{"action":"created","issue":{"url":"https://api.github.com/repos/edx/edx-platform/issues/12435","repository_url":"https://api.github.com/repos/edx/edx-platform","labels_url":"https://api.github.com/repos/edx/edx-platform/issues/12435/labels{/name}","comments_url":"https://api.github.com/repos/edx/edx-platform/issues/12435/comments","events_url":"https://api.github.com/repos/edx/edx-platform/issues/12435/events","html_url":"https://github.com/edx/edx-platform/pull/12435","id":154326563,"number":12435,"title":"Authentication and Authorization for Cert Rest APIs fixed","user":{"login":"giocalitri","id":1005204,"avatar_url":"https://avatars.githubusercontent.com/u/1005204?v=3","gravatar_id":"","url":"https://api.github.com/users/giocalitri","html_url":"https://github.com/giocalitri","followers_url":"https://api.github.com/users/giocalitri/followers","following_url":"https://api.github.com/users/giocalitri/following{/other_user}","gists_url":"https://api.github.com/users/giocalitri/gists{/gist_id}","starred_url":"https://api.github.com/users/giocalitri/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/giocalitri/subscriptions","organizations_url":"https://api.github.com/users/giocalitri/orgs","repos_url":"https://api.github.com/users/giocalitri/repos","events_url":"https://api.github.com/users/giocalitri/events{/privacy}","received_events_url":"https://api.github.com/users/giocalitri/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/edx/edx-platform/labels/awaiting%20prioritization","name":"awaiting prioritization","color":"fad8c7"},{"url":"https://api.github.com/repos/edx/edx-platform/labels/open-source-contribution","name":"open-source-contribution","color":"bfe5bf"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":11,"created_at":"2016-05-11T19:46:05Z","updated_at":"2016-05-20T18:32:23Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/edx/edx-platform/pulls/12435","html_url":"https://github.com/edx/edx-platform/pull/12435","diff_url":"https://github.com/edx/edx-platform/pull/12435.diff","patch_url":"https://github.com/edx/edx-platform/pull/12435.patch"},"body":"#### What's this PR do?\r\nFixes the authentication and authorization classes for the Certificates REST APIs\r\n\r\n#### How should this be manually tested?\r\nCreate a not active user and try to use the Certificate endpoint\r\n\r\nMore info about how to use the endpoint are in the description of the original PR that introduced the Certificates REST API #12055"},"comment":{"url":"https://api.github.com/repos/edx/edx-platform/issues/comments/220684311","html_url":"https://github.com/edx/edx-platform/pull/12435#issuecomment-220684311","issue_url":"https://api.github.com/repos/edx/edx-platform/issues/12435","id":220684311,"user":{"login":"clintonb","id":910510,"avatar_url":"https://avatars.githubusercontent.com/u/910510?v=3","gravatar_id":"","url":"https://api.github.com/users/clintonb","html_url":"https://github.com/clintonb","followers_url":"https://api.github.com/users/clintonb/followers","following_url":"https://api.github.com/users/clintonb/following{/other_user}","gists_url":"https://api.github.com/users/clintonb/gists{/gist_id}","starred_url":"https://api.github.com/users/clintonb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/clintonb/subscriptions","organizations_url":"https://api.github.com/users/clintonb/orgs","repos_url":"https://api.github.com/users/clintonb/repos","events_url":"https://api.github.com/users/clintonb/events{/privacy}","received_events_url":"https://api.github.com/users/clintonb/received_events","type":"User","site_admin":false},"created_at":"2016-05-20T18:32:23Z","updated_at":"2016-05-20T18:32:23Z","body":"1. The Enrollment API is exceptional because part of the normal workflow is having users enroll and register simultaneously. In this case, a user has had ample time activate the account by validating an email address. (Note that I think it's silly that we use the \"active\" bit to denote email validation.)\r\n2. If a user authenticates with a third-party backend, that backend should be responsible for either providing a verified email address and marking the account active or triggering the verification email."}}
{"actor":{"display_login":"clintonb"}}