{"action":"created","issue":{"url":"https://api.github.com/repos/GMOD/Apollo/issues/551","labels_url":"https://api.github.com/repos/GMOD/Apollo/issues/551/labels{/name}","comments_url":"https://api.github.com/repos/GMOD/Apollo/issues/551/comments","events_url":"https://api.github.com/repos/GMOD/Apollo/issues/551/events","html_url":"https://github.com/GMOD/Apollo/issues/551","id":103280789,"number":551,"title":"An admin with read-only permissions only gets read-only permissions (for tabs at least)","user":{"login":"cmdcolin","id":6511937,"avatar_url":"https://avatars.githubusercontent.com/u/6511937?v=3","gravatar_id":"","url":"https://api.github.com/users/cmdcolin","html_url":"https://github.com/cmdcolin","followers_url":"https://api.github.com/users/cmdcolin/followers","following_url":"https://api.github.com/users/cmdcolin/following{/other_user}","gists_url":"https://api.github.com/users/cmdcolin/gists{/gist_id}","starred_url":"https://api.github.com/users/cmdcolin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cmdcolin/subscriptions","organizations_url":"https://api.github.com/users/cmdcolin/orgs","repos_url":"https://api.github.com/users/cmdcolin/repos","events_url":"https://api.github.com/users/cmdcolin/events{/privacy}","received_events_url":"https://api.github.com/users/cmdcolin/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/GMOD/Apollo/labels/bug","name":"bug","color":"fc2929"}],"state":"closed","locked":false,"assignee":{"login":"cmdcolin","id":6511937,"avatar_url":"https://avatars.githubusercontent.com/u/6511937?v=3","gravatar_id":"","url":"https://api.github.com/users/cmdcolin","html_url":"https://github.com/cmdcolin","followers_url":"https://api.github.com/users/cmdcolin/followers","following_url":"https://api.github.com/users/cmdcolin/following{/other_user}","gists_url":"https://api.github.com/users/cmdcolin/gists{/gist_id}","starred_url":"https://api.github.com/users/cmdcolin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cmdcolin/subscriptions","organizations_url":"https://api.github.com/users/cmdcolin/orgs","repos_url":"https://api.github.com/users/cmdcolin/repos","events_url":"https://api.github.com/users/cmdcolin/events{/privacy}","received_events_url":"https://api.github.com/users/cmdcolin/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/GMOD/Apollo/milestones/13","html_url":"https://github.com/GMOD/Apollo/milestones/2.0.1","labels_url":"https://api.github.com/repos/GMOD/Apollo/milestones/13/labels","id":1059255,"number":13,"title":"2.0.1","description":"Important issues minimally include:\r\n- proper isoform overlap handling when making changes to genomic feature structure\r\n- track permissions change\r\n- proper session logout (including a possible change of framework libraries)\r\n- some optimizations\r\n","creator":{"login":"nathandunn","id":751274,"avatar_url":"https://avatars.githubusercontent.com/u/751274?v=3","gravatar_id":"","url":"https://api.github.com/users/nathandunn","html_url":"https://github.com/nathandunn","followers_url":"https://api.github.com/users/nathandunn/followers","following_url":"https://api.github.com/users/nathandunn/following{/other_user}","gists_url":"https://api.github.com/users/nathandunn/gists{/gist_id}","starred_url":"https://api.github.com/users/nathandunn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nathandunn/subscriptions","organizations_url":"https://api.github.com/users/nathandunn/orgs","repos_url":"https://api.github.com/users/nathandunn/repos","events_url":"https://api.github.com/users/nathandunn/events{/privacy}","received_events_url":"https://api.github.com/users/nathandunn/received_events","type":"User","site_admin":false},"open_issues":36,"closed_issues":16,"state":"open","created_at":"2015-04-08T21:05:39Z","updated_at":"2015-09-05T14:46:13Z","due_on":"2015-09-26T07:00:00Z","closed_at":null},"comments":9,"created_at":"2015-08-26T14:17:53Z","updated_at":"2015-09-05T14:46:13Z","closed_at":"2015-09-05T14:46:13Z","body":"==== \r\n\r\n- [x] fix typo on \"insufficient\"\r\n- [x] admin with read-only permissions only gets read-only permissions (for tabs at least)\r\n- [x] confirm that user's don't have access / drop-down to organisms that they should not be able to read\r\n\r\n====\r\n\r\nWhen loading the apollo 2 demo on icebox, I can try to access the brown recluse from the annotator panel as demo@demo.com, but I get this error\r\n\r\n\r\n    Error: {\"error\":\"problem getting features: org.bbop.apollo.AnnotationException: You have insufficent permissions [none < read] to perform this operation\"}\r\n\r\nI think the brown recluse shouldn't even be in the dropdown for the guest user because it doesn't have access to brown recluse. Screenshot from an admin users perspective shows demo@demo.com doesn't have permissions on brown recluse\r\n\r\n![screenshot-icebox lbl gov 2015-08-26 09-09-41](https://cloud.githubusercontent.com/assets/6511937/9495706/839badc4-4bd2-11e5-8e3a-b0847dceb24c.png)\r\n\r\n\r\n\r\nAlso insufficent is spelled wrong there and the brown recluse genome is very fragmented and takes like a minute to load (refSeqs.json is 10+MB) so we have to figure out how to handle these cases\r\n\r\n "},"comment":{"url":"https://api.github.com/repos/GMOD/Apollo/issues/comments/137961008","html_url":"https://github.com/GMOD/Apollo/issues/551#issuecomment-137961008","issue_url":"https://api.github.com/repos/GMOD/Apollo/issues/551","id":137961008,"user":{"login":"nathandunn","id":751274,"avatar_url":"https://avatars.githubusercontent.com/u/751274?v=3","gravatar_id":"","url":"https://api.github.com/users/nathandunn","html_url":"https://github.com/nathandunn","followers_url":"https://api.github.com/users/nathandunn/followers","following_url":"https://api.github.com/users/nathandunn/following{/other_user}","gists_url":"https://api.github.com/users/nathandunn/gists{/gist_id}","starred_url":"https://api.github.com/users/nathandunn/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nathandunn/subscriptions","organizations_url":"https://api.github.com/users/nathandunn/orgs","repos_url":"https://api.github.com/users/nathandunn/repos","events_url":"https://api.github.com/users/nathandunn/events{/privacy}","received_events_url":"https://api.github.com/users/nathandunn/received_events","type":"User","site_admin":false},"created_at":"2015-09-05T14:46:13Z","updated_at":"2015-09-05T14:46:13Z","body":"This is fixed on icebox now.  \r\n\r\n```admin with read-only permissions only gets read-only permissions (for tabs at least)```"}}