{"action":"created","issue":{"url":"https://api.github.com/repos/mershon-enterprises/hydra-core/issues/10","labels_url":"https://api.github.com/repos/mershon-enterprises/hydra-core/issues/10/labels{/name}","comments_url":"https://api.github.com/repos/mershon-enterprises/hydra-core/issues/10/comments","events_url":"https://api.github.com/repos/mershon-enterprises/hydra-core/issues/10/events","html_url":"https://github.com/mershon-enterprises/hydra-core/pull/10","id":94369796,"number":10,"title":"Advanced file sharing","user":{"login":"kevinmershon","id":812577,"avatar_url":"https://avatars.githubusercontent.com/u/812577?v=3","gravatar_id":"","url":"https://api.github.com/users/kevinmershon","html_url":"https://github.com/kevinmershon","followers_url":"https://api.github.com/users/kevinmershon/followers","following_url":"https://api.github.com/users/kevinmershon/following{/other_user}","gists_url":"https://api.github.com/users/kevinmershon/gists{/gist_id}","starred_url":"https://api.github.com/users/kevinmershon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kevinmershon/subscriptions","organizations_url":"https://api.github.com/users/kevinmershon/orgs","repos_url":"https://api.github.com/users/kevinmershon/repos","events_url":"https://api.github.com/users/kevinmershon/events{/privacy}","received_events_url":"https://api.github.com/users/kevinmershon/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/mershon-enterprises/hydra-core/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/mershon-enterprises/hydra-core/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/mershon-enterprises/hydra-core/labels/in%20progress","name":"in progress","color":"f7c6c7"}],"state":"open","locked":false,"assignee":{"login":"cpascua","id":2072682,"avatar_url":"https://avatars.githubusercontent.com/u/2072682?v=3","gravatar_id":"","url":"https://api.github.com/users/cpascua","html_url":"https://github.com/cpascua","followers_url":"https://api.github.com/users/cpascua/followers","following_url":"https://api.github.com/users/cpascua/following{/other_user}","gists_url":"https://api.github.com/users/cpascua/gists{/gist_id}","starred_url":"https://api.github.com/users/cpascua/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cpascua/subscriptions","organizations_url":"https://api.github.com/users/cpascua/orgs","repos_url":"https://api.github.com/users/cpascua/repos","events_url":"https://api.github.com/users/cpascua/events{/privacy}","received_events_url":"https://api.github.com/users/cpascua/received_events","type":"User","site_admin":false},"milestone":null,"comments":2,"created_at":"2015-07-10T18:57:06Z","updated_at":"2015-07-20T16:42:38Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/mershon-enterprises/hydra-core/pulls/10","html_url":"https://github.com/mershon-enterprises/hydra-core/pull/10","diff_url":"https://github.com/mershon-enterprises/hydra-core/pull/10.diff","patch_url":"https://github.com/mershon-enterprises/hydra-core/pull/10.patch"},"body":"File sharing still isn't working. Try the following user accounts at http://hydra-staging.elasticbeanstalk.com\r\n\r\n- admin@example.com (password admin@example.com)\r\n- manager@example.com (password manager@example.com)\r\n\r\nThe admin user can see everything, from what I can tell. The manager user gets redirected back to the login any time they try to interact with their own file shared with admin@example.com, or the file shared with them by admin@example.com"},"comment":{"url":"https://api.github.com/repos/mershon-enterprises/hydra-core/issues/comments/122944602","html_url":"https://github.com/mershon-enterprises/hydra-core/pull/10#issuecomment-122944602","issue_url":"https://api.github.com/repos/mershon-enterprises/hydra-core/issues/10","id":122944602,"user":{"login":"kevinmershon","id":812577,"avatar_url":"https://avatars.githubusercontent.com/u/812577?v=3","gravatar_id":"","url":"https://api.github.com/users/kevinmershon","html_url":"https://github.com/kevinmershon","followers_url":"https://api.github.com/users/kevinmershon/followers","following_url":"https://api.github.com/users/kevinmershon/following{/other_user}","gists_url":"https://api.github.com/users/kevinmershon/gists{/gist_id}","starred_url":"https://api.github.com/users/kevinmershon/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kevinmershon/subscriptions","organizations_url":"https://api.github.com/users/kevinmershon/orgs","repos_url":"https://api.github.com/users/kevinmershon/repos","events_url":"https://api.github.com/users/kevinmershon/events{/privacy}","received_events_url":"https://api.github.com/users/kevinmershon/received_events","type":"User","site_admin":false},"created_at":"2015-07-20T16:42:38Z","updated_at":"2015-07-20T16:42:38Z","body":"Well, the idea is to have privileges be a matrix of possibilities, not explicit 'Admin', 'Manager', and 'Basic' roles. For instance, I could have a subcontractor who I want to be able to see a list of all my clients and create data for any of them, but only be able to view data and attachments they submitted themselves. Or, I might have a manager user in my company who I want to be able to create and edit privileges on users, but they don't need to see any data or files except for one particular client which I want them to have full privileges on.\r\n\r\nThe most frustrating thing I kept running into with the staging system is that if the right privileges aren't set, it should never just kick me back to the login screen. That's why we have error code `401` for \"unauthorized\" (you are not logged in) vs. `403` for \"access denied\" (you're logged in but you don't have access to that). It seems instead of using `403` anywhere, we're using `409` (which means \"conflict\": a backend error of some kind that isn't `404` or `500`)."}}