Commit graph

6 commits

Author SHA1 Message Date
Anton Khorev
77a2657d33 Pass scopes instead of token to ApiAbility 2025-02-14 00:15:52 +03:00
Anton Khorev
304e0ef638 Pass user to ApiAbility 2025-02-14 00:15:52 +03:00
Anton Khorev
ef648a53ba Add user transient attribute to oauth_access_token factory 2025-01-23 17:43:30 +03:00
Anton Khorev
cdce867183 Merge ApiCapability class into ApiAbility 2024-12-20 18:39:08 +03:00
Tom Hughes
efd2b92a80 Prevent unauthenticated users commenting on notes via the API 2023-11-23 16:56:07 +00:00
Andy Allan
7b057545c0 Disentangle the api abilities from the web abilities
This will allow us to rename api actions without causing permissions headaches. The choice of
abilities files is made by inheriting from either api_controller or application_controller.

Also rename capabilities to api_capabilites, for consistency.
2019-03-27 18:07:29 +01:00