search

Softhouse / xyz

Repo for collecting issues/user stories related to XYZ
0 stars 0 forks source link

hidden users #146

Closed aolundin closed 8 years ago

aolundin commented 8 years ago

Add a 'hidden' field to the user entity. These users cannot be retrieved from the api by anybody without the 'canEditUser' attribute (removed from both getAll and getByID). Requesting a hidden user by his/her id thus returns a status code 404. The hidden property can only be set by users with the 'canEditUser' attribute.