Ghost/core/server/models
Katharina Irrgang 42af268d1b 🎨 User is not allowed to add/modify certain fields (#9053)
no issue

- it's not allowed to change/add these attributes via the API
  - created_at = is only once set on adding the resource
  - created_by = is only once set on adding the resource
  - updated_by = is set on the server side when updating the model (based on who is logged in)
  - updated_at = is set on the server side when updating the model

* Revert the usage of the access rules plugin
2017-09-28 13:59:42 +01:00
..
base 🎨 User is not allowed to add/modify certain fields (#9053) 2017-09-28 13:59:42 +01:00
plugins 🐛 Added 409 UpdateCollisionError for the editor (#8899) 2017-08-15 12:06:40 +02:00
accesstoken.js
app-field.js
app-setting.js
app.js
client-trusted-domain.js
client.js
index.js
invite.js
permission.js
post.js 🐛 Fixed author role permission to change author (#9067) 2017-09-27 13:12:53 +02:00
refreshtoken.js
role.js Support for attribute-based permissions (#9025) 2017-09-26 18:06:14 +02:00
settings.js 🎨 do not run model listeners on import (#8720) 2017-07-21 09:58:58 +01:00
subscriber.js Support for attribute-based permissions (#9025) 2017-09-26 18:06:14 +02:00
tag.js
user.js Removed bypassing option filtering in User model 2017-09-28 10:18:18 +01:00