Skip to content
Snippets Groups Projects
Verified Commit ae564c97 authored by Dmitriy Zaporozhets's avatar Dmitriy Zaporozhets
Browse files

Dont expose user email via API 


To prevent leaking of users info we reduce amount of user information
retrieved via API for normal users.

What user can get via API:

* if not admin: only id, state, name, username and avatar_url
* if admin: all user information
* about himself: all informaion

Signed-off-by: default avatarDmitriy Zaporozhets <dmitriy.zaporozhets@gmail.com>
parent d5b0f29c
No related branches found
No related tags found
Hide whitespace changes
Inline Side-by-side
Showing
with 53 additions and 48 deletions
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment