{"action":"opened","issue":{"url":"https://api.github.com/repos/spring-projects/spring-statemachine/issues/114","labels_url":"https://api.github.com/repos/spring-projects/spring-statemachine/issues/114/labels{/name}","comments_url":"https://api.github.com/repos/spring-projects/spring-statemachine/issues/114/comments","events_url":"https://api.github.com/repos/spring-projects/spring-statemachine/issues/114/events","html_url":"https://github.com/spring-projects/spring-statemachine/issues/114","id":111788817,"number":114,"title":"Protect transitions via spring security","user":{"login":"jvalkeal","id":50398,"avatar_url":"https://avatars.githubusercontent.com/u/50398?v=3","gravatar_id":"","url":"https://api.github.com/users/jvalkeal","html_url":"https://github.com/jvalkeal","followers_url":"https://api.github.com/users/jvalkeal/followers","following_url":"https://api.github.com/users/jvalkeal/following{/other_user}","gists_url":"https://api.github.com/users/jvalkeal/gists{/gist_id}","starred_url":"https://api.github.com/users/jvalkeal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jvalkeal/subscriptions","organizations_url":"https://api.github.com/users/jvalkeal/orgs","repos_url":"https://api.github.com/users/jvalkeal/repos","events_url":"https://api.github.com/users/jvalkeal/events{/privacy}","received_events_url":"https://api.github.com/users/jvalkeal/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/spring-projects/spring-statemachine/labels/enhancement","name":"enhancement","color":"84b6eb"}],"state":"open","locked":false,"assignee":null,"milestone":{"url":"https://api.github.com/repos/spring-projects/spring-statemachine/milestones/5","html_url":"https://github.com/spring-projects/spring-statemachine/milestones/1.1.0.M1","labels_url":"https://api.github.com/repos/spring-projects/spring-statemachine/milestones/5/labels","id":1347562,"number":5,"title":"1.1.0.M1","description":"","creator":{"login":"jvalkeal","id":50398,"avatar_url":"https://avatars.githubusercontent.com/u/50398?v=3","gravatar_id":"","url":"https://api.github.com/users/jvalkeal","html_url":"https://github.com/jvalkeal","followers_url":"https://api.github.com/users/jvalkeal/followers","following_url":"https://api.github.com/users/jvalkeal/following{/other_user}","gists_url":"https://api.github.com/users/jvalkeal/gists{/gist_id}","starred_url":"https://api.github.com/users/jvalkeal/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jvalkeal/subscriptions","organizations_url":"https://api.github.com/users/jvalkeal/orgs","repos_url":"https://api.github.com/users/jvalkeal/repos","events_url":"https://api.github.com/users/jvalkeal/events{/privacy}","received_events_url":"https://api.github.com/users/jvalkeal/received_events","type":"User","site_admin":false},"open_issues":3,"closed_issues":0,"state":"open","created_at":"2015-10-09T16:45:26Z","updated_at":"2015-10-16T08:47:28Z","due_on":null,"closed_at":null},"comments":0,"created_at":"2015-10-16T08:47:28Z","updated_at":"2015-10-16T08:47:28Z","closed_at":null,"body":"Currently there is no in place whatsoever meaning anyone who is able to send events can ultimately cause state transitions. There is probably a lot of things we could do but at minimum we should start by allowing security to somehow protect transitions.\r\n\r\nOf course this is going to be a little tricky because actual transition logic is executed in an executor(currently based on spring task executor) so you may have separate threads where security context stuff is not directly visible."}}