gitlab-org--gitlab-foss/lib/api
Dmitriy Zaporozhets ae564c97d4
Dont expose user email via API
To prevent leaking of users info we reduce amount of user information
retrieved via API for normal users.

What user can get via API:

* if not admin: only id, state, name, username and avatar_url
* if admin: all user information
* about himself: all informaion

Signed-off-by: Dmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
2014-06-13 17:46:48 +03:00
..
api.rb
branches.rb
commits.rb
deploy_keys.rb
entities.rb Dont expose user email via API 2014-06-13 17:46:48 +03:00
files.rb
groups.rb
helpers.rb
internal.rb Dont expose user email via API 2014-06-13 17:46:48 +03:00
issues.rb
merge_requests.rb
milestones.rb
namespaces.rb
notes.rb
project_hooks.rb
project_members.rb
project_snippets.rb
projects.rb Dont expose user email via API 2014-06-13 17:46:48 +03:00
repositories.rb
services.rb
session.rb
system_hooks.rb
users.rb Dont expose user email via API 2014-06-13 17:46:48 +03:00