{"action":"created","issue":{"url":"https://api.github.com/repos/StackStorm/st2/issues/2054","labels_url":"https://api.github.com/repos/StackStorm/st2/issues/2054/labels{/name}","comments_url":"https://api.github.com/repos/StackStorm/st2/issues/2054/comments","events_url":"https://api.github.com/repos/StackStorm/st2/issues/2054/events","html_url":"https://github.com/StackStorm/st2/pull/2054","id":110539984,"number":2054,"title":"New \"<resource>_list\" permission type","user":{"login":"Kami","id":125088,"avatar_url":"https://avatars.githubusercontent.com/u/125088?v=3","gravatar_id":"","url":"https://api.github.com/users/Kami","html_url":"https://github.com/Kami","followers_url":"https://api.github.com/users/Kami/followers","following_url":"https://api.github.com/users/Kami/following{/other_user}","gists_url":"https://api.github.com/users/Kami/gists{/gist_id}","starred_url":"https://api.github.com/users/Kami/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Kami/subscriptions","organizations_url":"https://api.github.com/users/Kami/orgs","repos_url":"https://api.github.com/users/Kami/repos","events_url":"https://api.github.com/users/Kami/events{/privacy}","received_events_url":"https://api.github.com/users/Kami/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-10-08T20:59:24Z","updated_at":"2015-10-09T18:21:33Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/StackStorm/st2/pulls/2054","html_url":"https://github.com/StackStorm/st2/pull/2054","diff_url":"https://github.com/StackStorm/st2/pull/2054.diff","patch_url":"https://github.com/StackStorm/st2/pull/2054.patch"},"body":"This pull request implements new <resource>_list permission type which is used to protect \"get all\" API endpoints.\r\n\r\nKeep in mind that this is stop gap for v1.0. Post v1.0, we will implement actual list filtering."},"comment":{"url":"https://api.github.com/repos/StackStorm/st2/issues/comments/146953509","html_url":"https://github.com/StackStorm/st2/pull/2054#issuecomment-146953509","issue_url":"https://api.github.com/repos/StackStorm/st2/issues/2054","id":146953509,"user":{"login":"Kami","id":125088,"avatar_url":"https://avatars.githubusercontent.com/u/125088?v=3","gravatar_id":"","url":"https://api.github.com/users/Kami","html_url":"https://github.com/Kami","followers_url":"https://api.github.com/users/Kami/followers","following_url":"https://api.github.com/users/Kami/following{/other_user}","gists_url":"https://api.github.com/users/Kami/gists{/gist_id}","starred_url":"https://api.github.com/users/Kami/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Kami/subscriptions","organizations_url":"https://api.github.com/users/Kami/orgs","repos_url":"https://api.github.com/users/Kami/repos","events_url":"https://api.github.com/users/Kami/events{/privacy}","received_events_url":"https://api.github.com/users/Kami/received_events","type":"User","site_admin":false},"created_at":"2015-10-09T18:21:33Z","updated_at":"2015-10-09T18:21:33Z","body":"> Post 1.0 will we completely drop *_list permission? If we do keep it how will it work with *_get. Just want to make sure we do not create a backwards compat concern for us.\r\n\r\nWe can either decide to keep it (it will simple have precedence over implicit \"view\" grants on a particular resources) or remove it. If we decide to remove it we can decide to provide a migration tool."}}