Luke Towers 950c341c49 Prevent privilege escalation from crafted requests ... Follow up to 2046efb51d. The previous commit prevented users from visually managing permissions that they themselves didn't have access to, this follow-up commit enforces that limitation serverside to defend against crafted privilege escalation attacks by authenticated users.		2017-07-10 18:36:43 -06:00
..
assets	Enable configuration of backend login session persistence (#2924)	2017-06-22 14:34:16 -06:00
behaviors	Fix inflexible relation toolbar (#2760)	2017-07-04 18:56:38 -06:00
classes	Update Report widget docblock	2017-06-02 23:53:27 -05:00
controllers	Enable configuration of backend login session persistence (#2924)	2017-06-22 14:34:16 -06:00
database	Code dusting (#2826)	2017-04-24 21:38:19 +10:00
facades	Code dusting (#2826)	2017-04-24 21:38:19 +10:00
formwidgets	Prevent privilege escalation from crafted requests	2017-07-10 18:36:43 -06:00
helpers	Add Backend::date shorthand helper	2016-11-30 06:59:50 +11:00
lang	Support changing the global default for richeditor buttons (#2937)	2017-07-04 08:10:58 -06:00
layouts	Fixing case-sensitive issue with Html	2017-04-20 11:47:11 -05:00
models	Support changing the global default for richeditor buttons (#2937)	2017-07-04 08:10:58 -06:00
reportwidgets	{@inheritDoc} -> @inheritDoc	2017-03-16 06:26:14 +11:00
skins	{@inheritDoc} -> @inheritDoc	2017-03-16 06:26:14 +11:00
traits	Code dusting (#2826)	2017-04-24 21:38:19 +10:00
views	Nicer error message when no DB and backend access attempt	2016-06-05 07:16:11 +10:00
widgets	Support previewMode for the balloon-selector	2017-07-09 12:53:29 -06:00
ServiceProvider.php	Code dusting (#2826)	2017-04-24 21:38:19 +10:00
composer.json	Update composer versions	2016-07-06 17:15:41 +10:00
routes.php	Add hooks to the cms/backend route definitions	2015-05-02 13:53:05 +10:00