{"action":"closed","issue":{"url":"https://api.github.com/repos/nearform/udaru/issues/517","repository_url":"https://api.github.com/repos/nearform/udaru","labels_url":"https://api.github.com/repos/nearform/udaru/issues/517/labels{/name}","comments_url":"https://api.github.com/repos/nearform/udaru/issues/517/comments","events_url":"https://api.github.com/repos/nearform/udaru/issues/517/events","html_url":"https://github.com/nearform/udaru/issues/517","id":312009857,"number":517,"title":"List Policy Instances Endpoint","user":{"login":"cianfoley-nearform","id":36038467,"avatar_url":"https://avatars1.githubusercontent.com/u/36038467?v=4","gravatar_id":"","url":"https://api.github.com/users/cianfoley-nearform","html_url":"https://github.com/cianfoley-nearform","followers_url":"https://api.github.com/users/cianfoley-nearform/followers","following_url":"https://api.github.com/users/cianfoley-nearform/following{/other_user}","gists_url":"https://api.github.com/users/cianfoley-nearform/gists{/gist_id}","starred_url":"https://api.github.com/users/cianfoley-nearform/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cianfoley-nearform/subscriptions","organizations_url":"https://api.github.com/users/cianfoley-nearform/orgs","repos_url":"https://api.github.com/users/cianfoley-nearform/repos","events_url":"https://api.github.com/users/cianfoley-nearform/events{/privacy}","received_events_url":"https://api.github.com/users/cianfoley-nearform/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-04-06T15:02:02Z","updated_at":"2018-05-02T10:38:27Z","closed_at":"2018-05-02T10:38:27Z","author_association":"CONTRIBUTOR","body":"it's important that we add an endpoint for listing policy instances/references from a security and misconfiguration point of view:\r\n\r\ni.e. /authorization/policies/instances\r\n\r\nwe've recently added an endpoint to show variables in a template policy\r\n/authorization/policies/variables\r\n\r\nin order to show policies that are using these variables (and correctly) the instances endpoint could show all references to policies in users/teams/groups, including those with or without variables... it is a concern to have misconfigured policies attached or policies attached to incorrect entities etc.\r\n\r\nAn initial version of this endpoint should group policy instances by entity type and list\r\n\r\nentityId\r\nand the usual policy reference information (policyId, name, version, variables)\r\n \r\n"}}
{"actor":{"display_login":"cianfoley-nearform"}}