3 Commits

Author	SHA1	Message	Date
Dan Brown	c724bfe4d3	Copied over work from user_permissions branch ... Only that relevant to the additional testing work.	2023-01-21 11:08:34 +00:00
Dan Brown	73a37b3cd9	Applied latest StyleCI changes	2021-12-15 13:49:20 +00:00
Dan Brown	e765e61854	Addressed user detail harvesting issue ... Altered access & usage of the /search/users/select endpoint with the following changes: - Removed searching of email address to prevent email detail discovery via hunting via search queries. - Required the user to be logged in and have permission to manage users or manage permissions on items in some way. - Removed the user migration option on user delete unless they have permission to manage users. For #3108 Reported in https://huntr.dev/bounties/135f2d7d-ab0b-4351-99b9-889efac46fca/ Reported by @haxatron	2021-12-14 18:47:22 +00:00