{"action":"created","issue":{"url":"https://api.github.com/repos/molgenis/molgenis/issues/3815","labels_url":"https://api.github.com/repos/molgenis/molgenis/issues/3815/labels{/name}","comments_url":"https://api.github.com/repos/molgenis/molgenis/issues/3815/comments","events_url":"https://api.github.com/repos/molgenis/molgenis/issues/3815/events","html_url":"https://github.com/molgenis/molgenis/issues/3815","id":109308251,"number":3815,"title":"Galaxy API key visible","user":{"login":"erwinwinder","id":116559,"avatar_url":"https://avatars.githubusercontent.com/u/116559?v=3","gravatar_id":"","url":"https://api.github.com/users/erwinwinder","html_url":"https://github.com/erwinwinder","followers_url":"https://api.github.com/users/erwinwinder/followers","following_url":"https://api.github.com/users/erwinwinder/following{/other_user}","gists_url":"https://api.github.com/users/erwinwinder/gists{/gist_id}","starred_url":"https://api.github.com/users/erwinwinder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erwinwinder/subscriptions","organizations_url":"https://api.github.com/users/erwinwinder/orgs","repos_url":"https://api.github.com/users/erwinwinder/repos","events_url":"https://api.github.com/users/erwinwinder/events{/privacy}","received_events_url":"https://api.github.com/users/erwinwinder/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/molgenis/molgenis/labels/1.10.0-RC","name":"1.10.0-RC","color":"fbca04"},{"url":"https://api.github.com/repos/molgenis/molgenis/labels/bug-normal","name":"bug-normal","color":"fc2929"},{"url":"https://api.github.com/repos/molgenis/molgenis/labels/molgenis-dataexplorer","name":"molgenis-dataexplorer","color":"009900"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":3,"created_at":"2015-10-01T14:13:03Z","updated_at":"2015-10-01T14:17:01Z","closed_at":null,"body":"For users to be able to use the DataExplorer he needs READ permission on entity 'settings_dataexplorer'.\r\n\r\nBut in that settings the Galaxy API key is saved, so it can be seen by everyone.\r\n\r\nPS\r\nWouldn't it be better if normal users don't see the settings at all?"},"comment":{"url":"https://api.github.com/repos/molgenis/molgenis/issues/comments/144741008","html_url":"https://github.com/molgenis/molgenis/issues/3815#issuecomment-144741008","issue_url":"https://api.github.com/repos/molgenis/molgenis/issues/3815","id":144741008,"user":{"login":"erwinwinder","id":116559,"avatar_url":"https://avatars.githubusercontent.com/u/116559?v=3","gravatar_id":"","url":"https://api.github.com/users/erwinwinder","html_url":"https://github.com/erwinwinder","followers_url":"https://api.github.com/users/erwinwinder/followers","following_url":"https://api.github.com/users/erwinwinder/following{/other_user}","gists_url":"https://api.github.com/users/erwinwinder/gists{/gist_id}","starred_url":"https://api.github.com/users/erwinwinder/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/erwinwinder/subscriptions","organizations_url":"https://api.github.com/users/erwinwinder/orgs","repos_url":"https://api.github.com/users/erwinwinder/repos","events_url":"https://api.github.com/users/erwinwinder/events{/privacy}","received_events_url":"https://api.github.com/users/erwinwinder/received_events","type":"User","site_admin":false},"created_at":"2015-10-01T14:17:01Z","updated_at":"2015-10-01T14:17:01Z","body":"You get an exception 'No READ permission on settings_dataexplorer' when a user without READ permission on that entity opens the dataexplorer.\r\n\r\nMaybe use 'runAsSystem'  when getting the settings?\r\nThen you don't need to give users explicit READ permissions."}}