{"action":"created","issue":{"url":"https://api.github.com/repos/guardian/gu-who/issues/60","repository_url":"https://api.github.com/repos/guardian/gu-who","labels_url":"https://api.github.com/repos/guardian/gu-who/issues/60/labels{/name}","comments_url":"https://api.github.com/repos/guardian/gu-who/issues/60/comments","events_url":"https://api.github.com/repos/guardian/gu-who/issues/60/events","html_url":"https://github.com/guardian/gu-who/issues/60","id":167829102,"number":60,"title":"User removed even though all requirements were addressed","user":{"login":"epoberezkin","id":2769109,"avatar_url":"https://avatars.githubusercontent.com/u/2769109?v=3","gravatar_id":"","url":"https://api.github.com/users/epoberezkin","html_url":"https://github.com/epoberezkin","followers_url":"https://api.github.com/users/epoberezkin/followers","following_url":"https://api.github.com/users/epoberezkin/following{/other_user}","gists_url":"https://api.github.com/users/epoberezkin/gists{/gist_id}","starred_url":"https://api.github.com/users/epoberezkin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/epoberezkin/subscriptions","organizations_url":"https://api.github.com/users/epoberezkin/orgs","repos_url":"https://api.github.com/users/epoberezkin/repos","events_url":"https://api.github.com/users/epoberezkin/events{/privacy}","received_events_url":"https://api.github.com/users/epoberezkin/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":3,"created_at":"2016-07-27T11:10:59Z","updated_at":"2016-07-27T11:40:25Z","closed_at":null,"body":"The comment was added:\r\n\r\n```\r\nRemoving @... from organisation. These were the outstanding requirements:\r\n```"},"comment":{"url":"https://api.github.com/repos/guardian/gu-who/issues/comments/235561056","html_url":"https://github.com/guardian/gu-who/issues/60#issuecomment-235561056","issue_url":"https://api.github.com/repos/guardian/gu-who/issues/60","id":235561056,"user":{"login":"rtyley","id":52038,"avatar_url":"https://avatars.githubusercontent.com/u/52038?v=3","gravatar_id":"","url":"https://api.github.com/users/rtyley","html_url":"https://github.com/rtyley","followers_url":"https://api.github.com/users/rtyley/followers","following_url":"https://api.github.com/users/rtyley/following{/other_user}","gists_url":"https://api.github.com/users/rtyley/gists{/gist_id}","starred_url":"https://api.github.com/users/rtyley/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rtyley/subscriptions","organizations_url":"https://api.github.com/users/rtyley/orgs","repos_url":"https://api.github.com/users/rtyley/repos","events_url":"https://api.github.com/users/rtyley/events{/privacy}","received_events_url":"https://api.github.com/users/rtyley/received_events","type":"User","site_admin":false},"created_at":"2016-07-27T11:40:25Z","updated_at":"2016-07-27T11:40:25Z","body":"> There was a big gap indeed, we were trying to get access to some bot account that would be removed otherwise (and it was, correctly).\r\n\r\nIf you add the bot to a team called `bots` trhe 2FA requirement will be waived, but the other two won't - I guess the full-name requirement could have got you there.\r\n\r\n> Hook seems insecure to be honest - the token with owner privileges will be visible to all org members.\r\n\r\nThe [GitHub docs](https://help.github.com/articles/permission-levels-for-an-organization/) aren't very clear on this, but I believe it's just org owners who have access to the `Settings` tab that org webhooks fall under - I tried viewing the webhook with a colleague's account and they were unable to see those settings. "}}
{"actor":{"display_login":"rtyley"}}