{"action":"created","issue":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/7517","labels_url":"https://api.github.com/repos/joomla/joomla-cms/issues/7517/labels{/name}","comments_url":"https://api.github.com/repos/joomla/joomla-cms/issues/7517/comments","events_url":"https://api.github.com/repos/joomla/joomla-cms/issues/7517/events","html_url":"https://github.com/joomla/joomla-cms/pull/7517","id":96525097,"number":7517,"title":"access.xml - Add support default value for permission","user":{"login":"thongredweb","id":4800575,"avatar_url":"https://avatars.githubusercontent.com/u/4800575?v=3","gravatar_id":"","url":"https://api.github.com/users/thongredweb","html_url":"https://github.com/thongredweb","followers_url":"https://api.github.com/users/thongredweb/followers","following_url":"https://api.github.com/users/thongredweb/following{/other_user}","gists_url":"https://api.github.com/users/thongredweb/gists{/gist_id}","starred_url":"https://api.github.com/users/thongredweb/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/thongredweb/subscriptions","organizations_url":"https://api.github.com/users/thongredweb/orgs","repos_url":"https://api.github.com/users/thongredweb/repos","events_url":"https://api.github.com/users/thongredweb/events{/privacy}","received_events_url":"https://api.github.com/users/thongredweb/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/joomla/joomla-cms/labels/PR-staging","name":"PR-staging","color":"c7def8"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-07-22T09:54:55Z","updated_at":"2015-08-11T06:26:14Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/joomla/joomla-cms/pulls/7517","html_url":"https://github.com/joomla/joomla-cms/pull/7517","diff_url":"https://github.com/joomla/joomla-cms/pull/7517.diff","patch_url":"https://github.com/joomla/joomla-cms/pull/7517.patch"},"body":"For now, when use ACL permission (by access.xml file for define rule), it's not support to set an default value for permission.\r\n\r\nThis PR for add an attribute \"default\" into an rule in access.xml file to set it default is \"allow\" or \"denied\", if default not specific, default rule will be \"Inherit\" as normal use."},"comment":{"url":"https://api.github.com/repos/joomla/joomla-cms/issues/comments/129723117","html_url":"https://github.com/joomla/joomla-cms/pull/7517#issuecomment-129723117","issue_url":"https://api.github.com/repos/joomla/joomla-cms/issues/7517","id":129723117,"user":{"login":"Bakual","id":1018684,"avatar_url":"https://avatars.githubusercontent.com/u/1018684?v=3","gravatar_id":"","url":"https://api.github.com/users/Bakual","html_url":"https://github.com/Bakual","followers_url":"https://api.github.com/users/Bakual/followers","following_url":"https://api.github.com/users/Bakual/following{/other_user}","gists_url":"https://api.github.com/users/Bakual/gists{/gist_id}","starred_url":"https://api.github.com/users/Bakual/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Bakual/subscriptions","organizations_url":"https://api.github.com/users/Bakual/orgs","repos_url":"https://api.github.com/users/Bakual/repos","events_url":"https://api.github.com/users/Bakual/events{/privacy}","received_events_url":"https://api.github.com/users/Bakual/received_events","type":"User","site_admin":false},"created_at":"2015-08-11T06:26:14Z","updated_at":"2015-08-11T06:26:14Z","body":"I'm not yet sure what the purpose of the default is.\r\nFirst, it would be hardcoded by the developer in the XML, which imho makes no sense for an ACL.\r\nSecond, we already have kind of defaults implemented in the system. It's called inheritance, meaning by default it will take the values from either the parent or global level.\r\nSo for items, it doesn't make any sense at all, it should be inherit and take the permissions from the component level if not set otherwise.\r\nFor component ACL, there is a small usecase when the component uses an ACL rule which isn't available in the global config and for some reason that action should be allowed by default. Which usually doesn't make much sense."}}