26 Commits

Author	SHA1	Message	Date
Aurelsicoko	c111aaba13	Fixes #1247	2018-05-24 17:20:32 +02:00
Konstantin Tsabolov	9e897bcfda	Return HTTP 403 if user is not allowed to perform an operation	2018-05-10 19:36:15 +02:00
Aurelsicoko	3daf7523c8	Apply policy for each query and use generated API business logic	2018-04-10 11:47:01 +02:00
Jim Laurie	72877c3074	Rename Guest to Public role	2018-03-12 16:37:20 +01:00
Aurelsicoko	d7aa3eef7e	Resolve conflicts	2018-03-02 14:21:51 +01:00
Aurelsicoko	85fb0f5919	Fix non-polymorphic relations in strapi-bookshelf	2018-02-28 18:10:30 +01:00
Adrien Lepoutre	1110fe7df2	ISSUE 689 - Fix /user/me and ctx.state.user doesn't return OneToMany relations properly	2018-02-28 10:35:28 -05:00
Kristian Frølund	28cd762009	Rephrased error-text	2018-01-29 19:30:56 +01:00
Kristian Frølund	280109c034	Moved user validation logic from JWT service to permissions policy	2018-01-29 19:26:28 +01:00
Aurelsicoko	cc1e8e20aa	Don't execute the action again if there is a policy	2018-01-24 19:00:12 +01:00
Aurelsicoko	cf1cb7050b	Resolve conflicts and disallow to edit and remove default roles	2018-01-24 11:52:09 +01:00
Aurelsicoko	f2bff7f17d	Return an error if a non-admin user try to connect to the admin	2018-01-24 11:38:42 +01:00
Jim Laurie	5accaf30e3	Hot fix permission detection	2018-01-19 07:38:30 +01:00
Aurelsicoko	fa8976c98f	Fix infinite login	2018-01-18 11:13:44 +01:00
Aurelsicoko	b84976fbbd	Improve init action to check if there is an administrator	2018-01-17 19:22:35 +01:00
Aurelsicoko	4aa28a196e	[WIP] Read and update roles & permissions using database	2018-01-17 18:50:12 +01:00
Jim LAURIE	502b101598	Fix PR feedback	2018-01-10 13:39:42 +01:00
Jim Laurie	ff46faf306	Execute controller action out of authorization try	2018-01-09 13:53:52 +01:00
Jim Laurie	2715f2693f	Check if token user still exist	2017-12-14 16:12:39 +01:00
cyril lopez	3da6faac05	Fix feedback PR	2017-12-08 14:40:42 +01:00
cyril lopez	1d64d827be	Add roles key to permissions	2017-12-08 12:03:37 +01:00
Jim Laurie	5b4f91dcff	Fix some PR feedback	2017-12-07 18:16:15 +01:00
Jim Laurie	ddcf48d7c4	Merge branch 'user-permissions' of https://github.com/strapi/strapi into user-permissions	2017-11-28 09:20:07 +01:00
Aurelsicoko	311862dbb1	Handle delete plugin entry using Content Manager	2017-11-27 17:45:21 +01:00
Jim Laurie	f0a766388f	By pass permissions for app owner	2017-11-27 16:59:53 +01:00
Jim Laurie	ee1ece28d8	Use request route to detect current action	2017-11-27 16:47:16 +01:00