Don't expose the 'settings' property on users to regular users via th…

…e rest api (#10411) [BREAK] The property "settings" is no longer available to regular users via rest api
RocketChat · Apr 10, 2018 · b6b8b9e · b6b8b9e
1 parent 0ec458e
commit b6b8b9e
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/packages/rocketchat-api/server/api.js b/packages/rocketchat-api/server/api.js
@@ -28,7 +28,8 @@ class API extends Restivus {
 			roles: 0,
 			statusDefault: 0,
 			_updatedAt: 0,
-			customFields: 0
+			customFields: 0,
+			settings: 0
 		};
 
 		this._config.defaultOptionsEndpoint = function _defaultOptionsEndpoint() {