{"action":"created","issue":{"url":"https://api.github.com/repos/eveness/epixx/issues/5","repository_url":"https://api.github.com/repos/eveness/epixx","labels_url":"https://api.github.com/repos/eveness/epixx/issues/5/labels{/name}","comments_url":"https://api.github.com/repos/eveness/epixx/issues/5/comments","events_url":"https://api.github.com/repos/eveness/epixx/issues/5/events","html_url":"https://github.com/eveness/epixx/issues/5","id":136633160,"number":5,"title":"Security","user":{"login":"Puppollo","id":7393039,"avatar_url":"https://avatars.githubusercontent.com/u/7393039?v=3","gravatar_id":"","url":"https://api.github.com/users/Puppollo","html_url":"https://github.com/Puppollo","followers_url":"https://api.github.com/users/Puppollo/followers","following_url":"https://api.github.com/users/Puppollo/following{/other_user}","gists_url":"https://api.github.com/users/Puppollo/gists{/gist_id}","starred_url":"https://api.github.com/users/Puppollo/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Puppollo/subscriptions","organizations_url":"https://api.github.com/users/Puppollo/orgs","repos_url":"https://api.github.com/users/Puppollo/repos","events_url":"https://api.github.com/users/Puppollo/events{/privacy}","received_events_url":"https://api.github.com/users/Puppollo/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-02-26T08:53:54Z","updated_at":"2016-02-26T09:13:41Z","closed_at":null,"body":"Пользователь залогинен если выставлена кука user, т.е. любой пользователь для авторизации может просто выставить себе куку user в значение admin и получить полные права?"},"comment":{"url":"https://api.github.com/repos/eveness/epixx/issues/comments/189178322","html_url":"https://github.com/eveness/epixx/issues/5#issuecomment-189178322","issue_url":"https://api.github.com/repos/eveness/epixx/issues/5","id":189178322,"user":{"login":"eveness","id":6065646,"avatar_url":"https://avatars.githubusercontent.com/u/6065646?v=3","gravatar_id":"","url":"https://api.github.com/users/eveness","html_url":"https://github.com/eveness","followers_url":"https://api.github.com/users/eveness/followers","following_url":"https://api.github.com/users/eveness/following{/other_user}","gists_url":"https://api.github.com/users/eveness/gists{/gist_id}","starred_url":"https://api.github.com/users/eveness/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eveness/subscriptions","organizations_url":"https://api.github.com/users/eveness/orgs","repos_url":"https://api.github.com/users/eveness/repos","events_url":"https://api.github.com/users/eveness/events{/privacy}","received_events_url":"https://api.github.com/users/eveness/received_events","type":"User","site_admin":false},"created_at":"2016-02-26T09:13:41Z","updated_at":"2016-02-26T09:13:41Z","body":"Авторизация ужасна, да.Не успела вынести в отдельную модель и переписать.\r\nНужно добавить в куку отдельный хэш, его хранить в сессии и в базе, сравнивать по хешу из сессии, если его там нет - запрашивать из базы. "}}