Commit graph

4 commits

Author SHA1 Message Date
Anton Khorev
ef648a53ba Add user transient attribute to oauth_access_token factory 2025-01-23 17:43:30 +03:00
Anton Khorev
cdce867183 Merge ApiCapability class into ApiAbility 2024-12-20 18:39:08 +03:00
Tom Hughes
efd2b92a80 Prevent unauthenticated users commenting on notes via the API 2023-11-23 16:56:07 +00:00
Andy Allan
7b057545c0 Disentangle the api abilities from the web abilities
This will allow us to rename api actions without causing permissions headaches. The choice of
abilities files is made by inheriting from either api_controller or application_controller.

Also rename capabilities to api_capabilites, for consistency.
2019-03-27 18:07:29 +01:00