{"action":"created","issue":{"url":"https://api.github.com/repos/enonic/xp/issues/5668","repository_url":"https://api.github.com/repos/enonic/xp","labels_url":"https://api.github.com/repos/enonic/xp/issues/5668/labels{/name}","comments_url":"https://api.github.com/repos/enonic/xp/issues/5668/comments","events_url":"https://api.github.com/repos/enonic/xp/issues/5668/events","html_url":"https://github.com/enonic/xp/issues/5668","id":263886077,"number":5668,"title":"Restrict access to services based on site context","user":{"login":"aro","id":430739,"avatar_url":"https://avatars1.githubusercontent.com/u/430739?v=4","gravatar_id":"","url":"https://api.github.com/users/aro","html_url":"https://github.com/aro","followers_url":"https://api.github.com/users/aro/followers","following_url":"https://api.github.com/users/aro/following{/other_user}","gists_url":"https://api.github.com/users/aro/gists{/gist_id}","starred_url":"https://api.github.com/users/aro/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aro/subscriptions","organizations_url":"https://api.github.com/users/aro/orgs","repos_url":"https://api.github.com/users/aro/repos","events_url":"https://api.github.com/users/aro/events{/privacy}","received_events_url":"https://api.github.com/users/aro/received_events","type":"User","site_admin":false},"labels":[{"id":506040360,"url":"https://api.github.com/repos/enonic/xp/labels/Bug","name":"Bug","color":"000000","default":false}],"state":"open","locked":false,"assignee":{"login":"aro","id":430739,"avatar_url":"https://avatars1.githubusercontent.com/u/430739?v=4","gravatar_id":"","url":"https://api.github.com/users/aro","html_url":"https://github.com/aro","followers_url":"https://api.github.com/users/aro/followers","following_url":"https://api.github.com/users/aro/following{/other_user}","gists_url":"https://api.github.com/users/aro/gists{/gist_id}","starred_url":"https://api.github.com/users/aro/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aro/subscriptions","organizations_url":"https://api.github.com/users/aro/orgs","repos_url":"https://api.github.com/users/aro/repos","events_url":"https://api.github.com/users/aro/events{/privacy}","received_events_url":"https://api.github.com/users/aro/received_events","type":"User","site_admin":false},"assignees":[{"login":"aro","id":430739,"avatar_url":"https://avatars1.githubusercontent.com/u/430739?v=4","gravatar_id":"","url":"https://api.github.com/users/aro","html_url":"https://github.com/aro","followers_url":"https://api.github.com/users/aro/followers","following_url":"https://api.github.com/users/aro/following{/other_user}","gists_url":"https://api.github.com/users/aro/gists{/gist_id}","starred_url":"https://api.github.com/users/aro/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aro/subscriptions","organizations_url":"https://api.github.com/users/aro/orgs","repos_url":"https://api.github.com/users/aro/repos","events_url":"https://api.github.com/users/aro/events{/privacy}","received_events_url":"https://api.github.com/users/aro/received_events","type":"User","site_admin":false}],"milestone":{"url":"https://api.github.com/repos/enonic/xp/milestones/15","html_url":"https://github.com/enonic/xp/milestone/15","labels_url":"https://api.github.com/repos/enonic/xp/milestones/15/labels","id":2824430,"number":15,"title":"6.12.1","description":"","creator":{"login":"jsi","id":477453,"avatar_url":"https://avatars1.githubusercontent.com/u/477453?v=4","gravatar_id":"","url":"https://api.github.com/users/jsi","html_url":"https://github.com/jsi","followers_url":"https://api.github.com/users/jsi/followers","following_url":"https://api.github.com/users/jsi/following{/other_user}","gists_url":"https://api.github.com/users/jsi/gists{/gist_id}","starred_url":"https://api.github.com/users/jsi/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jsi/subscriptions","organizations_url":"https://api.github.com/users/jsi/orgs","repos_url":"https://api.github.com/users/jsi/repos","events_url":"https://api.github.com/users/jsi/events{/privacy}","received_events_url":"https://api.github.com/users/jsi/received_events","type":"User","site_admin":false},"open_issues":1,"closed_issues":0,"state":"open","created_at":"2017-10-09T12:54:08Z","updated_at":"2017-10-09T12:59:09Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2017-10-09T12:58:59Z","updated_at":"2017-10-10T12:18:07Z","closed_at":null,"author_association":"OWNER","body":"Requests to portal services (using a service URL) must be restricted so that only the services in the apps configured for a site can be accessed under the site's context.\r\n\r\nExample: \r\n- If there are 2 apps in an Enonic installation: _app1_, _app2_.\r\n- _app2_ has a service _svc42_\r\n- There is a site in `/my-site` for which the _app1_ has been added\r\n- `/portal/draft/my-site/_/service/app2/svc42` should return 403 Forbidden (consider 404 Not found)\r\n\r\nIn addition to this, service URLs accessed for a main.js controller should also be allowed for services included in the main.js application.\r\nExample:\r\n\r\n- the service `/app/com.enonic.myapp/_/service/com.enonic.myapp/ok-svc`  should be allowed\r\n- the service `/app/com.enonic.myapp/_/service/org.otherapp/secret-svc`  should be forbidden\r\n"},"comment":{"url":"https://api.github.com/repos/enonic/xp/issues/comments/335453804","html_url":"https://github.com/enonic/xp/issues/5668#issuecomment-335453804","issue_url":"https://api.github.com/repos/enonic/xp/issues/5668","id":335453804,"user":{"login":"GlennRicaud","id":12030113,"avatar_url":"https://avatars2.githubusercontent.com/u/12030113?v=4","gravatar_id":"","url":"https://api.github.com/users/GlennRicaud","html_url":"https://github.com/GlennRicaud","followers_url":"https://api.github.com/users/GlennRicaud/followers","following_url":"https://api.github.com/users/GlennRicaud/following{/other_user}","gists_url":"https://api.github.com/users/GlennRicaud/gists{/gist_id}","starred_url":"https://api.github.com/users/GlennRicaud/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/GlennRicaud/subscriptions","organizations_url":"https://api.github.com/users/GlennRicaud/orgs","repos_url":"https://api.github.com/users/GlennRicaud/repos","events_url":"https://api.github.com/users/GlennRicaud/events{/privacy}","received_events_url":"https://api.github.com/users/GlennRicaud/received_events","type":"User","site_admin":false},"created_at":"2017-10-10T12:18:07Z","updated_at":"2017-10-10T12:18:07Z","author_association":"CONTRIBUTOR","body":"To be discussed in depth. Services are used at multiple places other than sites: admin tools, widgets, id providers, apps (/app), ..."}}
{"actor":{"display_login":"GlennRicaud"}}