{"action":"created","issue":{"url":"https://api.github.com/repos/jhipster/generator-jhipster/issues/1409","labels_url":"https://api.github.com/repos/jhipster/generator-jhipster/issues/1409/labels{/name}","comments_url":"https://api.github.com/repos/jhipster/generator-jhipster/issues/1409/comments","events_url":"https://api.github.com/repos/jhipster/generator-jhipster/issues/1409/events","html_url":"https://github.com/jhipster/generator-jhipster/issues/1409","id":71075753,"number":1409,"title":"Any authenticated user can access to any user details (/api/users/**)","user":{"login":"alexfdz","id":1102984,"avatar_url":"https://avatars.githubusercontent.com/u/1102984?v=3","gravatar_id":"","url":"https://api.github.com/users/alexfdz","html_url":"https://github.com/alexfdz","followers_url":"https://api.github.com/users/alexfdz/followers","following_url":"https://api.github.com/users/alexfdz/following{/other_user}","gists_url":"https://api.github.com/users/alexfdz/gists{/gist_id}","starred_url":"https://api.github.com/users/alexfdz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alexfdz/subscriptions","organizations_url":"https://api.github.com/users/alexfdz/orgs","repos_url":"https://api.github.com/users/alexfdz/repos","events_url":"https://api.github.com/users/alexfdz/events{/privacy}","received_events_url":"https://api.github.com/users/alexfdz/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/jhipster/generator-jhipster/milestones/38","html_url":"https://github.com/jhipster/generator-jhipster/milestones/2.9.1","labels_url":"https://api.github.com/repos/jhipster/generator-jhipster/milestones/38/labels","id":1089093,"number":38,"title":"2.9.1","description":"","creator":{"login":"jdubois","id":316835,"avatar_url":"https://avatars.githubusercontent.com/u/316835?v=3","gravatar_id":"","url":"https://api.github.com/users/jdubois","html_url":"https://github.com/jdubois","followers_url":"https://api.github.com/users/jdubois/followers","following_url":"https://api.github.com/users/jdubois/following{/other_user}","gists_url":"https://api.github.com/users/jdubois/gists{/gist_id}","starred_url":"https://api.github.com/users/jdubois/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jdubois/subscriptions","organizations_url":"https://api.github.com/users/jdubois/orgs","repos_url":"https://api.github.com/users/jdubois/repos","events_url":"https://api.github.com/users/jdubois/events{/privacy}","received_events_url":"https://api.github.com/users/jdubois/received_events","type":"User","site_admin":false},"open_issues":0,"closed_issues":9,"state":"closed","created_at":"2015-04-29T11:36:55Z","updated_at":"2015-04-29T11:40:35Z","due_on":null,"closed_at":"2015-04-29T11:37:36Z"},"comments":2,"created_at":"2015-04-26T14:22:43Z","updated_at":"2015-04-30T08:14:05Z","closed_at":"2015-04-27T15:44:43Z","body":"As per [SecurityConfiguration definition](../blob/master/app/templates/src/main/java/package/config/_SecurityConfiguration.java#L133) any authenticated connection can access to the _/api/**_ endpoints (/api/users for example).\r\n\r\nLooks risky to have this kind of configuration by default.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/jhipster/generator-jhipster/issues/comments/97702534","html_url":"https://github.com/jhipster/generator-jhipster/issues/1409#issuecomment-97702534","issue_url":"https://api.github.com/repos/jhipster/generator-jhipster/issues/1409","id":97702534,"user":{"login":"alexfdz","id":1102984,"avatar_url":"https://avatars.githubusercontent.com/u/1102984?v=3","gravatar_id":"","url":"https://api.github.com/users/alexfdz","html_url":"https://github.com/alexfdz","followers_url":"https://api.github.com/users/alexfdz/followers","following_url":"https://api.github.com/users/alexfdz/following{/other_user}","gists_url":"https://api.github.com/users/alexfdz/gists{/gist_id}","starred_url":"https://api.github.com/users/alexfdz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/alexfdz/subscriptions","organizations_url":"https://api.github.com/users/alexfdz/orgs","repos_url":"https://api.github.com/users/alexfdz/repos","events_url":"https://api.github.com/users/alexfdz/events{/privacy}","received_events_url":"https://api.github.com/users/alexfdz/received_events","type":"User","site_admin":false},"created_at":"2015-04-30T08:14:05Z","updated_at":"2015-04-30T08:14:05Z","body":"Good point!"}}