{"action":"created","issue":{"url":"https://api.github.com/repos/wearefine/fae/issues/123","repository_url":"https://api.github.com/repos/wearefine/fae","labels_url":"https://api.github.com/repos/wearefine/fae/issues/123/labels{/name}","comments_url":"https://api.github.com/repos/wearefine/fae/issues/123/comments","events_url":"https://api.github.com/repos/wearefine/fae/issues/123/events","html_url":"https://github.com/wearefine/fae/pull/123","id":159647201,"number":123,"title":"access control","user":{"login":"jasonfine","id":431402,"avatar_url":"https://avatars.githubusercontent.com/u/431402?v=3","gravatar_id":"","url":"https://api.github.com/users/jasonfine","html_url":"https://github.com/jasonfine","followers_url":"https://api.github.com/users/jasonfine/followers","following_url":"https://api.github.com/users/jasonfine/following{/other_user}","gists_url":"https://api.github.com/users/jasonfine/gists{/gist_id}","starred_url":"https://api.github.com/users/jasonfine/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jasonfine/subscriptions","organizations_url":"https://api.github.com/users/jasonfine/orgs","repos_url":"https://api.github.com/users/jasonfine/repos","events_url":"https://api.github.com/users/jasonfine/events{/privacy}","received_events_url":"https://api.github.com/users/jasonfine/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-06-10T14:26:51Z","updated_at":"2016-06-14T23:43:42Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/wearefine/fae/pulls/123","html_url":"https://github.com/wearefine/fae/pull/123","diff_url":"https://github.com/wearefine/fae/pull/123.diff","patch_url":"https://github.com/wearefine/fae/pull/123.patch"},"body":"@jamesmk let's look at the layer that stops the items from getting drawn, currently it's in the views. you wanted to avoid that but i am having trouble getting it to jive trying to do something in navigation.rb where the hash gets built.\r\n\r\nanother consideration is that the global search will pull results for models that the user may technically be off limits from accessing - however they will only be able to see them in the results, trying to click through to them will hit the controller-level access control and 404 for them.\r\n\r\nthanks"},"comment":{"url":"https://api.github.com/repos/wearefine/fae/issues/comments/226049453","html_url":"https://github.com/wearefine/fae/pull/123#issuecomment-226049453","issue_url":"https://api.github.com/repos/wearefine/fae/issues/123","id":226049453,"user":{"login":"jamesmk","id":447575,"avatar_url":"https://avatars.githubusercontent.com/u/447575?v=3","gravatar_id":"","url":"https://api.github.com/users/jamesmk","html_url":"https://github.com/jamesmk","followers_url":"https://api.github.com/users/jamesmk/followers","following_url":"https://api.github.com/users/jamesmk/following{/other_user}","gists_url":"https://api.github.com/users/jamesmk/gists{/gist_id}","starred_url":"https://api.github.com/users/jamesmk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jamesmk/subscriptions","organizations_url":"https://api.github.com/users/jamesmk/orgs","repos_url":"https://api.github.com/users/jamesmk/repos","events_url":"https://api.github.com/users/jamesmk/events{/privacy}","received_events_url":"https://api.github.com/users/jamesmk/received_events","type":"User","site_admin":false},"created_at":"2016-06-14T23:43:42Z","updated_at":"2016-06-14T23:43:42Z","body":"@jasonfine I've moved authorization of nav items to `navigation.rb` and removed the need to define anything in the navigation concern. \r\n\r\nI still want to review the naming and usage to make sure it's consistent with the other features and adds some documentation. We're close!"}}
{"actor":{"display_login":"jamesmk"}}