forward because we lack role data in "frame"
- Cleaned up test after moving default_content_visibility to it's own property
2019-10-09 10:26:54 +02:00
..
authentication_spec.js Updated tests eslint config to use eslint-plugin-ghost@0.5.0 2019-08-19 13:38:35 +01:00
db_spec.js Fixed db regression tests 2019-09-30 22:32:11 +02:00
images_spec.js
members_spec.js Added members CSV export to Admin API (#11198) 2019-10-03 20:36:22 +02:00
notifications_spec.js
posts_spec.js Members post gating options (#11160) 2019-09-26 15:38:35 +02:00
redirects_spec.js Fixed local utils paths in canary regression tests 2019-10-02 17:09:33 +02:00
schedules_spec.js Updated tests eslint config to use eslint-plugin-ghost@0.5.0 2019-08-19 13:38:35 +01:00
settings_spec.js Added permission restrictions to editing members flag (#11217) 2019-10-09 10:26:54 +02:00
slack_spec.js Fixed local utils paths in canary regression tests 2019-10-02 17:09:33 +02:00
subscribers_spec.js Fixed local utils paths in canary regression tests 2019-10-02 17:09:33 +02:00
users_spec.js
utils.js Added members POST API (#11189) 2019-10-03 11:15:50 +02:00