{"action":"closed","issue":{"url":"https://api.github.com/repos/torchbox/wagtail/issues/93","labels_url":"https://api.github.com/repos/torchbox/wagtail/issues/93/labels{/name}","comments_url":"https://api.github.com/repos/torchbox/wagtail/issues/93/comments","events_url":"https://api.github.com/repos/torchbox/wagtail/issues/93/events","html_url":"https://github.com/torchbox/wagtail/issues/93","id":28169038,"number":93,"title":"Editor's picks interface should enforce model-level permissions","user":{"login":"gasman","id":85097,"avatar_url":"https://avatars.githubusercontent.com/u/85097?v=3","gravatar_id":"","url":"https://api.github.com/users/gasman","html_url":"https://github.com/gasman","followers_url":"https://api.github.com/users/gasman/followers","following_url":"https://api.github.com/users/gasman/following{/other_user}","gists_url":"https://api.github.com/users/gasman/gists{/gist_id}","starred_url":"https://api.github.com/users/gasman/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gasman/subscriptions","organizations_url":"https://api.github.com/users/gasman/orgs","repos_url":"https://api.github.com/users/gasman/repos","events_url":"https://api.github.com/users/gasman/events{/privacy}","received_events_url":"https://api.github.com/users/gasman/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/torchbox/wagtail/labels/Enhancement","name":"Enhancement","color":"84b6eb"}],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2014-02-24T15:23:15Z","updated_at":"2015-10-05T09:01:34Z","closed_at":"2015-10-05T09:01:34Z","body":"The Editor's Picks interface in wagtailsearch currently only enforces basic 'can log in to the Wagtail admin' permission checks. The views here should instead check the relevant 'can add' / 'can edit' / 'can delete' permissions on the EditorsPick model instead.\r\n\r\n(Q: what should the out-of-the-box permissions for editors picks be? The name would imply that members of the Editors group should be able to set them up, but I'm not sure if that's necessarily appropriate as it's more of a site admin thing...)"}}