4 commits

Author	SHA1	Message	Date
Dane Everitt	463f465dea	Block viewing node allocations and location unless user has permission ... Blocks viewing the allocation list and location for a node unless a user has permission to view the node in the first place.	2017-04-08 12:07:17 -04:00
Dane Everitt	4479d3bf19	Improved logic for handling permissions on API routes. ... Still only partially implemented, however this method will allow the inclusion of data that is granted with servers (such as viewing more about the node, node location, allocations, etc) while still limiting someone from doing `?include=node.servers` and listing all servers when they don’t have list-servers as a permission.	2017-04-08 12:05:29 -04:00
Dane Everitt	51204b8d9d	Add all of the potential transformers that might be needed for now.	2017-04-07 20:28:58 -04:00
Dane Everitt	65630bdcce	Move API to use JSON:API standards and fractal serializer ... Makes the data slightly more complex, but forces a standard and can always be changed down the road simply by changing the default serializer.	2017-04-02 16:51:56 -04:00