{"push_id":972569331,"size":3,"distinct_size":3,"ref":"refs/heads/auth","head":"6fd00932ee28e830c855a06947d786d6f6d2f1ae","before":"ed4056ce2cd3ba858ede514d0d7dff47813d74ce","commits":[{"sha":"a3be1ce24ef19cd6170407fb57a656b293cc5e17","author":{"email":"0da3c8eb3b364e5e5822f967860851a1f4544604@gmail.com","name":"Jure Triglav"},"message":"Add specs for contributor role.","distinct":true,"url":"https://api.github.com/repos/Coko-Foundation/pubsweet-core/commits/a3be1ce24ef19cd6170407fb57a656b293cc5e17"},{"sha":"a87bec2e63efe446f8379883bac12ed8dc37a960","author":{"email":"0da3c8eb3b364e5e5822f967860851a1f4544604@gmail.com","name":"Jure Triglav"},"message":"Introduce internal _putWithAuthorization, which verifies a user is permitted to do an action upon a resource, before saving to the databases. All saves now go through this internal method, unless save() is called on a model without the username parameter. More specs for authorization.","distinct":true,"url":"https://api.github.com/repos/Coko-Foundation/pubsweet-core/commits/a87bec2e63efe446f8379883bac12ed8dc37a960"},{"sha":"6fd00932ee28e830c855a06947d786d6f6d2f1ae","author":{"email":"0da3c8eb3b364e5e5822f967860851a1f4544604@gmail.com","name":"Jure Triglav"},"message":"More tests for the user API, things like user can delete itself, user can't delete other users, etc.","distinct":true,"url":"https://api.github.com/repos/Coko-Foundation/pubsweet-core/commits/6fd00932ee28e830c855a06947d786d6f6d2f1ae"}]}