{"action":"created","issue":{"url":"https://api.github.com/repos/nopSolutions/nopCommerce/issues/374","repository_url":"https://api.github.com/repos/nopSolutions/nopCommerce","labels_url":"https://api.github.com/repos/nopSolutions/nopCommerce/issues/374/labels{/name}","comments_url":"https://api.github.com/repos/nopSolutions/nopCommerce/issues/374/comments","events_url":"https://api.github.com/repos/nopSolutions/nopCommerce/issues/374/events","html_url":"https://github.com/nopSolutions/nopCommerce/issues/374","id":127176650,"node_id":"MDU6SXNzdWUxMjcxNzY2NTA=","number":374,"title":"More ACL permissions for admin area actions (\"read\", \"write\", etc)","user":{"login":"mariannk","id":16681184,"node_id":"MDQ6VXNlcjE2NjgxMTg0","avatar_url":"https://avatars0.githubusercontent.com/u/16681184?v=4","gravatar_id":"","url":"https://api.github.com/users/mariannk","html_url":"https://github.com/mariannk","followers_url":"https://api.github.com/users/mariannk/followers","following_url":"https://api.github.com/users/mariannk/following{/other_user}","gists_url":"https://api.github.com/users/mariannk/gists{/gist_id}","starred_url":"https://api.github.com/users/mariannk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mariannk/subscriptions","organizations_url":"https://api.github.com/users/mariannk/orgs","repos_url":"https://api.github.com/users/mariannk/repos","events_url":"https://api.github.com/users/mariannk/events{/privacy}","received_events_url":"https://api.github.com/users/mariannk/received_events","type":"User","site_admin":false},"labels":[{"id":477688617,"node_id":"MDU6TGFiZWw0Nzc2ODg2MTc=","url":"https://api.github.com/repos/nopSolutions/nopCommerce/labels/enterprise%20/%20highlight%20feature","name":"enterprise / highlight feature","color":"1d76db","default":false}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/nopSolutions/nopCommerce/milestones/5","html_url":"https://github.com/nopSolutions/nopCommerce/milestone/5","labels_url":"https://api.github.com/repos/nopSolutions/nopCommerce/milestones/5/labels","id":3516649,"node_id":"MDk6TWlsZXN0b25lMzUxNjY0OQ==","number":5,"title":"Version 4.20","description":"","creator":{"login":"AndreiMaz","id":5019111,"node_id":"MDQ6VXNlcjUwMTkxMTE=","avatar_url":"https://avatars0.githubusercontent.com/u/5019111?v=4","gravatar_id":"","url":"https://api.github.com/users/AndreiMaz","html_url":"https://github.com/AndreiMaz","followers_url":"https://api.github.com/users/AndreiMaz/followers","following_url":"https://api.github.com/users/AndreiMaz/following{/other_user}","gists_url":"https://api.github.com/users/AndreiMaz/gists{/gist_id}","starred_url":"https://api.github.com/users/AndreiMaz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/AndreiMaz/subscriptions","organizations_url":"https://api.github.com/users/AndreiMaz/orgs","repos_url":"https://api.github.com/users/AndreiMaz/repos","events_url":"https://api.github.com/users/AndreiMaz/events{/privacy}","received_events_url":"https://api.github.com/users/AndreiMaz/received_events","type":"User","site_admin":false},"open_issues":83,"closed_issues":39,"state":"open","created_at":"2018-07-23T14:41:27Z","updated_at":"2018-09-18T10:43:01Z","due_on":"2019-02-18T08:00:00Z","closed_at":null},"comments":2,"created_at":"2016-01-18T08:29:13Z","updated_at":"2018-09-19T11:01:01Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"Currently we have only \"manage something\" permissions. For example, manage affiliate. Hence, read AND write access \n\nAlso see http://www.nopcommerce.com/boards/t/38298/more-acl-rules.aspx (info below): \n\nTo become more secure, nop should have a lot of ACL rules, for example, an employee viewing an order, should have or not access to edit it, delete or create shipments. Same on products, campaigns and etc. \n\nRules should exists all over the admin area, allowing store owners set each rule to each profile. \n\nA rule should be set be over a view/action, so we will have much more flexibility. \n\nORDER - VIEW, VIEW SUMMARY, EDIT, DELETE, EXPORT \nPRODUCT - CREATE, EDIT, DELETE, EXPORT \nCAMPAIGN - CREATE, EDIT, SEND, DELETE \nETC, ETC. \n\nShould be nice if nop could automacally read all existing view/actions and enable us to grant or revoke access, like existing ACL page, this way developers couldnt worry about create all necessary rules. This way you cant change all nop source adding new rules and modifying all controllers.\n"},"comment":{"url":"https://api.github.com/repos/nopSolutions/nopCommerce/issues/comments/422757663","html_url":"https://github.com/nopSolutions/nopCommerce/issues/374#issuecomment-422757663","issue_url":"https://api.github.com/repos/nopSolutions/nopCommerce/issues/374","id":422757663,"node_id":"MDEyOklzc3VlQ29tbWVudDQyMjc1NzY2Mw==","user":{"login":"RomanovM","id":16698464,"node_id":"MDQ6VXNlcjE2Njk4NDY0","avatar_url":"https://avatars3.githubusercontent.com/u/16698464?v=4","gravatar_id":"","url":"https://api.github.com/users/RomanovM","html_url":"https://github.com/RomanovM","followers_url":"https://api.github.com/users/RomanovM/followers","following_url":"https://api.github.com/users/RomanovM/following{/other_user}","gists_url":"https://api.github.com/users/RomanovM/gists{/gist_id}","starred_url":"https://api.github.com/users/RomanovM/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/RomanovM/subscriptions","organizations_url":"https://api.github.com/users/RomanovM/orgs","repos_url":"https://api.github.com/users/RomanovM/repos","events_url":"https://api.github.com/users/RomanovM/events{/privacy}","received_events_url":"https://api.github.com/users/RomanovM/received_events","type":"User","site_admin":false},"created_at":"2018-09-19T11:01:01Z","updated_at":"2018-09-19T11:01:01Z","author_association":"CONTRIBUTOR","body":"Related with https://github.com/nopSolutions/nopCommerce/issues/374"}}
{"actor":{"display_login":"RomanovM"}}