0
Fork 0
mirror of https://github.com/TryGhost/Ghost.git synced 2025-01-27 22:49:56 -05:00
ghost/core/server/models
Katharina Irrgang af01f51204 🐛 Fixed returning roles for the public user resource (#9039)
no issue

- this bug fix affects all endpoints for the public user access
- we allowed fetching `roles` via the public api by accident
- see our docs: https://api.ghost.org/docs/users)
  - we only allow `count.posts`
- returning roles via the public api exposes too many details
- this was never intentional
2017-09-26 15:43:21 +01:00
..
base 🐛 Fixed returning roles for the public user resource (#9039) 2017-09-26 15:43:21 +01:00
plugins 🐛 Added 409 UpdateCollisionError for the editor (#8899) 2017-08-15 12:06:40 +02:00
accesstoken.js
app-field.js
app-setting.js
app.js
client-trusted-domain.js
client.js
index.js
invite.js
permission.js
post.js 🐛 Fixed disqus comment id when exporting/importing 1.x content 2017-09-12 16:29:59 +01:00
refreshtoken.js
role.js
settings.js 🎨 do not run model listeners on import (#8720) 2017-07-21 09:58:58 +01:00
subscriber.js replace auto increment id's by object id (#7495) 2016-11-17 09:09:11 +00:00
tag.js
user.js 🐛 Fixed returning roles for the public user resource (#9039) 2017-09-26 15:43:21 +01:00