zulip

Commit Graph

Author	SHA1	Message	Date
Mateusz Mandera	160cc5120a	api: Require can_create_users permission to create users via API. Allowing any admins to create arbitrary users is not ideal because it can lead to abuse issues. We should require something stronger that requires the server operator's approval and thus we add a new can_create_users permission.	2020-12-21 13:20:21 -08:00
Mateusz Mandera	d0dc04a093	models: Rename is_api_super_user to can_forge_sender,	2020-12-21 13:15:39 -08:00
sahil839	a96811ab58	management: Replace knight command with change_user_role command. We replace knight command with change_user_role command which allows us to change role of a user to owner, admins, member and guest. We can also give/revoke api_super_user permission using this command. Tweaked by tabbott to improve the logging output and update documentation. Fixes #16586.	2020-10-25 14:55:08 -07:00

Author

SHA1

Message

Date

Mateusz Mandera

160cc5120a

api: Require can_create_users permission to create users via API.

Allowing any admins to create arbitrary users is not ideal because it
can lead to abuse issues.  We should require something stronger that
requires the server operator's approval and thus we add a new
can_create_users permission.

2020-12-21 13:20:21 -08:00

Mateusz Mandera

d0dc04a093

models: Rename is_api_super_user to can_forge_sender,

2020-12-21 13:15:39 -08:00

sahil839

a96811ab58

management: Replace knight command with change_user_role command.

We replace knight command with change_user_role command which
allows us to change role of a user to owner, admins, member and
guest. We can also give/revoke api_super_user permission using
this command.

Tweaked by tabbott to improve the logging output and update documentation.

Fixes #16586.

2020-10-25 14:55:08 -07:00

3 Commits