{"action":"created","issue":{"url":"https://api.github.com/repos/hydroshare/hydroshare/issues/2080","repository_url":"https://api.github.com/repos/hydroshare/hydroshare","labels_url":"https://api.github.com/repos/hydroshare/hydroshare/issues/2080/labels{/name}","comments_url":"https://api.github.com/repos/hydroshare/hydroshare/issues/2080/comments","events_url":"https://api.github.com/repos/hydroshare/hydroshare/issues/2080/events","html_url":"https://github.com/hydroshare/hydroshare/issues/2080","id":225368317,"number":2080,"title":"user with EDIT access can undo PUBLIC access but cannot re-institute it. ","user":{"login":"alvacouch","id":3342292,"avatar_url":"https://avatars2.githubusercontent.com/u/3342292?v=3","gravatar_id":"","url":"https://api.github.com/users/alvacouch","html_url":"https://github.com/alvacouch","followers_url":"https://api.github.com/users/alvacouch/followers","following_url":"https://api.github.com/users/alvacouch/following{/other_user}","gists_url":"https://api.github.com/users/alvacouch/gists{/gist_id}","starred_url":"https://api.github.com/users/alvacouch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alvacouch/subscriptions","organizations_url":"https://api.github.com/users/alvacouch/orgs","repos_url":"https://api.github.com/users/alvacouch/repos","events_url":"https://api.github.com/users/alvacouch/events{/privacy}","received_events_url":"https://api.github.com/users/alvacouch/received_events","type":"User","site_admin":false},"labels":[{"id":203017747,"url":"https://api.github.com/repos/hydroshare/hydroshare/labels/Access%20Control","name":"Access Control","color":"006b75","default":false}],"state":"open","locked":false,"assignee":{"login":"pkdash","id":2523434,"avatar_url":"https://avatars1.githubusercontent.com/u/2523434?v=3","gravatar_id":"","url":"https://api.github.com/users/pkdash","html_url":"https://github.com/pkdash","followers_url":"https://api.github.com/users/pkdash/followers","following_url":"https://api.github.com/users/pkdash/following{/other_user}","gists_url":"https://api.github.com/users/pkdash/gists{/gist_id}","starred_url":"https://api.github.com/users/pkdash/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pkdash/subscriptions","organizations_url":"https://api.github.com/users/pkdash/orgs","repos_url":"https://api.github.com/users/pkdash/repos","events_url":"https://api.github.com/users/pkdash/events{/privacy}","received_events_url":"https://api.github.com/users/pkdash/received_events","type":"User","site_admin":false},"assignees":[{"login":"pkdash","id":2523434,"avatar_url":"https://avatars1.githubusercontent.com/u/2523434?v=3","gravatar_id":"","url":"https://api.github.com/users/pkdash","html_url":"https://github.com/pkdash","followers_url":"https://api.github.com/users/pkdash/followers","following_url":"https://api.github.com/users/pkdash/following{/other_user}","gists_url":"https://api.github.com/users/pkdash/gists{/gist_id}","starred_url":"https://api.github.com/users/pkdash/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/pkdash/subscriptions","organizations_url":"https://api.github.com/users/pkdash/orgs","repos_url":"https://api.github.com/users/pkdash/repos","events_url":"https://api.github.com/users/pkdash/events{/privacy}","received_events_url":"https://api.github.com/users/pkdash/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/hydroshare/hydroshare/milestones/46","html_url":"https://github.com/hydroshare/hydroshare/milestone/46","labels_url":"https://api.github.com/repos/hydroshare/hydroshare/milestones/46/labels","id":2430422,"number":46,"title":"Release 1.11.0","description":"","creator":{"login":"dtarb","id":3456833,"avatar_url":"https://avatars2.githubusercontent.com/u/3456833?v=3","gravatar_id":"","url":"https://api.github.com/users/dtarb","html_url":"https://github.com/dtarb","followers_url":"https://api.github.com/users/dtarb/followers","following_url":"https://api.github.com/users/dtarb/following{/other_user}","gists_url":"https://api.github.com/users/dtarb/gists{/gist_id}","starred_url":"https://api.github.com/users/dtarb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dtarb/subscriptions","organizations_url":"https://api.github.com/users/dtarb/orgs","repos_url":"https://api.github.com/users/dtarb/repos","events_url":"https://api.github.com/users/dtarb/events{/privacy}","received_events_url":"https://api.github.com/users/dtarb/received_events","type":"User","site_admin":false},"open_issues":33,"closed_issues":3,"state":"open","created_at":"2017-04-03T15:31:12Z","updated_at":"2017-05-06T20:00:48Z","due_on":"2017-05-15T07:00:00Z","closed_at":null},"comments":7,"created_at":"2017-05-01T01:05:46Z","updated_at":"2017-05-07T17:53:35Z","closed_at":null,"body":"@dtarb @pkdash @hyi \r\nThis quandary arose when testing new code. \r\n\r\n1. User Alice creates a resource and makes it `public`, and gives `edit` access to User Bob. \r\n2. User Bob deletes a file from the resource.. \r\n3. This invalidates `public` access because the file was required. The resource is set to `private`.\r\n4. Bob adds back another version of the file, making the resource possible to make public.  \r\n5. **Bob cannot set the resource to `public`, because Bob is not an `owner`.** \r\n\r\nWorse, this is the way we expect Bob to work. So `edit` users can't safely modify `public` resources. "},"comment":{"url":"https://api.github.com/repos/hydroshare/hydroshare/issues/comments/299722726","html_url":"https://github.com/hydroshare/hydroshare/issues/2080#issuecomment-299722726","issue_url":"https://api.github.com/repos/hydroshare/hydroshare/issues/2080","id":299722726,"user":{"login":"alvacouch","id":3342292,"avatar_url":"https://avatars2.githubusercontent.com/u/3342292?v=3","gravatar_id":"","url":"https://api.github.com/users/alvacouch","html_url":"https://github.com/alvacouch","followers_url":"https://api.github.com/users/alvacouch/followers","following_url":"https://api.github.com/users/alvacouch/following{/other_user}","gists_url":"https://api.github.com/users/alvacouch/gists{/gist_id}","starred_url":"https://api.github.com/users/alvacouch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alvacouch/subscriptions","organizations_url":"https://api.github.com/users/alvacouch/orgs","repos_url":"https://api.github.com/users/alvacouch/repos","events_url":"https://api.github.com/users/alvacouch/events{/privacy}","received_events_url":"https://api.github.com/users/alvacouch/received_events","type":"User","site_admin":false},"created_at":"2017-05-07T17:53:35Z","updated_at":"2017-05-07T17:53:35Z","body":"@dtarb @pkdash The \"last file\" condition is not the only condition under which a resource will become private. A resource with a set of shapefiles will not pass tests for public if some of the files are missing. \r\n\r\nThis becomes more serious when people are \"replacing\" files. At present, this is done by deleting a file and uploading another. Because of the way validations are written, this turns off public if the resource without the file does not pass inspection!\r\n"}}
{"actor":{"display_login":"alvacouch"}}