Anton Khorev
84a0c76ab2
Create api changeset comment visibility resource
2025-02-24 01:27:03 +03:00
Anton Khorev
2d46b44872
Add write_changeset_comments scope
2025-02-14 00:17:45 +03:00
Anton Khorev
77a2657d33
Pass scopes instead of token to ApiAbility
2025-02-14 00:15:52 +03:00
Anton Khorev
304e0ef638
Pass user to ApiAbility
2025-02-14 00:15:52 +03:00
Anton Khorev
ef648a53ba
Add user transient attribute to oauth_access_token factory
2025-01-23 17:43:30 +03:00
Anton Khorev
cdce867183
Merge ApiCapability class into ApiAbility
2024-12-20 18:39:08 +03:00
Anton Khorev
e7fb89c8d0
Remove nil ApiCapability user branch
2024-09-05 23:21:24 +03:00
Tom Hughes
1a7d68ccbc
Convert tests using OAuth 1 tokens to use OAuth 2 tokens
2024-07-25 16:55:47 +01:00
Tom Hughes
9cb7a7b36b
Don't allow any abilities for inactive users
2022-12-23 16:37:33 +00:00
Andy Allan
da2277505f
Ensure that test utility methods are marked as private
...
This allows us to enable the check for test method names.
2020-10-28 11:49:01 +01:00
Andy Allan
25ebf87e5a
Rename UserPreference controller methods to follow rails conventions more closely
2019-11-20 16:09:48 +01:00
Andy Allan
7b057545c0
Disentangle the api abilities from the web abilities
...
This will allow us to rename api actions without causing permissions headaches. The choice of
abilities files is made by inheriting from either api_controller or application_controller.
Also rename capabilities to api_capabilites, for consistency.
2019-03-27 18:07:29 +01:00