{"action":"created","issue":{"url":"https://api.github.com/repos/domoticz/domoticz/issues/161","labels_url":"https://api.github.com/repos/domoticz/domoticz/issues/161/labels{/name}","comments_url":"https://api.github.com/repos/domoticz/domoticz/issues/161/comments","events_url":"https://api.github.com/repos/domoticz/domoticz/issues/161/events","html_url":"https://github.com/domoticz/domoticz/issues/161","id":113223705,"number":161,"title":"No need to be allowed to see/edit/delete cams..","user":{"login":"nk36","id":14965352,"avatar_url":"https://avatars.githubusercontent.com/u/14965352?v=3","gravatar_id":"","url":"https://api.github.com/users/nk36","html_url":"https://github.com/nk36","followers_url":"https://api.github.com/users/nk36/followers","following_url":"https://api.github.com/users/nk36/following{/other_user}","gists_url":"https://api.github.com/users/nk36/gists{/gist_id}","starred_url":"https://api.github.com/users/nk36/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/nk36/subscriptions","organizations_url":"https://api.github.com/users/nk36/orgs","repos_url":"https://api.github.com/users/nk36/repos","events_url":"https://api.github.com/users/nk36/events{/privacy}","received_events_url":"https://api.github.com/users/nk36/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-10-25T12:37:08Z","updated_at":"2015-10-25T14:00:12Z","closed_at":null,"body":"Hi guys,\r\n\r\nI'm using Domoticz v2.3448 and I just found yesterday 2 bugs.\r\n\r\nThe first one is that if you create an user who is viewer or user or admin, well everyone can see/edit/delete cams with the url:\r\n\r\n**********************\r\nhttp://192.168.X.X/#/Cam\r\nor\r\nhttp://www.your-domain.com/#/Cam\r\n**********************\r\n\r\nYou can have the data in JSON too:\r\n**********************\r\nhttp://192.168.X.X/json.htm?type=cameras\r\nor \r\nhttp://www.your-domain.com/json.htm?type=cameras\r\n**********************\r\n\r\nIs everyone as this problem ?\r\n\r\nIt would be nice if we can choose the \"Actives menu\" for \"Cam\".\r\n\r\nThere is a variant of this problem.\r\nIf you don't have give access in \"actives menu\" to Lights/Temp/Weather..., the users can use the URLs /#/LightSwitches or even /#/Users\r\n\r\nI hope there will be a fix.."},"comment":{"url":"https://api.github.com/repos/domoticz/domoticz/issues/comments/150926127","html_url":"https://github.com/domoticz/domoticz/issues/161#issuecomment-150926127","issue_url":"https://api.github.com/repos/domoticz/domoticz/issues/161","id":150926127,"user":{"login":"gizmocuz","id":2265299,"avatar_url":"https://avatars.githubusercontent.com/u/2265299?v=3","gravatar_id":"","url":"https://api.github.com/users/gizmocuz","html_url":"https://github.com/gizmocuz","followers_url":"https://api.github.com/users/gizmocuz/followers","following_url":"https://api.github.com/users/gizmocuz/following{/other_user}","gists_url":"https://api.github.com/users/gizmocuz/gists{/gist_id}","starred_url":"https://api.github.com/users/gizmocuz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/gizmocuz/subscriptions","organizations_url":"https://api.github.com/users/gizmocuz/orgs","repos_url":"https://api.github.com/users/gizmocuz/repos","events_url":"https://api.github.com/users/gizmocuz/events{/privacy}","received_events_url":"https://api.github.com/users/gizmocuz/received_events","type":"User","site_admin":false},"created_at":"2015-10-25T14:00:12Z","updated_at":"2015-10-25T14:00:12Z","body":"Thanks for reporting!\r\n\r\nFixed in beta #3452, if you see more that needs to be changed, please submit a git pull request with the needed changed.\r\n\r\nNot fixed, when a user has no Lights in the activate tabs, he can still call it, if he knows how.\r\nDont think this is a bad security issue, but you could change this (code fix) in app.js if you like"}}