{"action":"created","issue":{"url":"https://api.github.com/repos/akvo/akvo-flow/issues/1558","repository_url":"https://api.github.com/repos/akvo/akvo-flow","labels_url":"https://api.github.com/repos/akvo/akvo-flow/issues/1558/labels{/name}","comments_url":"https://api.github.com/repos/akvo/akvo-flow/issues/1558/comments","events_url":"https://api.github.com/repos/akvo/akvo-flow/issues/1558/events","html_url":"https://github.com/akvo/akvo-flow/issues/1558","id":125001707,"node_id":"MDU6SXNzdWUxMjUwMDE3MDc=","number":1558,"title":"View Form & View Folder permissions give you View Data by default","user":{"login":"rumca","id":3003031,"node_id":"MDQ6VXNlcjMwMDMwMzE=","avatar_url":"https://avatars3.githubusercontent.com/u/3003031?v=4","gravatar_id":"","url":"https://api.github.com/users/rumca","html_url":"https://github.com/rumca","followers_url":"https://api.github.com/users/rumca/followers","following_url":"https://api.github.com/users/rumca/following{/other_user}","gists_url":"https://api.github.com/users/rumca/gists{/gist_id}","starred_url":"https://api.github.com/users/rumca/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rumca/subscriptions","organizations_url":"https://api.github.com/users/rumca/orgs","repos_url":"https://api.github.com/users/rumca/repos","events_url":"https://api.github.com/users/rumca/events{/privacy}","received_events_url":"https://api.github.com/users/rumca/received_events","type":"User","site_admin":false},"labels":[{"id":233457390,"node_id":"MDU6TGFiZWwyMzM0NTczOTA=","url":"https://api.github.com/repos/akvo/akvo-flow/labels/1%20-%20User/%20R&P","name":"1 - User/ R&P","color":"c5def5","default":false},{"id":460843155,"node_id":"MDU6TGFiZWw0NjA4NDMxNTU=","url":"https://api.github.com/repos/akvo/akvo-flow/labels/Ready%20for%20release","name":"Ready for release","color":"e6e6e6","default":false},{"id":742953694,"node_id":"MDU6TGFiZWw3NDI5NTM2OTQ=","url":"https://api.github.com/repos/akvo/akvo-flow/labels/data%20privacy","name":"data privacy","color":"ce2b82","default":false}],"state":"open","locked":false,"assignee":{"login":"muloem","id":533336,"node_id":"MDQ6VXNlcjUzMzMzNg==","avatar_url":"https://avatars2.githubusercontent.com/u/533336?v=4","gravatar_id":"","url":"https://api.github.com/users/muloem","html_url":"https://github.com/muloem","followers_url":"https://api.github.com/users/muloem/followers","following_url":"https://api.github.com/users/muloem/following{/other_user}","gists_url":"https://api.github.com/users/muloem/gists{/gist_id}","starred_url":"https://api.github.com/users/muloem/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/muloem/subscriptions","organizations_url":"https://api.github.com/users/muloem/orgs","repos_url":"https://api.github.com/users/muloem/repos","events_url":"https://api.github.com/users/muloem/events{/privacy}","received_events_url":"https://api.github.com/users/muloem/received_events","type":"User","site_admin":false},"assignees":[{"login":"muloem","id":533336,"node_id":"MDQ6VXNlcjUzMzMzNg==","avatar_url":"https://avatars2.githubusercontent.com/u/533336?v=4","gravatar_id":"","url":"https://api.github.com/users/muloem","html_url":"https://github.com/muloem","followers_url":"https://api.github.com/users/muloem/followers","following_url":"https://api.github.com/users/muloem/following{/other_user}","gists_url":"https://api.github.com/users/muloem/gists{/gist_id}","starred_url":"https://api.github.com/users/muloem/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/muloem/subscriptions","organizations_url":"https://api.github.com/users/muloem/orgs","repos_url":"https://api.github.com/users/muloem/repos","events_url":"https://api.github.com/users/muloem/events{/privacy}","received_events_url":"https://api.github.com/users/muloem/received_events","type":"User","site_admin":false},{"login":"kymni","id":1155088,"node_id":"MDQ6VXNlcjExNTUwODg=","avatar_url":"https://avatars2.githubusercontent.com/u/1155088?v=4","gravatar_id":"","url":"https://api.github.com/users/kymni","html_url":"https://github.com/kymni","followers_url":"https://api.github.com/users/kymni/followers","following_url":"https://api.github.com/users/kymni/following{/other_user}","gists_url":"https://api.github.com/users/kymni/gists{/gist_id}","starred_url":"https://api.github.com/users/kymni/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kymni/subscriptions","organizations_url":"https://api.github.com/users/kymni/orgs","repos_url":"https://api.github.com/users/kymni/repos","events_url":"https://api.github.com/users/kymni/events{/privacy}","received_events_url":"https://api.github.com/users/kymni/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/akvo/akvo-flow/milestones/117","html_url":"https://github.com/akvo/akvo-flow/milestone/117","labels_url":"https://api.github.com/repos/akvo/akvo-flow/milestones/117/labels","id":3283266,"node_id":"MDk6TWlsZXN0b25lMzI4MzI2Ng==","number":117,"title":"1.9.33 Fantastic Fern","description":"","creator":{"login":"janagombitova","id":12456965,"node_id":"MDQ6VXNlcjEyNDU2OTY1","avatar_url":"https://avatars2.githubusercontent.com/u/12456965?v=4","gravatar_id":"","url":"https://api.github.com/users/janagombitova","html_url":"https://github.com/janagombitova","followers_url":"https://api.github.com/users/janagombitova/followers","following_url":"https://api.github.com/users/janagombitova/following{/other_user}","gists_url":"https://api.github.com/users/janagombitova/gists{/gist_id}","starred_url":"https://api.github.com/users/janagombitova/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/janagombitova/subscriptions","organizations_url":"https://api.github.com/users/janagombitova/orgs","repos_url":"https://api.github.com/users/janagombitova/repos","events_url":"https://api.github.com/users/janagombitova/events{/privacy}","received_events_url":"https://api.github.com/users/janagombitova/received_events","type":"User","site_admin":false},"open_issues":12,"closed_issues":2,"state":"open","created_at":"2018-04-20T06:57:49Z","updated_at":"2018-06-06T12:58:29Z","due_on":"2018-06-04T07:00:00Z","closed_at":null},"comments":17,"created_at":"2016-01-05T16:35:02Z","updated_at":"2018-06-06T13:23:15Z","closed_at":null,"author_association":"CONTRIBUTOR","body":"I've set up a user so that they have the `view form` and `view folder` permissions. When I log in their permission set looks like:\n\n```\n pathPermissions: {\"<id>\":[\"PROJECT_FOLDER_READ\",\"FORM_READ\"]}\n```\n\nfrom discussion with @janagombitova I think it's expected that this user should not be able to subsequently view data for surveys within the folder they are permissioned for, however I can navigate to the inspect data tab and view responses. \n\nIs it possible to just hide the \"Inspect Data\" and \"Monitoring\" tabs if the user does not have `\"DATA_READ\"` in their pathPermissions?\n"},"comment":{"url":"https://api.github.com/repos/akvo/akvo-flow/issues/comments/395066597","html_url":"https://github.com/akvo/akvo-flow/issues/1558#issuecomment-395066597","issue_url":"https://api.github.com/repos/akvo/akvo-flow/issues/1558","id":395066597,"node_id":"MDEyOklzc3VlQ29tbWVudDM5NTA2NjU5Nw==","user":{"login":"valllllll2000","id":923280,"node_id":"MDQ6VXNlcjkyMzI4MA==","avatar_url":"https://avatars0.githubusercontent.com/u/923280?v=4","gravatar_id":"","url":"https://api.github.com/users/valllllll2000","html_url":"https://github.com/valllllll2000","followers_url":"https://api.github.com/users/valllllll2000/followers","following_url":"https://api.github.com/users/valllllll2000/following{/other_user}","gists_url":"https://api.github.com/users/valllllll2000/gists{/gist_id}","starred_url":"https://api.github.com/users/valllllll2000/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/valllllll2000/subscriptions","organizations_url":"https://api.github.com/users/valllllll2000/orgs","repos_url":"https://api.github.com/users/valllllll2000/repos","events_url":"https://api.github.com/users/valllllll2000/events{/privacy}","received_events_url":"https://api.github.com/users/valllllll2000/received_events","type":"User","site_admin":false},"created_at":"2018-06-06T13:23:15Z","updated_at":"2018-06-06T13:23:15Z","author_association":"CONTRIBUTOR","body":"BUT:\r\nMonitoring allows to view data from both allowed and non allowed surveys\r\nYou can get a comprehensive report"}}
{"actor":{"display_login":"valllllll2000"}}