{"action":"created","issue":{"url":"https://api.github.com/repos/javaee-security-spec/javaee-security-proposals/issues/6","labels_url":"https://api.github.com/repos/javaee-security-spec/javaee-security-proposals/issues/6/labels{/name}","comments_url":"https://api.github.com/repos/javaee-security-spec/javaee-security-proposals/issues/6/comments","events_url":"https://api.github.com/repos/javaee-security-spec/javaee-security-proposals/issues/6/events","html_url":"https://github.com/javaee-security-spec/javaee-security-proposals/pull/6","id":64246399,"number":6,"title":"add a proposal for a SecurityBindingType","user":{"login":"struberg","id":79310,"avatar_url":"https://avatars.githubusercontent.com/u/79310?v=3","gravatar_id":"","url":"https://api.github.com/users/struberg","html_url":"https://github.com/struberg","followers_url":"https://api.github.com/users/struberg/followers","following_url":"https://api.github.com/users/struberg/following{/other_user}","gists_url":"https://api.github.com/users/struberg/gists{/gist_id}","starred_url":"https://api.github.com/users/struberg/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/struberg/subscriptions","organizations_url":"https://api.github.com/users/struberg/orgs","repos_url":"https://api.github.com/users/struberg/repos","events_url":"https://api.github.com/users/struberg/events{/privacy}","received_events_url":"https://api.github.com/users/struberg/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2015-03-25T11:23:20Z","updated_at":"2015-03-27T13:16:11Z","closed_at":"2015-03-25T11:24:21Z","pull_request":{"url":"https://api.github.com/repos/javaee-security-spec/javaee-security-proposals/pulls/6","html_url":"https://github.com/javaee-security-spec/javaee-security-proposals/pull/6","diff_url":"https://github.com/javaee-security-spec/javaee-security-proposals/pull/6.diff","patch_url":"https://github.com/javaee-security-spec/javaee-security-proposals/pull/6.patch"},"body":"With SecurityBindingType you can easily add your own security logic  as cross cutting concerns similar to CDI Interceptors."},"comment":{"url":"https://api.github.com/repos/javaee-security-spec/javaee-security-proposals/issues/comments/86936962","html_url":"https://github.com/javaee-security-spec/javaee-security-proposals/pull/6#issuecomment-86936962","issue_url":"https://api.github.com/repos/javaee-security-spec/javaee-security-proposals/issues/6","id":86936962,"user":{"login":"arjantijms","id":3037006,"avatar_url":"https://avatars.githubusercontent.com/u/3037006?v=3","gravatar_id":"","url":"https://api.github.com/users/arjantijms","html_url":"https://github.com/arjantijms","followers_url":"https://api.github.com/users/arjantijms/followers","following_url":"https://api.github.com/users/arjantijms/following{/other_user}","gists_url":"https://api.github.com/users/arjantijms/gists{/gist_id}","starred_url":"https://api.github.com/users/arjantijms/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/arjantijms/subscriptions","organizations_url":"https://api.github.com/users/arjantijms/orgs","repos_url":"https://api.github.com/users/arjantijms/repos","events_url":"https://api.github.com/users/arjantijms/events{/privacy}","received_events_url":"https://api.github.com/users/arjantijms/received_events","type":"User","site_admin":false},"created_at":"2015-03-27T13:16:11Z","updated_at":"2015-03-27T13:16:11Z","body":"Hi,\n\nOn Friday, March 27, 2015, Rudy De Busscher <notifications@github.com>\nwrote:\n\n> Maybe not the location to discuss this (should be done at some point on\n> the jsr375 mailing list)\n>\n> But the role and group thing, even standardised, doesn't include the\n> implied *Thing* (read permission or whatever name) or hierarchical\n> structure. or will it?\n>\n> If I have 1200 \"Roles\" in my application, I don't want to assign 1200\n> \"Groups\" to the User and have to define the mapping between them. (And I\n> once had so it is real world situation)\n>\nOkay, let's discuss this somewhere on the list in more detail, but to round\nup here;\n\nGroup to role mapping is many-to-many, typically one-to-many. One group can\n(and often does) map to tens to hundreds of roles.\n\nKind regards,\nArjan Tijms\n\n\n\n\n> to be continued on the mailing list later on when we are further with the\n> Role-Group mapping.\n>\n> —\n> Reply to this email directly or view it on GitHub\n> <https://github.com/javaee-security-spec/javaee-security-proposals/pull/6#issuecomment-86926984>\n> .\n>\n"}}