{"action":"opened","issue":{"url":"https://api.github.com/repos/HelloZeroNet/ZeroNet/issues/1365","repository_url":"https://api.github.com/repos/HelloZeroNet/ZeroNet","labels_url":"https://api.github.com/repos/HelloZeroNet/ZeroNet/issues/1365/labels{/name}","comments_url":"https://api.github.com/repos/HelloZeroNet/ZeroNet/issues/1365/comments","events_url":"https://api.github.com/repos/HelloZeroNet/ZeroNet/issues/1365/events","html_url":"https://github.com/HelloZeroNet/ZeroNet/issues/1365","id":309190433,"number":1365,"title":"Not auhorize user is able to create data folder but fail to publish","user":{"login":"rllola","id":1772945,"avatar_url":"https://avatars3.githubusercontent.com/u/1772945?v=4","gravatar_id":"","url":"https://api.github.com/users/rllola","html_url":"https://github.com/rllola","followers_url":"https://api.github.com/users/rllola/followers","following_url":"https://api.github.com/users/rllola/following{/other_user}","gists_url":"https://api.github.com/users/rllola/gists{/gist_id}","starred_url":"https://api.github.com/users/rllola/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rllola/subscriptions","organizations_url":"https://api.github.com/users/rllola/orgs","repos_url":"https://api.github.com/users/rllola/repos","events_url":"https://api.github.com/users/rllola/events{/privacy}","received_events_url":"https://api.github.com/users/rllola/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-03-28T01:35:03Z","updated_at":"2018-03-28T01:35:03Z","closed_at":null,"author_association":"NONE","body":"### Step 1: Please describe your environment\r\n\r\n  * ZeroNet version: 0.6.2\r\n  * Operating system: ubuntu\r\n  * Web browser: firefox\r\n  * Tor status: disabled\r\n  * Opened port: no\r\n  * Special configuration: none\r\n\r\n### Step 2: Describe the problem:\r\n\r\nI let the user create a new entry to the database in a merger site but the merger site `permission_rules` say it he's not allowed to. It does create locally a data.json file and everything but fail to publish.\r\n\r\nIt is not really a critical issue but it can of mislead the user that the data might be avaible to others when it is only localy in his db because he doesn't have permission.\r\n\r\n#### Steps to reproduce:\r\n\r\n  1. Create a merger site with `permission_rules: {}`\r\n  2. Create a site which allow anyone to add an entry to any merger site\r\n  3. Try to add an entry to the one you know you don't have permission\r\n\r\n#### Observed Results:\r\n\r\nThe new entry is localy registered in the db but fail to publish to peer.\r\n\r\n#### Expected Results:\r\n\r\nI would expect to have an error message saying you cannot write in this merger site...\r\n"}}
{"actor":{"display_login":"rllola"}}