{"action":"opened","issue":{"url":"https://api.github.com/repos/privacyidea/privacyidea/issues/460","repository_url":"https://api.github.com/repos/privacyidea/privacyidea","labels_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/460/labels{/name}","comments_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/460/comments","events_url":"https://api.github.com/repos/privacyidea/privacyidea/issues/460/events","html_url":"https://github.com/privacyidea/privacyidea/issues/460","id":165114774,"number":460,"title":"GET /user for restricted admin","user":{"login":"cornelinux","id":1908620,"avatar_url":"https://avatars.githubusercontent.com/u/1908620?v=3","gravatar_id":"","url":"https://api.github.com/users/cornelinux","html_url":"https://github.com/cornelinux","followers_url":"https://api.github.com/users/cornelinux/followers","following_url":"https://api.github.com/users/cornelinux/following{/other_user}","gists_url":"https://api.github.com/users/cornelinux/gists{/gist_id}","starred_url":"https://api.github.com/users/cornelinux/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cornelinux/subscriptions","organizations_url":"https://api.github.com/users/cornelinux/orgs","repos_url":"https://api.github.com/users/cornelinux/repos","events_url":"https://api.github.com/users/cornelinux/events{/privacy}","received_events_url":"https://api.github.com/users/cornelinux/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/privacyidea/privacyidea/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/privacyidea/privacyidea/milestones/26","html_url":"https://github.com/privacyidea/privacyidea/milestones/2.14","labels_url":"https://api.github.com/repos/privacyidea/privacyidea/milestones/26/labels","id":1858499,"number":26,"title":"2.14","description":"Shall we create a pre 3.0 milestone as feature collector?","creator":{"login":"cornelinux","id":1908620,"avatar_url":"https://avatars.githubusercontent.com/u/1908620?v=3","gravatar_id":"","url":"https://api.github.com/users/cornelinux","html_url":"https://github.com/cornelinux","followers_url":"https://api.github.com/users/cornelinux/followers","following_url":"https://api.github.com/users/cornelinux/following{/other_user}","gists_url":"https://api.github.com/users/cornelinux/gists{/gist_id}","starred_url":"https://api.github.com/users/cornelinux/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cornelinux/subscriptions","organizations_url":"https://api.github.com/users/cornelinux/orgs","repos_url":"https://api.github.com/users/cornelinux/repos","events_url":"https://api.github.com/users/cornelinux/events{/privacy}","received_events_url":"https://api.github.com/users/cornelinux/received_events","type":"User","site_admin":false},"open_issues":5,"closed_issues":0,"state":"open","created_at":"2016-06-30T22:10:10Z","updated_at":"2016-07-12T15:51:32Z","due_on":"2016-08-17T22:00:00Z","closed_at":null},"comments":0,"created_at":"2016-07-12T15:51:32Z","updated_at":"2016-07-12T15:51:32Z","closed_at":null,"body":"A restricted admin calls GET /user.\r\nIf the admin is only allowed to see certain realms (action=userlist) but provides no realm, check_base_action does not limit the list of the users to these realms.\r\n\r\nhttps://github.com/privacyidea/privacyidea/blob/master/privacyidea/api/user.py#L45\r\nhttps://github.com/privacyidea/privacyidea/blob/master/privacyidea/api/lib/prepolicy.py#L554\r\n\r\nEither check_base_action needs to modify the HTTP parameter \"realm\" or we need to add another decorator, which modifies the realm parameter if necessary."}}
{"actor":{"display_login":"cornelinux"}}