{"action":"opened","issue":{"url":"https://api.github.com/repos/statamic/docs/issues/152","repository_url":"https://api.github.com/repos/statamic/docs","labels_url":"https://api.github.com/repos/statamic/docs/issues/152/labels{/name}","comments_url":"https://api.github.com/repos/statamic/docs/issues/152/comments","events_url":"https://api.github.com/repos/statamic/docs/issues/152/events","html_url":"https://github.com/statamic/docs/issues/152","id":194574995,"number":152,"title":"Addon controller authentication/security is not documented","user":{"login":"rrelmy","id":442683,"avatar_url":"https://avatars.githubusercontent.com/u/442683?v=3","gravatar_id":"","url":"https://api.github.com/users/rrelmy","html_url":"https://github.com/rrelmy","followers_url":"https://api.github.com/users/rrelmy/followers","following_url":"https://api.github.com/users/rrelmy/following{/other_user}","gists_url":"https://api.github.com/users/rrelmy/gists{/gist_id}","starred_url":"https://api.github.com/users/rrelmy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rrelmy/subscriptions","organizations_url":"https://api.github.com/users/rrelmy/orgs","repos_url":"https://api.github.com/users/rrelmy/repos","events_url":"https://api.github.com/users/rrelmy/events{/privacy}","received_events_url":"https://api.github.com/users/rrelmy/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-12-09T11:33:38Z","updated_at":"2016-12-09T11:33:38Z","closed_at":null,"body":"By default all addon routes are accessible without authentication, this should be documented with a warning.\r\n\r\nIf only super users should be able to access the method `$this->authorize('super')` must be called at the top of the method.\r\n\r\n```\r\n    public function index()\r\n    {\r\n        $this->authorize('super');\r\n\r\n        return $this->view('index');\r\n    }\r\n```\r\n\r\nMaybe it would be a good idea to add this call to the skeleton code."}}
{"actor":{"display_login":"rrelmy"}}