Sam f4f5524190 FEATURE: user API now contains scopes so permission is granular ...

previously we supported blanket read and write for user API, this
change amends it so we can define more limited scopes. A scope only
covers a few routes. You can not grant access to part of the site and
leave a large amount of the information hidden to API consumer.

2016-10-14 16:05:42 +11:00

..

admin

Unify API keys and web hooks into a single admin nav header.

2016-09-20 05:22:03 +08:00

users

FIX: redirects back to origin for SSO and omniauth login

2016-09-16 13:48:50 +10:00

about_controller.rb

PERF: Rendering crawler's template is expensive.

2016-04-07 16:28:31 +02:00

application_controller.rb

Merge pull request #4366 from xfalcox/print

2016-10-11 11:47:20 +11:00

badges_controller.rb

Advanced Search UI

2016-10-04 11:18:01 -04:00

categories_controller.rb

Revert "FIX: don't overwrite category's logo & background URLs"

2016-09-22 11:30:19 +08:00

category_hashtags_controller.rb

FIX: Query for category hashtag should be case sensitive.

2016-03-28 11:15:10 +08:00

clicks_controller.rb

PERF: avoid preloading json in cases where it is not needed

2015-05-20 17:12:16 +10:00

composer_messages_controller.rb

FIX: Duplicate link shouldn't happen on edit

2016-06-08 17:22:23 -04:00

directory_items_controller.rb

FEATURE: add parameter that allows you to filter directory items on user

2015-12-30 15:00:00 +11:00

draft_controller.rb

PERF: avoid preloading json in cases where it is not needed

2015-05-20 17:12:16 +10:00

email_controller.rb

User interface for watching first post

2016-07-07 11:21:50 -04:00

embed_controller.rb

FIX: handle embed count when topic not found

2016-08-25 07:12:20 +05:30

exceptions_controller.rb

FEATURE: hide google search on 404 page for private instance

2014-09-06 15:26:46 +05:30

export_csv_controller.rb

FIX: export user list based on trust level filter

2016-03-07 18:49:31 +05:30

extra_locales_controller.rb

FIX: Ensure that translations bundle exists before merging plugin bundle.

2016-09-30 14:29:30 +08:00

forums_controller.rb

remove /error endpoint

2016-04-11 20:43:24 +02:00

groups_controller.rb

FEATURE: add group posts and mentions RSS

2016-03-18 22:29:10 +05:30

highlight_js_controller.rb

PERF: avoid cookies for all static, public, cached forever assets

2015-05-22 16:15:46 +10:00

invites_controller.rb

FIX: only staff can access 'resend all invites' feature

2016-06-07 10:57:08 +05:30

list_controller.rb

Revert "FEATURE: Use the top period default for users who have been inactive or are new"

2016-10-11 17:56:46 +02:00

metadata_controller.rb

Refactor desktop notifications to be more modular.

2016-07-01 00:11:32 +08:00

notifications_controller.rb

FEATURE: clean API method for reading a single notification

2016-09-16 16:14:15 +10:00

onebox_controller.rb

Fixes regression with video embeds

2013-03-21 20:53:12 -04:00

permalinks_controller.rb

FIX: permalinks redirect on subfolder installs could add the subfolder to the url twice

2015-10-12 16:54:53 -04:00

post_action_users_controller.rb

FIX: You can click to see your own PMs from flags

2015-09-30 12:28:55 -04:00

post_actions_controller.rb

Added spec tests

2016-04-03 19:44:14 -04:00

posts_controller.rb

missing spot where old api was used

2016-08-26 10:58:34 +10:00

queued_posts_controller.rb

FIX: better error message when trying to approve post for closed/deleted topic

2016-06-24 15:11:45 +05:30

robots_txt_controller.rb

FIX: robots.txt should be accessible even when login is required

2015-10-15 11:42:41 +02:00

search_controller.rb

SECURITY: restrict constantize classes in search controller

2016-06-17 13:47:34 +10:00

session_controller.rb

FIX: redirects back to origin for SSO and omniauth login

2016-09-16 13:48:50 +10:00

similar_topics_controller.rb

FIX: similar topics api shouldn't return error if params are below minimum lengths

2015-08-31 10:54:45 -04:00

site_controller.rb

FEATURE: basic info route for all sites, even ones that require login

2016-08-12 17:10:35 +10:00

site_customizations_controller.rb

FEATURE: Can create stylesheets for embedded comments

2015-08-10 10:21:04 -04:00

static_controller.rb

FEATURE: more user API flow, support key creation

2016-08-16 17:06:52 +10:00

steps_controller.rb

FIX: You should be an admin to do the wizard

2016-09-22 11:12:51 -04:00

stylesheets_controller.rb

fix missing rtl stylesheets

2015-05-23 15:25:05 +10:00

tag_groups_controller.rb

PERF: tag groups index query

2016-07-15 17:16:26 -04:00

tags_controller.rb

FIX: prevent creation of tags with invalid characters

2016-10-12 15:44:36 -04:00

topics_controller.rb

Second review fixes

2016-09-26 20:46:55 -03:00

uploads_controller.rb

Upload Logos Step

2016-09-22 09:52:19 -04:00

user_actions_controller.rb

FEATURE: split up group PMS on user page

2015-12-10 11:39:33 +11:00

user_api_keys_controller.rb

FEATURE: user API now contains scopes so permission is granular

2016-10-14 16:05:42 +11:00

user_avatars_controller.rb

SECURITY: limit route access when using external avatars

2016-07-28 09:00:43 +10:00

user_badges_controller.rb

FIX: badge grant count wasn't filtered to the current user in the user summary

2016-03-30 23:11:00 +02:00

users_controller.rb

FIX: Clear the session after a reset token was used

2016-09-30 12:20:23 -04:00

users_email_controller.rb

SECURITY: Support for confirm old as well as new email accounts

2016-03-08 14:52:22 -05:00

webhooks_controller.rb

FEATURE: sparkpost webhook

2016-09-26 22:13:34 -07:00

wizard_controller.rb

FIX: You should be an admin to do the wizard

2016-09-22 11:12:51 -04:00