2 commits

Author	SHA1	Message	Date
Tom Hughes	efd2b92a80	Prevent unauthenticated users commenting on notes via the API	2023-11-23 16:56:07 +00:00
Andy Allan	7b057545c0	Disentangle the api abilities from the web abilities ... This will allow us to rename api actions without causing permissions headaches. The choice of abilities files is made by inheriting from either api_controller or application_controller. Also rename capabilities to api_capabilites, for consistency.	2019-03-27 18:07:29 +01:00