{"action":"created","issue":{"url":"https://api.github.com/repos/TykTechnologies/tyk/issues/691","repository_url":"https://api.github.com/repos/TykTechnologies/tyk","labels_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/691/labels{/name}","comments_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/691/comments","events_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/691/events","html_url":"https://github.com/TykTechnologies/tyk/issues/691","id":223541789,"number":691,"title":"The packaged version of Tyk (and other packages) will make config files world readable","user":{"login":"lonelycode","id":2444409,"avatar_url":"https://avatars3.githubusercontent.com/u/2444409?v=3","gravatar_id":"","url":"https://api.github.com/users/lonelycode","html_url":"https://github.com/lonelycode","followers_url":"https://api.github.com/users/lonelycode/followers","following_url":"https://api.github.com/users/lonelycode/following{/other_user}","gists_url":"https://api.github.com/users/lonelycode/gists{/gist_id}","starred_url":"https://api.github.com/users/lonelycode/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lonelycode/subscriptions","organizations_url":"https://api.github.com/users/lonelycode/orgs","repos_url":"https://api.github.com/users/lonelycode/repos","events_url":"https://api.github.com/users/lonelycode/events{/privacy}","received_events_url":"https://api.github.com/users/lonelycode/received_events","type":"User","site_admin":false},"labels":[{"id":97816682,"url":"https://api.github.com/repos/TykTechnologies/tyk/labels/bug","name":"bug","color":"fc2929","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":{"url":"https://api.github.com/repos/TykTechnologies/tyk/milestones/2","html_url":"https://github.com/TykTechnologies/tyk/milestone/2","labels_url":"https://api.github.com/repos/TykTechnologies/tyk/milestones/2/labels","id":2249616,"number":2,"title":"Release 2.4","description":"Issues marked for release with v2.4","creator":{"login":"lonelycode","id":2444409,"avatar_url":"https://avatars3.githubusercontent.com/u/2444409?v=3","gravatar_id":"","url":"https://api.github.com/users/lonelycode","html_url":"https://github.com/lonelycode","followers_url":"https://api.github.com/users/lonelycode/followers","following_url":"https://api.github.com/users/lonelycode/following{/other_user}","gists_url":"https://api.github.com/users/lonelycode/gists{/gist_id}","starred_url":"https://api.github.com/users/lonelycode/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lonelycode/subscriptions","organizations_url":"https://api.github.com/users/lonelycode/orgs","repos_url":"https://api.github.com/users/lonelycode/repos","events_url":"https://api.github.com/users/lonelycode/events{/privacy}","received_events_url":"https://api.github.com/users/lonelycode/received_events","type":"User","site_admin":false},"open_issues":34,"closed_issues":13,"state":"open","created_at":"2017-01-13T11:03:28Z","updated_at":"2017-04-22T05:31:24Z","due_on":null,"closed_at":null},"comments":1,"created_at":"2017-04-22T05:31:24Z","updated_at":"2017-04-22T10:58:36Z","closed_at":null,"body":"**Do you want to request a *feature* or report a *bug*?**\r\nbug\r\n\r\n**What is the current behavior?**\r\nConfig files in Tyk (and pump and dashboard) are world readable, since they contain sensitive info, this should not be possible.\r\n\r\n**What is the expected behavior?**\r\nWhile this can be changed by the end user, the default installer should do this as best practice.\r\n\r\n**Which versions of Tyk affected by this issue? Did this work in previous versions of Tyk?**\r\nAll packaged versions"},"comment":{"url":"https://api.github.com/repos/TykTechnologies/tyk/issues/comments/296365496","html_url":"https://github.com/TykTechnologies/tyk/issues/691#issuecomment-296365496","issue_url":"https://api.github.com/repos/TykTechnologies/tyk/issues/691","id":296365496,"user":{"login":"lonelycode","id":2444409,"avatar_url":"https://avatars3.githubusercontent.com/u/2444409?v=3","gravatar_id":"","url":"https://api.github.com/users/lonelycode","html_url":"https://github.com/lonelycode","followers_url":"https://api.github.com/users/lonelycode/followers","following_url":"https://api.github.com/users/lonelycode/following{/other_user}","gists_url":"https://api.github.com/users/lonelycode/gists{/gist_id}","starred_url":"https://api.github.com/users/lonelycode/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lonelycode/subscriptions","organizations_url":"https://api.github.com/users/lonelycode/orgs","repos_url":"https://api.github.com/users/lonelycode/repos","events_url":"https://api.github.com/users/lonelycode/events{/privacy}","received_events_url":"https://api.github.com/users/lonelycode/received_events","type":"User","site_admin":false},"created_at":"2017-04-22T10:58:36Z","updated_at":"2017-04-22T10:58:36Z","body":"No, I mean that the file mode shouldn't allow \"other\" read access - it's user/group/all at the moment it's r/r/r \r\n\r\nSo it is connected, but they are not dependent on each other. "}}
{"actor":{"display_login":"lonelycode"}}