{"action":"created","comment":{"url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/comments/229860859","pull_request_review_id":170463892,"id":229860859,"node_id":"MDI0OlB1bGxSZXF1ZXN0UmV2aWV3Q29tbWVudDIyOTg2MDg1OQ==","diff_hunk":"@@ -15,15 +15,36 @@ lastupdated: \"2018-10-26\"\n # Accessing custom user attributes\n {: #custom}\n \n-With {{site.data.keyword.appid_full}}, you can save and access your custom attributes through API endpoints. You can see how creating user profiles can make a difference in this blog: <a href=\"https://www.ibm.com/blogs/bluemix/2017/03/introducing-ibm-bluemix-app-id-authentication-profiles-service-app-developers/\" target=\"_blank\">Introducing {{site.data.keyword.appid_short_notm}}<img src=\"../../icons/launch-glyph.svg\" alt=\"External link icon\"></a>.\n+With {{site.data.keyword.appid_full}}, you can save custom attributes in user profiles that you can access to create personalized app experiences.\n {: shortdesc}\n \n+**Why would I want to save additional attributes about a user?**\n+\n+Check out this blog to see how creating user profiles can make a difference: <a href=\"https://www.ibm.com/blogs/bluemix/2017/03/introducing-ibm-bluemix-app-id-authentication-profiles-service-app-developers/\" target=\"_blank\">Introducing {{site.data.keyword.appid_short_notm}}<img src=\"../../icons/launch-glyph.svg\" alt=\"External link icon\"></a>.\n+\n+</br>\n+\n+**How are the attributes saved?**\n+\n {{site.data.keyword.appid_short_notm}} provides a <a href=\"https://appid-profiles.ng.bluemix.net/swagger-ui/index.html#/Attributes\" target=\"_blank\">REST API <img src=\"../../icons/launch-glyph.svg\" alt=\"External link icon\"></a> that allows log in, either anonymously or by authenticating, with a supported identity provider. The API endpoint is a resource that is protected by the access token that is generated by {{site.data.keyword.appid_short_notm}} during the login and authorization process.\n \n+</br>\n \n-To learn more about the types of attributes and any security measures that you need to consider, check out [Understanding user profiles](/docs/services/appid/user-profile.html).\n-{: tip}\n+**Is there a limit to the amount of information that can be stored for each user?**\n+\n+You can store 100KB of information for each user.\n+\n+</br>\n+</br>\n+\n+## Security considerations\n+{: #security}\n+\n+Custom attributes are modifiable and can be updated by using an {{site.data.keyword.appid_short_notm}} access token from a client application. This means that without taking proper precautions either the user or the application can update custom attributes immediately following the first user sign in, provided that they have access to an access token. This can potentially lead to unintended consequences. For example, a user could change their role from user to admin which might expose administrative privileges to malicious users.","path":"custom-attributes.md","position":46,"original_position":46,"commit_id":"4c240d4413122a7f579963b8d98e75a3f8fd5f08","original_commit_id":"242c6575bb8b6da9416e2208f168904f91a7de05","user":{"login":"aal80","id":3949873,"node_id":"MDQ6VXNlcjM5NDk4NzM=","avatar_url":"https://avatars0.githubusercontent.com/u/3949873?v=4","gravatar_id":"","url":"https://api.github.com/users/aal80","html_url":"https://github.com/aal80","followers_url":"https://api.github.com/users/aal80/followers","following_url":"https://api.github.com/users/aal80/following{/other_user}","gists_url":"https://api.github.com/users/aal80/gists{/gist_id}","starred_url":"https://api.github.com/users/aal80/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aal80/subscriptions","organizations_url":"https://api.github.com/users/aal80/orgs","repos_url":"https://api.github.com/users/aal80/repos","events_url":"https://api.github.com/users/aal80/events{/privacy}","received_events_url":"https://api.github.com/users/aal80/received_events","type":"User","site_admin":false},"body":"add \"By default\" at the beginning of the sentence","created_at":"2018-10-31T20:44:28Z","updated_at":"2018-10-31T20:44:28Z","html_url":"https://github.com/IBM-Bluemix-Docs/appid/pull/259#discussion_r229860859","pull_request_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/259","author_association":"NONE","_links":{"self":{"href":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/comments/229860859"},"html":{"href":"https://github.com/IBM-Bluemix-Docs/appid/pull/259#discussion_r229860859"},"pull_request":{"href":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/259"}}},"pull_request":{"url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/259","id":227033257,"node_id":"MDExOlB1bGxSZXF1ZXN0MjI3MDMzMjU3","html_url":"https://github.com/IBM-Bluemix-Docs/appid/pull/259","diff_url":"https://github.com/IBM-Bluemix-Docs/appid/pull/259.diff","patch_url":"https://github.com/IBM-Bluemix-Docs/appid/pull/259.patch","issue_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/issues/259","number":259,"state":"open","locked":false,"title":"Includes Merge pull request #363 from alchemy-writers/smguilia-patch-1 and more...","user":{"login":"alchemyDocs","id":20405225,"node_id":"MDQ6VXNlcjIwNDA1MjI1","avatar_url":"https://avatars3.githubusercontent.com/u/20405225?v=4","gravatar_id":"","url":"https://api.github.com/users/alchemyDocs","html_url":"https://github.com/alchemyDocs","followers_url":"https://api.github.com/users/alchemyDocs/followers","following_url":"https://api.github.com/users/alchemyDocs/following{/other_user}","gists_url":"https://api.github.com/users/alchemyDocs/gists{/gist_id}","starred_url":"https://api.github.com/users/alchemyDocs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alchemyDocs/subscriptions","organizations_url":"https://api.github.com/users/alchemyDocs/orgs","repos_url":"https://api.github.com/users/alchemyDocs/repos","events_url":"https://api.github.com/users/alchemyDocs/events{/privacy}","received_events_url":"https://api.github.com/users/alchemyDocs/received_events","type":"User","site_admin":false},"body":"See the Commits and Files changed tabs for more information about what is included in this pull request.","created_at":"2018-10-30T18:26:13Z","updated_at":"2018-10-31T20:44:28Z","closed_at":null,"merged_at":null,"merge_commit_sha":"e1a44cd1cd7b717600592939e9b054ec0fbbd0a5","assignee":null,"assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[],"milestone":null,"commits_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/259/commits","review_comments_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/259/comments","review_comment_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/comments{/number}","comments_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/issues/259/comments","statuses_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/statuses/4c240d4413122a7f579963b8d98e75a3f8fd5f08","head":{"label":"IBM-Bluemix-Docs:next-prod-push","ref":"next-prod-push","sha":"4c240d4413122a7f579963b8d98e75a3f8fd5f08","user":{"login":"IBM-Bluemix-Docs","id":28810603,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI4ODEwNjAz","avatar_url":"https://avatars3.githubusercontent.com/u/28810603?v=4","gravatar_id":"","url":"https://api.github.com/users/IBM-Bluemix-Docs","html_url":"https://github.com/IBM-Bluemix-Docs","followers_url":"https://api.github.com/users/IBM-Bluemix-Docs/followers","following_url":"https://api.github.com/users/IBM-Bluemix-Docs/following{/other_user}","gists_url":"https://api.github.com/users/IBM-Bluemix-Docs/gists{/gist_id}","starred_url":"https://api.github.com/users/IBM-Bluemix-Docs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/IBM-Bluemix-Docs/subscriptions","organizations_url":"https://api.github.com/users/IBM-Bluemix-Docs/orgs","repos_url":"https://api.github.com/users/IBM-Bluemix-Docs/repos","events_url":"https://api.github.com/users/IBM-Bluemix-Docs/events{/privacy}","received_events_url":"https://api.github.com/users/IBM-Bluemix-Docs/received_events","type":"Organization","site_admin":false},"repo":{"id":94154067,"node_id":"MDEwOlJlcG9zaXRvcnk5NDE1NDA2Nw==","name":"appid","full_name":"IBM-Bluemix-Docs/appid","private":false,"owner":{"login":"IBM-Bluemix-Docs","id":28810603,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI4ODEwNjAz","avatar_url":"https://avatars3.githubusercontent.com/u/28810603?v=4","gravatar_id":"","url":"https://api.github.com/users/IBM-Bluemix-Docs","html_url":"https://github.com/IBM-Bluemix-Docs","followers_url":"https://api.github.com/users/IBM-Bluemix-Docs/followers","following_url":"https://api.github.com/users/IBM-Bluemix-Docs/following{/other_user}","gists_url":"https://api.github.com/users/IBM-Bluemix-Docs/gists{/gist_id}","starred_url":"https://api.github.com/users/IBM-Bluemix-Docs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/IBM-Bluemix-Docs/subscriptions","organizations_url":"https://api.github.com/users/IBM-Bluemix-Docs/orgs","repos_url":"https://api.github.com/users/IBM-Bluemix-Docs/repos","events_url":"https://api.github.com/users/IBM-Bluemix-Docs/events{/privacy}","received_events_url":"https://api.github.com/users/IBM-Bluemix-Docs/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/IBM-Bluemix-Docs/appid","description":"IBM Cloud App ID documentation","fork":false,"url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid","forks_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/forks","keys_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/keys{/key_id}","collaborators_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/teams","hooks_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/hooks","issue_events_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/issues/events{/number}","events_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/events","assignees_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/assignees{/user}","branches_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/branches{/branch}","tags_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/tags","blobs_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/git/refs{/sha}","trees_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/git/trees{/sha}","statuses_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/statuses/{sha}","languages_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/languages","stargazers_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/stargazers","contributors_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/contributors","subscribers_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/subscribers","subscription_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/subscription","commits_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/commits{/sha}","git_commits_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/git/commits{/sha}","comments_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/comments{/number}","issue_comment_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/issues/comments{/number}","contents_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/contents/{+path}","compare_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/compare/{base}...{head}","merges_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/merges","archive_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/downloads","issues_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/issues{/number}","pulls_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls{/number}","milestones_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/milestones{/number}","notifications_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/labels{/name}","releases_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/releases{/id}","deployments_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/deployments","created_at":"2017-06-13T00:58:36Z","updated_at":"2018-10-30T19:57:38Z","pushed_at":"2018-10-31T20:37:11Z","git_url":"git://github.com/IBM-Bluemix-Docs/appid.git","ssh_url":"git@github.com:IBM-Bluemix-Docs/appid.git","clone_url":"https://github.com/IBM-Bluemix-Docs/appid.git","svn_url":"https://github.com/IBM-Bluemix-Docs/appid","homepage":"https://console.bluemix.net/docs/services/appid/index.html","size":278535,"stargazers_count":2,"watchers_count":2,"language":null,"has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":7,"mirror_url":null,"archived":false,"open_issues_count":1,"license":null,"forks":7,"open_issues":1,"watchers":2,"default_branch":"master"}},"base":{"label":"IBM-Bluemix-Docs:master","ref":"master","sha":"a37ac219121967e4273e825e7a22949d21b51258","user":{"login":"IBM-Bluemix-Docs","id":28810603,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI4ODEwNjAz","avatar_url":"https://avatars3.githubusercontent.com/u/28810603?v=4","gravatar_id":"","url":"https://api.github.com/users/IBM-Bluemix-Docs","html_url":"https://github.com/IBM-Bluemix-Docs","followers_url":"https://api.github.com/users/IBM-Bluemix-Docs/followers","following_url":"https://api.github.com/users/IBM-Bluemix-Docs/following{/other_user}","gists_url":"https://api.github.com/users/IBM-Bluemix-Docs/gists{/gist_id}","starred_url":"https://api.github.com/users/IBM-Bluemix-Docs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/IBM-Bluemix-Docs/subscriptions","organizations_url":"https://api.github.com/users/IBM-Bluemix-Docs/orgs","repos_url":"https://api.github.com/users/IBM-Bluemix-Docs/repos","events_url":"https://api.github.com/users/IBM-Bluemix-Docs/events{/privacy}","received_events_url":"https://api.github.com/users/IBM-Bluemix-Docs/received_events","type":"Organization","site_admin":false},"repo":{"id":94154067,"node_id":"MDEwOlJlcG9zaXRvcnk5NDE1NDA2Nw==","name":"appid","full_name":"IBM-Bluemix-Docs/appid","private":false,"owner":{"login":"IBM-Bluemix-Docs","id":28810603,"node_id":"MDEyOk9yZ2FuaXphdGlvbjI4ODEwNjAz","avatar_url":"https://avatars3.githubusercontent.com/u/28810603?v=4","gravatar_id":"","url":"https://api.github.com/users/IBM-Bluemix-Docs","html_url":"https://github.com/IBM-Bluemix-Docs","followers_url":"https://api.github.com/users/IBM-Bluemix-Docs/followers","following_url":"https://api.github.com/users/IBM-Bluemix-Docs/following{/other_user}","gists_url":"https://api.github.com/users/IBM-Bluemix-Docs/gists{/gist_id}","starred_url":"https://api.github.com/users/IBM-Bluemix-Docs/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/IBM-Bluemix-Docs/subscriptions","organizations_url":"https://api.github.com/users/IBM-Bluemix-Docs/orgs","repos_url":"https://api.github.com/users/IBM-Bluemix-Docs/repos","events_url":"https://api.github.com/users/IBM-Bluemix-Docs/events{/privacy}","received_events_url":"https://api.github.com/users/IBM-Bluemix-Docs/received_events","type":"Organization","site_admin":false},"html_url":"https://github.com/IBM-Bluemix-Docs/appid","description":"IBM Cloud App ID documentation","fork":false,"url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid","forks_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/forks","keys_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/keys{/key_id}","collaborators_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/teams","hooks_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/hooks","issue_events_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/issues/events{/number}","events_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/events","assignees_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/assignees{/user}","branches_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/branches{/branch}","tags_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/tags","blobs_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/git/refs{/sha}","trees_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/git/trees{/sha}","statuses_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/statuses/{sha}","languages_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/languages","stargazers_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/stargazers","contributors_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/contributors","subscribers_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/subscribers","subscription_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/subscription","commits_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/commits{/sha}","git_commits_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/git/commits{/sha}","comments_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/comments{/number}","issue_comment_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/issues/comments{/number}","contents_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/contents/{+path}","compare_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/compare/{base}...{head}","merges_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/merges","archive_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/downloads","issues_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/issues{/number}","pulls_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls{/number}","milestones_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/milestones{/number}","notifications_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/labels{/name}","releases_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/releases{/id}","deployments_url":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/deployments","created_at":"2017-06-13T00:58:36Z","updated_at":"2018-10-30T19:57:38Z","pushed_at":"2018-10-31T20:37:11Z","git_url":"git://github.com/IBM-Bluemix-Docs/appid.git","ssh_url":"git@github.com:IBM-Bluemix-Docs/appid.git","clone_url":"https://github.com/IBM-Bluemix-Docs/appid.git","svn_url":"https://github.com/IBM-Bluemix-Docs/appid","homepage":"https://console.bluemix.net/docs/services/appid/index.html","size":278535,"stargazers_count":2,"watchers_count":2,"language":null,"has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":7,"mirror_url":null,"archived":false,"open_issues_count":1,"license":null,"forks":7,"open_issues":1,"watchers":2,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/259"},"html":{"href":"https://github.com/IBM-Bluemix-Docs/appid/pull/259"},"issue":{"href":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/issues/259"},"comments":{"href":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/issues/259/comments"},"review_comments":{"href":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/259/comments"},"review_comment":{"href":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/pulls/259/commits"},"statuses":{"href":"https://api.github.com/repos/IBM-Bluemix-Docs/appid/statuses/4c240d4413122a7f579963b8d98e75a3f8fd5f08"}},"author_association":"COLLABORATOR"}}
{"actor":{"display_login":"aal80"}}