{"action":"created","issue":{"url":"https://api.github.com/repos/hypothesis/product-backlog/issues/236","repository_url":"https://api.github.com/repos/hypothesis/product-backlog","labels_url":"https://api.github.com/repos/hypothesis/product-backlog/issues/236/labels{/name}","comments_url":"https://api.github.com/repos/hypothesis/product-backlog/issues/236/comments","events_url":"https://api.github.com/repos/hypothesis/product-backlog/issues/236/events","html_url":"https://github.com/hypothesis/product-backlog/issues/236","id":215819405,"node_id":"MDU6SXNzdWUyMTU4MTk0MDU=","number":236,"title":"Improve private groups security & administration","user":{"login":"jeremydean","id":3261902,"node_id":"MDQ6VXNlcjMyNjE5MDI=","avatar_url":"https://avatars0.githubusercontent.com/u/3261902?v=4","gravatar_id":"","url":"https://api.github.com/users/jeremydean","html_url":"https://github.com/jeremydean","followers_url":"https://api.github.com/users/jeremydean/followers","following_url":"https://api.github.com/users/jeremydean/following{/other_user}","gists_url":"https://api.github.com/users/jeremydean/gists{/gist_id}","starred_url":"https://api.github.com/users/jeremydean/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jeremydean/subscriptions","organizations_url":"https://api.github.com/users/jeremydean/orgs","repos_url":"https://api.github.com/users/jeremydean/repos","events_url":"https://api.github.com/users/jeremydean/events{/privacy}","received_events_url":"https://api.github.com/users/jeremydean/received_events","type":"User","site_admin":false},"labels":[{"id":578841094,"node_id":"MDU6TGFiZWw1Nzg4NDEwOTQ=","url":"https://api.github.com/repos/hypothesis/product-backlog/labels/8%20points","name":"8 points","color":"0e8a16","default":false},{"id":451497630,"node_id":"MDU6TGFiZWw0NTE0OTc2MzA=","url":"https://api.github.com/repos/hypothesis/product-backlog/labels/feature%20request","name":"feature request","color":"84b6eb","default":false},{"id":451497631,"node_id":"MDU6TGFiZWw0NTE0OTc2MzE=","url":"https://api.github.com/repos/hypothesis/product-backlog/labels/user%20requested","name":"user requested","color":"128A0C","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2017-03-21T17:30:55Z","updated_at":"2018-12-18T16:24:40Z","closed_at":null,"author_association":"NONE","body":"## Better groups security\r\n### Privacy by obscurity is not sufficient for some users, especially in education\r\n\r\nThe privacy of a group can be too easily breached by anyone sharing the URL for the group. Users need a more secure way to form a group, both in terms of including and excluding other users--a group admin should be able to kick someone out of a group.  \r\n\r\n### Group formation based on a set of usernames and/or emails\r\n\r\n### From users:\r\n\r\n>I had my first workshop at Kalamazoo where I shared Hypothes.is with faculty members.  I figured you had experience with this and might have perspective.  Of the people who attended, one of the interesting “sticking points” (and one I didn’t anticipate) was the issue of moderation.  Basically, they were anxious that anyone could invite anyone to join a group, no one could moderate anyone else’s annotations, and no one could be removed from a group by someone else.\r\n\r\n>I am a TA in an online course and I was hoping to comment students' posts on the LMS discussion pages. I created the group but I couldn't find a way to invite students with Hypothesis accounts. It asks me to send the link to them to share the group but I'd like to be able to type their names and select their accounts so an invitation is automatically sent to them. Is there a way?\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/hypothesis/product-backlog/issues/comments/448280248","html_url":"https://github.com/hypothesis/product-backlog/issues/236#issuecomment-448280248","issue_url":"https://api.github.com/repos/hypothesis/product-backlog/issues/236","id":448280248,"node_id":"MDEyOklzc3VlQ29tbWVudDQ0ODI4MDI0OA==","user":{"login":"klemay","id":12087705,"node_id":"MDQ6VXNlcjEyMDg3NzA1","avatar_url":"https://avatars1.githubusercontent.com/u/12087705?v=4","gravatar_id":"","url":"https://api.github.com/users/klemay","html_url":"https://github.com/klemay","followers_url":"https://api.github.com/users/klemay/followers","following_url":"https://api.github.com/users/klemay/following{/other_user}","gists_url":"https://api.github.com/users/klemay/gists{/gist_id}","starred_url":"https://api.github.com/users/klemay/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/klemay/subscriptions","organizations_url":"https://api.github.com/users/klemay/orgs","repos_url":"https://api.github.com/users/klemay/repos","events_url":"https://api.github.com/users/klemay/events{/privacy}","received_events_url":"https://api.github.com/users/klemay/received_events","type":"User","site_admin":false},"created_at":"2018-12-18T16:24:40Z","updated_at":"2018-12-18T16:24:40Z","author_association":"NONE","body":"User request: https://hypothesis.zendesk.com/agent/tickets/3510\r\n\r\nAs the creator of the group can I get super-user privileges. For example:\r\n- Delete any comment\r\n- Tag any comment\r\n- Remove a user from the group\r\n- Block a user from the joining group\r\n- Delete the group and its annotations"}}
{"actor":{"display_login":"klemay"}}