locomotivecms/engine — pull request #419 by alexsanford (2012-05-25 14:45:30+00:00)
Title: API auth

Added authorization to the API controllers. Without this, someone with low privileges (such as an author) could perform admin-level requests through the API. I've written a bunch of cucumber features for this as well. The locomotive_editor still works as long as the credentials supplied in the config/deploy.yml file are for an "admin" user.