Visiting mass-tag URL directly ignored masstag privileges and showed tag/untag controls (although didn't show the controls in the header). After this change, bypassing mass tag privileges got a little bit harder. (It's still possible for the user to talk directly to the API after all.) |
||
---|---|---|
.. | ||
auth_controller.js | ||
comments_controller.js | ||
help_controller.js | ||
home_controller.js | ||
not_found_controller.js | ||
page_controller.js | ||
password_reset_controller.js | ||
post_controller.js | ||
post_list_controller.js | ||
post_upload_controller.js | ||
settings_controller.js | ||
snapshots_controller.js | ||
tag_categories_controller.js | ||
tag_controller.js | ||
tag_list_controller.js | ||
top_navigation_controller.js | ||
user_controller.js | ||
user_list_controller.js | ||
user_registration_controller.js |