{"action":"created","issue":{"url":"https://api.github.com/repos/next-l/enju_leaf/issues/741","labels_url":"https://api.github.com/repos/next-l/enju_leaf/issues/741/labels{/name}","comments_url":"https://api.github.com/repos/next-l/enju_leaf/issues/741/comments","events_url":"https://api.github.com/repos/next-l/enju_leaf/issues/741/events","html_url":"https://github.com/next-l/enju_leaf/issues/741","id":107761553,"number":741,"title":"貸出統計を閲覧できてしまう","user":{"login":"masao","id":38825,"avatar_url":"https://avatars.githubusercontent.com/u/38825?v=3","gravatar_id":"","url":"https://api.github.com/users/masao","html_url":"https://github.com/masao","followers_url":"https://api.github.com/users/masao/followers","following_url":"https://api.github.com/users/masao/following{/other_user}","gists_url":"https://api.github.com/users/masao/gists{/gist_id}","starred_url":"https://api.github.com/users/masao/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/masao/subscriptions","organizations_url":"https://api.github.com/users/masao/orgs","repos_url":"https://api.github.com/users/masao/repos","events_url":"https://api.github.com/users/masao/events{/privacy}","received_events_url":"https://api.github.com/users/masao/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/next-l/enju_leaf/labels/bug","name":"bug","color":"444444"},{"url":"https://api.github.com/repos/next-l/enju_leaf/labels/checking","name":"checking","color":"eb6420"},{"url":"https://api.github.com/repos/next-l/enju_leaf/labels/high%20priority","name":"high priority","color":"e11d21"}],"state":"closed","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/next-l/enju_leaf/milestones/6","html_url":"https://github.com/next-l/enju_leaf/milestones/1.1.0","labels_url":"https://api.github.com/repos/next-l/enju_leaf/milestones/6/labels","id":830963,"number":6,"title":"1.1.0","description":"","creator":{"login":"nabeta","id":11428,"avatar_url":"https://avatars.githubusercontent.com/u/11428?v=3","gravatar_id":"","url":"https://api.github.com/users/nabeta","html_url":"https://github.com/nabeta","followers_url":"https://api.github.com/users/nabeta/followers","following_url":"https://api.github.com/users/nabeta/following{/other_user}","gists_url":"https://api.github.com/users/nabeta/gists{/gist_id}","starred_url":"https://api.github.com/users/nabeta/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nabeta/subscriptions","organizations_url":"https://api.github.com/users/nabeta/orgs","repos_url":"https://api.github.com/users/nabeta/repos","events_url":"https://api.github.com/users/nabeta/events{/privacy}","received_events_url":"https://api.github.com/users/nabeta/received_events","type":"User","site_admin":false},"open_issues":9,"closed_issues":34,"state":"open","created_at":"2014-10-18T05:07:23Z","updated_at":"2015-09-23T16:57:55Z","due_on":null,"closed_at":null},"comments":4,"created_at":"2015-09-22T17:28:37Z","updated_at":"2015-09-23T16:57:55Z","closed_at":"2015-09-23T16:57:55Z","body":"非ログイン状態もしくは一般利用者としてログインした状態であっても、利用者別貸出統計の表示にて、他の利用者の貸出統計が閲覧できてしまう。図書館員以上の権限を要求すべき。\r\n![next l enju leaf](https://cloud.githubusercontent.com/assets/38825/10026068/a18d4558-619a-11e5-8fba-5feebb51e067.png)\r\n![image](https://cloud.githubusercontent.com/assets/38825/10026083/b7e4234e-619a-11e5-8a33-b936da22a6af.png)\r\n"},"comment":{"url":"https://api.github.com/repos/next-l/enju_leaf/issues/comments/142662078","html_url":"https://github.com/next-l/enju_leaf/issues/741#issuecomment-142662078","issue_url":"https://api.github.com/repos/next-l/enju_leaf/issues/741","id":142662078,"user":{"login":"yegusa","id":1328499,"avatar_url":"https://avatars.githubusercontent.com/u/1328499?v=3","gravatar_id":"","url":"https://api.github.com/users/yegusa","html_url":"https://github.com/yegusa","followers_url":"https://api.github.com/users/yegusa/followers","following_url":"https://api.github.com/users/yegusa/following{/other_user}","gists_url":"https://api.github.com/users/yegusa/gists{/gist_id}","starred_url":"https://api.github.com/users/yegusa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/yegusa/subscriptions","organizations_url":"https://api.github.com/users/yegusa/orgs","repos_url":"https://api.github.com/users/yegusa/repos","events_url":"https://api.github.com/users/yegusa/events{/privacy}","received_events_url":"https://api.github.com/users/yegusa/received_events","type":"User","site_admin":false},"created_at":"2015-09-23T16:57:55Z","updated_at":"2015-09-23T16:57:55Z","body":"仮想マシンで確認しました。一般ユーザー権限でアクセス拒否されたのを確認しました。\r\nので、クローズします。\r\nゲストユーザーの場合は、ログインのページに飛ばされました。\r\n\r\nhttp://localhost:8080/user_checkout_stats/1\r\n![image](https://cloud.githubusercontent.com/assets/1328499/10051863/adb16782-625e-11e5-92f4-523dd22379c2.png)\r\n\r\nhttp://localhost:8080/user_reserve_stats/1\r\n![image](https://cloud.githubusercontent.com/assets/1328499/10051989/583b661c-625f-11e5-92fd-2ef0fca85820.png)\r\n\r\n貸出資料別は見えていいのね。こっちはアクセス拒否にならずにみれました。\r\nhttp://localhost:8080/manifestation_checkout_stats/1\r\nhttp://localhost:8080/manifestation_reserve_stats/1\r\n\r\nvagrant@vagrant-ubuntu-trusty-64:~/enju$ bundle list | grep enju\r\n  * enju_biblio (0.1.0.pre69 9c03122)\r\n  * enju_circulation (0.1.0.pre48 ef38a28)\r\n  * enju_event (0.1.17.pre26 7af0bba)\r\n  * enju_flower (0.1.0.pre23 d7be6c4)\r\n  * enju_leaf (1.1.0.rc21 a537d12)\r\n  * enju_library (0.1.0.pre43 a92f1ef)\r\n  * enju_manifestation_viewer (0.1.0.pre19 fd9f9a2)\r\n  * enju_message (0.1.14.pre25 57ef135)\r\n  * enju_ndl (0.1.0.pre37)\r\n  * enju_oai (0.1.0.pre19 1e2c426)\r\n  * enju_subject (0.1.0.pre33)\r\n"}}