{"action":"opened","issue":{"url":"https://api.github.com/repos/FINRAOS/herd/issues/77","repository_url":"https://api.github.com/repos/FINRAOS/herd","labels_url":"https://api.github.com/repos/FINRAOS/herd/issues/77/labels{/name}","comments_url":"https://api.github.com/repos/FINRAOS/herd/issues/77/comments","events_url":"https://api.github.com/repos/FINRAOS/herd/issues/77/events","html_url":"https://github.com/FINRAOS/herd/issues/77","id":136749840,"number":77,"title":"Restrict access by Namespace - File / Storage / Permissions / Policy services","user":{"login":"nateiam","id":3235317,"avatar_url":"https://avatars.githubusercontent.com/u/3235317?v=3","gravatar_id":"","url":"https://api.github.com/users/nateiam","html_url":"https://github.com/nateiam","followers_url":"https://api.github.com/users/nateiam/followers","following_url":"https://api.github.com/users/nateiam/following{/other_user}","gists_url":"https://api.github.com/users/nateiam/gists{/gist_id}","starred_url":"https://api.github.com/users/nateiam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nateiam/subscriptions","organizations_url":"https://api.github.com/users/nateiam/orgs","repos_url":"https://api.github.com/users/nateiam/repos","events_url":"https://api.github.com/users/nateiam/events{/privacy}","received_events_url":"https://api.github.com/users/nateiam/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/FINRAOS/herd/milestones/8","html_url":"https://github.com/FINRAOS/herd/milestones/Release%200.13.0","labels_url":"https://api.github.com/repos/FINRAOS/herd/milestones/8/labels","id":1608391,"number":8,"title":"Release 0.13.0","description":"","creator":{"login":"nateiam","id":3235317,"avatar_url":"https://avatars.githubusercontent.com/u/3235317?v=3","gravatar_id":"","url":"https://api.github.com/users/nateiam","html_url":"https://github.com/nateiam","followers_url":"https://api.github.com/users/nateiam/followers","following_url":"https://api.github.com/users/nateiam/following{/other_user}","gists_url":"https://api.github.com/users/nateiam/gists{/gist_id}","starred_url":"https://api.github.com/users/nateiam/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nateiam/subscriptions","organizations_url":"https://api.github.com/users/nateiam/orgs","repos_url":"https://api.github.com/users/nateiam/repos","events_url":"https://api.github.com/users/nateiam/events{/privacy}","received_events_url":"https://api.github.com/users/nateiam/received_events","type":"User","site_admin":false},"open_issues":4,"closed_issues":0,"state":"open","created_at":"2016-02-26T16:24:15Z","updated_at":"2016-02-26T16:47:17Z","due_on":"2016-03-25T04:00:00Z","closed_at":null},"comments":0,"created_at":"2016-02-26T16:47:17Z","updated_at":"2016-02-26T16:47:17Z","closed_at":null,"body":"As a Herd Administrator I want to restrict access to operations related to File / Storage / Permissions / Storage Policy based on whether or not the requester is authorized to view or manage metadata in a given Namespace.\r\n\r\nAcceptance Criteria\r\n* Check authorization on following operations\r\n** Upload and Download Single Initiate services\r\n** Upload and Download Credential services\r\n** CRUD for Account-Permissions mapping (this is the only service that utilizes GRANT permissions to govern creation)\r\n** Credential extension service\r\n** Storage Policy CRUD services\r\n* If not authorized, return appropriate HTTP error response\r\n* If requesting user does have authorization from the authorization provider but does not have AWS permissions, Herd will not generate the token and will catch the AWS exception and return an appropriate HTTP error to the user."}}