{"action":"closed","issue":{"url":"https://api.github.com/repos/akvo/akvo-rsr/issues/2149","repository_url":"https://api.github.com/repos/akvo/akvo-rsr","labels_url":"https://api.github.com/repos/akvo/akvo-rsr/issues/2149/labels{/name}","comments_url":"https://api.github.com/repos/akvo/akvo-rsr/issues/2149/comments","events_url":"https://api.github.com/repos/akvo/akvo-rsr/issues/2149/events","html_url":"https://github.com/akvo/akvo-rsr/issues/2149","id":153738147,"number":2149,"title":"Disabled project edits, results and updates are still accessable in myRSR through URL manipulation","user":{"login":"damienallen","id":17518047,"avatar_url":"https://avatars.githubusercontent.com/u/17518047?v=3","gravatar_id":"","url":"https://api.github.com/users/damienallen","html_url":"https://github.com/damienallen","followers_url":"https://api.github.com/users/damienallen/followers","following_url":"https://api.github.com/users/damienallen/following{/other_user}","gists_url":"https://api.github.com/users/damienallen/gists{/gist_id}","starred_url":"https://api.github.com/users/damienallen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/damienallen/subscriptions","organizations_url":"https://api.github.com/users/damienallen/orgs","repos_url":"https://api.github.com/users/damienallen/repos","events_url":"https://api.github.com/users/damienallen/events{/privacy}","received_events_url":"https://api.github.com/users/damienallen/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/akvo/akvo-rsr/labels/Bug","name":"Bug","color":"f51313"},{"url":"https://api.github.com/repos/akvo/akvo-rsr/labels/Needs%20Review","name":"Needs Review","color":"fad8c7"},{"url":"https://api.github.com/repos/akvo/akvo-rsr/labels/Quick%20Fix","name":"Quick Fix","color":"009800"},{"url":"https://api.github.com/repos/akvo/akvo-rsr/labels/Type:%20MyRSR","name":"Type: MyRSR","color":"006b75"}],"state":"closed","locked":false,"assignee":{"login":"damienallen","id":17518047,"avatar_url":"https://avatars.githubusercontent.com/u/17518047?v=3","gravatar_id":"","url":"https://api.github.com/users/damienallen","html_url":"https://github.com/damienallen","followers_url":"https://api.github.com/users/damienallen/followers","following_url":"https://api.github.com/users/damienallen/following{/other_user}","gists_url":"https://api.github.com/users/damienallen/gists{/gist_id}","starred_url":"https://api.github.com/users/damienallen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/damienallen/subscriptions","organizations_url":"https://api.github.com/users/damienallen/orgs","repos_url":"https://api.github.com/users/damienallen/repos","events_url":"https://api.github.com/users/damienallen/events{/privacy}","received_events_url":"https://api.github.com/users/damienallen/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/akvo/akvo-rsr/milestones/67","html_url":"https://github.com/akvo/akvo-rsr/milestones/3.14%20Riga","labels_url":"https://api.github.com/repos/akvo/akvo-rsr/milestones/67/labels","id":1602469,"number":67,"title":"3.14 Riga","description":"Code freeze: 6th of June.","creator":{"login":"KasperBrandt","id":1497367,"avatar_url":"https://avatars.githubusercontent.com/u/1497367?v=3","gravatar_id":"","url":"https://api.github.com/users/KasperBrandt","html_url":"https://github.com/KasperBrandt","followers_url":"https://api.github.com/users/KasperBrandt/followers","following_url":"https://api.github.com/users/KasperBrandt/following{/other_user}","gists_url":"https://api.github.com/users/KasperBrandt/gists{/gist_id}","starred_url":"https://api.github.com/users/KasperBrandt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/KasperBrandt/subscriptions","organizations_url":"https://api.github.com/users/KasperBrandt/orgs","repos_url":"https://api.github.com/users/KasperBrandt/repos","events_url":"https://api.github.com/users/KasperBrandt/events{/privacy}","received_events_url":"https://api.github.com/users/KasperBrandt/received_events","type":"User","site_admin":false},"open_issues":6,"closed_issues":12,"state":"open","created_at":"2016-02-24T13:22:20Z","updated_at":"2016-05-24T07:19:14Z","due_on":"2016-06-12T22:00:00Z","closed_at":null},"comments":1,"created_at":"2016-05-09T09:38:02Z","updated_at":"2016-05-24T07:19:14Z","closed_at":"2016-05-24T07:19:14Z","body":"Buttons for edits, results and updates in myRSR/My Projects are sometimes disabled for projects depending on their status (eg. unpublished or complete). However, these pages can still be accessed directly by URL. Thus, access to the following pages should be restricted (raise 403 forbidden) accordingly under the same circumstances:\r\n\r\nhttp://rsr.localdev.akvo.org/en/myrsr/project_editor/5/\r\nhttp://rsr.localdev.akvo.org/en/myrsr/results/5/\r\nhttp://rsr.localdev.akvo.org/en/project/5/add_update/\r\n\r\nTo clarify, the project id (in bold) can be changed to access project pages which should be disabled. Note, exceptions should be made for superuser where appropriate."}}
{"actor":{"display_login":"KasperBrandt"}}