{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/1074","labels_url":"https://api.github.com/repos/openshift/origin/issues/1074/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/1074/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/1074/events","html_url":"https://github.com/openshift/origin/pull/1074","id":58231386,"number":1074,"title":"tighten authorization rules","user":{"login":"deads2k","id":8225098,"avatar_url":"https://avatars.githubusercontent.com/u/8225098?v=3","gravatar_id":"","url":"https://api.github.com/users/deads2k","html_url":"https://github.com/deads2k","followers_url":"https://api.github.com/users/deads2k/followers","following_url":"https://api.github.com/users/deads2k/following{/other_user}","gists_url":"https://api.github.com/users/deads2k/gists{/gist_id}","starred_url":"https://api.github.com/users/deads2k/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/deads2k/subscriptions","organizations_url":"https://api.github.com/users/deads2k/orgs","repos_url":"https://api.github.com/users/deads2k/repos","events_url":"https://api.github.com/users/deads2k/events{/privacy}","received_events_url":"https://api.github.com/users/deads2k/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/openshift/origin/milestones/2","html_url":"https://github.com/openshift/origin/milestones/0.4.0%20(beta2)","labels_url":"https://api.github.com/repos/openshift/origin/milestones/2/labels","id":966170,"number":2,"title":"0.4.0 (beta2)","description":"","creator":{"login":"smarterclayton","id":1163175,"avatar_url":"https://avatars.githubusercontent.com/u/1163175?v=3","gravatar_id":"","url":"https://api.github.com/users/smarterclayton","html_url":"https://github.com/smarterclayton","followers_url":"https://api.github.com/users/smarterclayton/followers","following_url":"https://api.github.com/users/smarterclayton/following{/other_user}","gists_url":"https://api.github.com/users/smarterclayton/gists{/gist_id}","starred_url":"https://api.github.com/users/smarterclayton/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/smarterclayton/subscriptions","organizations_url":"https://api.github.com/users/smarterclayton/orgs","repos_url":"https://api.github.com/users/smarterclayton/repos","events_url":"https://api.github.com/users/smarterclayton/events{/privacy}","received_events_url":"https://api.github.com/users/smarterclayton/received_events","type":"User","site_admin":false},"open_issues":14,"closed_issues":28,"state":"open","created_at":"2015-02-04T21:41:08Z","updated_at":"2015-03-02T04:14:41Z","due_on":"2015-02-28T05:00:00Z","closed_at":null},"comments":29,"created_at":"2015-02-19T16:28:29Z","updated_at":"2015-03-03T14:58:51Z","closed_at":null,"pull_request":{"url":"https://api.github.com/repos/openshift/origin/pulls/1074","html_url":"https://github.com/openshift/origin/pull/1074","diff_url":"https://github.com/openshift/origin/pull/1074.diff","patch_url":"https://github.com/openshift/origin/pull/1074.patch"},"body":"Removes cluster-admin rights from system:authenticated and system:unauthenticated."},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/76960607","html_url":"https://github.com/openshift/origin/pull/1074#issuecomment-76960607","issue_url":"https://api.github.com/repos/openshift/origin/issues/1074","id":76960607,"user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"created_at":"2015-03-03T14:58:51Z","updated_at":"2015-03-03T14:58:51Z","body":"if we tighten this, the core path (master/node/registry/router) works, but other things like the Jenkins example will stop working until we can get identity info into it. We're planning to do that with secrets, but those won't be in origin until the rebase merges, and then there is some follow-up work to make creating a secret for Jenkins to use reasonable for an end-user.\r\n\r\ntl;dr - this can go in now if we accept things like the Jenkins example breaking until we get secret support into origin."}}