{"action":"closed","issue":{"url":"https://api.github.com/repos/isfit/internal.isfit.org/issues/92","labels_url":"https://api.github.com/repos/isfit/internal.isfit.org/issues/92/labels{/name}","comments_url":"https://api.github.com/repos/isfit/internal.isfit.org/issues/92/comments","events_url":"https://api.github.com/repos/isfit/internal.isfit.org/issues/92/events","html_url":"https://github.com/isfit/internal.isfit.org/issues/92","id":44564834,"number":92,"title":"Anyone can edit MOTDs if they have the link","user":{"login":"krisvage","id":1556526,"avatar_url":"https://avatars.githubusercontent.com/u/1556526?v=3","gravatar_id":"","url":"https://api.github.com/users/krisvage","html_url":"https://github.com/krisvage","followers_url":"https://api.github.com/users/krisvage/followers","following_url":"https://api.github.com/users/krisvage/following{/other_user}","gists_url":"https://api.github.com/users/krisvage/gists{/gist_id}","starred_url":"https://api.github.com/users/krisvage/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/krisvage/subscriptions","organizations_url":"https://api.github.com/users/krisvage/orgs","repos_url":"https://api.github.com/users/krisvage/repos","events_url":"https://api.github.com/users/krisvage/events{/privacy}","received_events_url":"https://api.github.com/users/krisvage/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/isfit/internal.isfit.org/labels/Bug","name":"Bug","color":"e11d21"}],"state":"closed","locked":false,"assignee":{"login":"perchrib","id":6690073,"avatar_url":"https://avatars.githubusercontent.com/u/6690073?v=3","gravatar_id":"","url":"https://api.github.com/users/perchrib","html_url":"https://github.com/perchrib","followers_url":"https://api.github.com/users/perchrib/followers","following_url":"https://api.github.com/users/perchrib/following{/other_user}","gists_url":"https://api.github.com/users/perchrib/gists{/gist_id}","starred_url":"https://api.github.com/users/perchrib/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/perchrib/subscriptions","organizations_url":"https://api.github.com/users/perchrib/orgs","repos_url":"https://api.github.com/users/perchrib/repos","events_url":"https://api.github.com/users/perchrib/events{/privacy}","received_events_url":"https://api.github.com/users/perchrib/received_events","type":"User","site_admin":false},"milestone":null,"comments":0,"created_at":"2014-10-01T13:45:35Z","updated_at":"2015-01-13T19:24:41Z","closed_at":"2015-01-13T19:24:41Z","body":"@perchrib @Filip0 \r\n\r\nTo recreate: Impersonate someone that is not Editorial or Leader. Go to https://internal.isfit.org/motds.\r\nTo limit using the ability.rb (which is already correct), the method load_and_authorize_resource has to be called. Example: https://github.com/isfit/internal.isfit.org/blob/0ec16eff701b104ab273026c442758e78ade8269/app/controllers/frontend_articles_controller.rb#L3"}}