Client API permissions #4176
Description
This belongs to the OAuth Epic: #4004 - please read this for the big picture of what this issue is for :)
It is allowed for every authenticated user to add, browse, edit and delete clients. This is similar to what Slack does for integrations and will allow every user to use third party clients. The access to the restful API of Ghost is protected by the individual permissions of each user.
| JSON API | Admin | Editor | Author | NoAuth |
|---|---|---|---|---|
| clients.browse | y | y | y | |
| clients.read | y | y | y | |
| clients.edit | y | y | y | |
| clients.add | y | y | y | |
| clients.destroy | y | y | y |
This issue depends on #3910 for adding new permissions to the database.