{"action":"closed","issue":{"url":"https://api.github.com/repos/netiam/netiam/issues/13","labels_url":"https://api.github.com/repos/netiam/netiam/issues/13/labels{/name}","comments_url":"https://api.github.com/repos/netiam/netiam/issues/13/comments","events_url":"https://api.github.com/repos/netiam/netiam/issues/13/events","html_url":"https://github.com/netiam/netiam/issues/13","id":94822966,"number":13,"title":"ACL settings","user":{"login":"eliias","id":1222696,"avatar_url":"https://avatars.githubusercontent.com/u/1222696?v=3","gravatar_id":"","url":"https://api.github.com/users/eliias","html_url":"https://github.com/eliias","followers_url":"https://api.github.com/users/eliias/followers","following_url":"https://api.github.com/users/eliias/following{/other_user}","gists_url":"https://api.github.com/users/eliias/gists{/gist_id}","starred_url":"https://api.github.com/users/eliias/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eliias/subscriptions","organizations_url":"https://api.github.com/users/eliias/orgs","repos_url":"https://api.github.com/users/eliias/repos","events_url":"https://api.github.com/users/eliias/events{/privacy}","received_events_url":"https://api.github.com/users/eliias/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/netiam/netiam/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/netiam/netiam/labels/refactoring","name":"refactoring","color":"c7def8"}],"state":"closed","locked":false,"assignee":{"login":"eliias","id":1222696,"avatar_url":"https://avatars.githubusercontent.com/u/1222696?v=3","gravatar_id":"","url":"https://api.github.com/users/eliias","html_url":"https://github.com/eliias","followers_url":"https://api.github.com/users/eliias/followers","following_url":"https://api.github.com/users/eliias/following{/other_user}","gists_url":"https://api.github.com/users/eliias/gists{/gist_id}","starred_url":"https://api.github.com/users/eliias/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eliias/subscriptions","organizations_url":"https://api.github.com/users/eliias/orgs","repos_url":"https://api.github.com/users/eliias/repos","events_url":"https://api.github.com/users/eliias/events{/privacy}","received_events_url":"https://api.github.com/users/eliias/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/netiam/netiam/milestones/5","html_url":"https://github.com/netiam/netiam/milestones/5.x","labels_url":"https://api.github.com/repos/netiam/netiam/milestones/5/labels","id":1206005,"number":5,"title":"5.x","description":"","creator":{"login":"eliias","id":1222696,"avatar_url":"https://avatars.githubusercontent.com/u/1222696?v=3","gravatar_id":"","url":"https://api.github.com/users/eliias","html_url":"https://github.com/eliias","followers_url":"https://api.github.com/users/eliias/followers","following_url":"https://api.github.com/users/eliias/following{/other_user}","gists_url":"https://api.github.com/users/eliias/gists{/gist_id}","starred_url":"https://api.github.com/users/eliias/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/eliias/subscriptions","organizations_url":"https://api.github.com/users/eliias/orgs","repos_url":"https://api.github.com/users/eliias/repos","events_url":"https://api.github.com/users/eliias/events{/privacy}","received_events_url":"https://api.github.com/users/eliias/received_events","type":"User","site_admin":false},"open_issues":3,"closed_issues":1,"state":"open","created_at":"2015-07-13T22:03:01Z","updated_at":"2015-07-22T18:27:24Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2015-07-13T22:05:51Z","updated_at":"2015-07-22T18:27:24Z","closed_at":"2015-07-22T18:27:24Z","body":"The ACL implementations in 3.x and 4.x are both not good enough. ACL's should work with and without model information. This has been resolved with 3.x but nested resources were not filtered anymore.\r\n\r\nThe current version of the library (4.x) fixes this by binding ACL definitions to models. This is not a good idea either. ACL's should instead be defined a standalone schema with references (e.g. mongoosejs refs). This would allow an ACL system that works independent from any ORM/ODM layer and also with custom data."}}