{"action":"created","issue":{"url":"https://api.github.com/repos/CenterForOpenScience/osf.io/issues/2677","labels_url":"https://api.github.com/repos/CenterForOpenScience/osf.io/issues/2677/labels{/name}","comments_url":"https://api.github.com/repos/CenterForOpenScience/osf.io/issues/2677/comments","events_url":"https://api.github.com/repos/CenterForOpenScience/osf.io/issues/2677/events","html_url":"https://github.com/CenterForOpenScience/osf.io/issues/2677","id":74383137,"number":2677,"title":"[staging & production] Can't see all components when permission to one is denied","user":{"login":"caileyfitz","id":5975444,"avatar_url":"https://avatars.githubusercontent.com/u/5975444?v=3","gravatar_id":"","url":"https://api.github.com/users/caileyfitz","html_url":"https://github.com/caileyfitz","followers_url":"https://api.github.com/users/caileyfitz/followers","following_url":"https://api.github.com/users/caileyfitz/following{/other_user}","gists_url":"https://api.github.com/users/caileyfitz/gists{/gist_id}","starred_url":"https://api.github.com/users/caileyfitz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/caileyfitz/subscriptions","organizations_url":"https://api.github.com/users/caileyfitz/orgs","repos_url":"https://api.github.com/users/caileyfitz/repos","events_url":"https://api.github.com/users/caileyfitz/events{/privacy}","received_events_url":"https://api.github.com/users/caileyfitz/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/CenterForOpenScience/osf.io/labels/2%20-%20Ready","name":"2 - Ready","color":"CCCCCC"},{"url":"https://api.github.com/repos/CenterForOpenScience/osf.io/labels/Bug:%20Production","name":"Bug: Production","color":"e11d21"},{"url":"https://api.github.com/repos/CenterForOpenScience/osf.io/labels/Bug:%20Staging","name":"Bug: Staging","color":"fbca04"},{"url":"https://api.github.com/repos/CenterForOpenScience/osf.io/labels/Priority%20-%20Medium","name":"Priority - Medium","color":"FF810F"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-05-08T14:36:29Z","updated_at":"2015-05-28T19:17:37Z","closed_at":null,"body":"Reported by @nicipfeiffer on the 0.35 Trello board:\r\n\r\n## Steps\r\n1. Go to a project you have admin on that has many nested components/projects\r\n2. Give read access to all but one of the components\r\n3. Make all components public, except the one that hasn't been granted access to\r\n4. Log in as the read access contributor\r\n5. Look at the project page, try to see all components nested beneath the one not granted access to\r\n6. Go to the project settings and configure notifications page\r\n\r\n## Expected\r\nI would expect that all other components would be visible to the read access user, including those nested in the component not granted access to.  \r\n\r\n## Actual\r\nThe user with read access cannot see the nested components/projects below the one they are not given access to.  \r\n![f](https://trello-attachments.s3.amazonaws.com/5547447fbd6976efb3ff519a/588x576/d7cd1b5f479eb51d85a6c309b0b2d029/Screenshot_2015-05-04_06.03.34.png)\r\n\r\nHowever, on the project settings page in the configure notifications section the read access user can see all the nested projects/components.\r\n![r](https://trello-attachments.s3.amazonaws.com/5547447fbd6976efb3ff519a/600x379/8d4a7db090ac11ab1816f22d29e0707a/Screenshot_2015-05-04_06.02.21.png)\r\n\r\n@samchrisinger suggested waiting until https://github.com/CenterForOpenScience/osf.io/pull/2563 is merged to fix some of these issues. \r\n\r\n@brianjgeiger also noted that if rubeus.py hasn't been updated to handle this case, it likely will not work well."},"comment":{"url":"https://api.github.com/repos/CenterForOpenScience/osf.io/issues/comments/106570324","html_url":"https://github.com/CenterForOpenScience/osf.io/issues/2677#issuecomment-106570324","issue_url":"https://api.github.com/repos/CenterForOpenScience/osf.io/issues/2677","id":106570324,"user":{"login":"lbanner","id":2964829,"avatar_url":"https://avatars.githubusercontent.com/u/2964829?v=3","gravatar_id":"","url":"https://api.github.com/users/lbanner","html_url":"https://github.com/lbanner","followers_url":"https://api.github.com/users/lbanner/followers","following_url":"https://api.github.com/users/lbanner/following{/other_user}","gists_url":"https://api.github.com/users/lbanner/gists{/gist_id}","starred_url":"https://api.github.com/users/lbanner/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lbanner/subscriptions","organizations_url":"https://api.github.com/users/lbanner/orgs","repos_url":"https://api.github.com/users/lbanner/repos","events_url":"https://api.github.com/users/lbanner/events{/privacy}","received_events_url":"https://api.github.com/users/lbanner/received_events","type":"User","site_admin":false},"created_at":"2015-05-28T19:17:37Z","updated_at":"2015-05-28T19:17:37Z","body":"@brandonPurvis Based on notes above, let's hold on this for #2563 Thanks"}}