Version 0.9.54

- Added optional `job_read_only` privilege.  When set, a user (or API key) can ONLY run stock events from the schdule, with NO customization.

lib/api/event.js

@@ -387,6 +387,9 @@ module.exports = Class.create({
 				delete params.max_children;
 				delete params.session_id;
 
+				// if user has special job_read_only privilege, remove all param keys (no customization)
+				if (!user.privileges.job_read_only) params = {};
+
 				// allow for &params/foo=bar and the like
 				for (var key in params) {
 					if (key.match(/^(\w+)\/(\w+)$/)) {

package.json

@@ -1,6 +1,6 @@
 {
 	"name": "Cronicle",
-	"version": "0.9.53",
+	"version": "0.9.54",
 	"description": "A simple, distributed task scheduler and runner with a web based UI.",
 	"author": "Joseph Huckaby <[email protected]>",
 	"homepage": "https://github.com/jhuckaby/Cronicle",