{"action":"created","issue":{"url":"https://api.github.com/repos/octobercms/october/issues/2433","repository_url":"https://api.github.com/repos/octobercms/october","labels_url":"https://api.github.com/repos/octobercms/october/issues/2433/labels{/name}","comments_url":"https://api.github.com/repos/octobercms/october/issues/2433/comments","events_url":"https://api.github.com/repos/octobercms/october/issues/2433/events","html_url":"https://github.com/octobercms/october/issues/2433","id":184077038,"number":2433,"title":"Security Issue at the backend","user":{"login":"abhi1693","id":5083532,"avatar_url":"https://avatars.githubusercontent.com/u/5083532?v=3","gravatar_id":"","url":"https://api.github.com/users/abhi1693","html_url":"https://github.com/abhi1693","followers_url":"https://api.github.com/users/abhi1693/followers","following_url":"https://api.github.com/users/abhi1693/following{/other_user}","gists_url":"https://api.github.com/users/abhi1693/gists{/gist_id}","starred_url":"https://api.github.com/users/abhi1693/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/abhi1693/subscriptions","organizations_url":"https://api.github.com/users/abhi1693/orgs","repos_url":"https://api.github.com/users/abhi1693/repos","events_url":"https://api.github.com/users/abhi1693/events{/privacy}","received_events_url":"https://api.github.com/users/abhi1693/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-10-19T21:19:51Z","updated_at":"2016-10-19T21:44:57Z","closed_at":null,"body":"##### Expected behavior\r\nThe users that are not administrators or do not have the appropriate permissions should not be able to access the `Settings` page in the `backend`.\r\n\r\n##### Actual behavior\r\nThe users who does not have appropriate permissions are able to access a part of the `Settings` page at the `backend`.\r\n\r\n##### October build\r\n365\r\n\r\nThere should be an option to disable/enable access to the `Settings` page to increase security as the unauthorized user will be able to make changes to the website."},"comment":{"url":"https://api.github.com/repos/octobercms/october/issues/comments/254950154","html_url":"https://github.com/octobercms/october/issues/2433#issuecomment-254950154","issue_url":"https://api.github.com/repos/octobercms/october/issues/2433","id":254950154,"user":{"login":"daftspunk","id":1392869,"avatar_url":"https://avatars.githubusercontent.com/u/1392869?v=3","gravatar_id":"","url":"https://api.github.com/users/daftspunk","html_url":"https://github.com/daftspunk","followers_url":"https://api.github.com/users/daftspunk/followers","following_url":"https://api.github.com/users/daftspunk/following{/other_user}","gists_url":"https://api.github.com/users/daftspunk/gists{/gist_id}","starred_url":"https://api.github.com/users/daftspunk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/daftspunk/subscriptions","organizations_url":"https://api.github.com/users/daftspunk/orgs","repos_url":"https://api.github.com/users/daftspunk/repos","events_url":"https://api.github.com/users/daftspunk/events{/privacy}","received_events_url":"https://api.github.com/users/daftspunk/received_events","type":"User","site_admin":false},"created_at":"2016-10-19T21:44:57Z","updated_at":"2016-10-19T21:44:57Z","body":"As per the contribution guidelines, please provide the exact steps you are taking for the issue to occur. This will be used for peer review."}}
{"actor":{"display_login":"daftspunk"}}