{"action":"opened","issue":{"url":"https://api.github.com/repos/bleroy/OrchardImportTest/issues/655","labels_url":"https://api.github.com/repos/bleroy/OrchardImportTest/issues/655/labels{/name}","comments_url":"https://api.github.com/repos/bleroy/OrchardImportTest/issues/655/comments","events_url":"https://api.github.com/repos/bleroy/OrchardImportTest/issues/655/events","html_url":"https://github.com/bleroy/OrchardImportTest/issues/655","id":65823089,"number":655,"title":"Investigate access model for admin permissions convention","user":{"login":"bleroy","id":1165609,"avatar_url":"https://avatars.githubusercontent.com/u/1165609?v=3","gravatar_id":"","url":"https://api.github.com/users/bleroy","html_url":"https://github.com/bleroy","followers_url":"https://api.github.com/users/bleroy/followers","following_url":"https://api.github.com/users/bleroy/following{/other_user}","gists_url":"https://api.github.com/users/bleroy/gists{/gist_id}","starred_url":"https://api.github.com/users/bleroy/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/bleroy/subscriptions","organizations_url":"https://api.github.com/users/bleroy/orgs","repos_url":"https://api.github.com/users/bleroy/repos","events_url":"https://api.github.com/users/bleroy/events{/privacy}","received_events_url":"https://api.github.com/users/bleroy/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":{"login":"sebastienros","id":1165805,"avatar_url":"https://avatars.githubusercontent.com/u/1165805?v=3","gravatar_id":"","url":"https://api.github.com/users/sebastienros","html_url":"https://github.com/sebastienros","followers_url":"https://api.github.com/users/sebastienros/followers","following_url":"https://api.github.com/users/sebastienros/following{/other_user}","gists_url":"https://api.github.com/users/sebastienros/gists{/gist_id}","starred_url":"https://api.github.com/users/sebastienros/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sebastienros/subscriptions","organizations_url":"https://api.github.com/users/sebastienros/orgs","repos_url":"https://api.github.com/users/sebastienros/repos","events_url":"https://api.github.com/users/sebastienros/events{/privacy}","received_events_url":"https://api.github.com/users/sebastienros/received_events","type":"User","site_admin":false},"milestone":null,"comments":0,"created_at":"2015-04-02T02:44:24Z","updated_at":"2015-04-02T02:44:24Z","closed_at":null,"body":"This came up looking at the layer rule execution by the dlr, but applies to\nall modules and components.  \n  \nPermissions which may be used to elevate beyond what their name implies should\nbe avoided. A convention should be established so the sysadmin assigning role\npermissions does not unintentionally grant total control.  \n\nWork Item Details\n--------------------\n**Original CodePlex Issue:**\t[Issue 16765](http://orchard.codeplex.com/workitem/16765)\n**Status:**\tClosed\n**Reason Closed:**\tUnassigned\n**Assigned to:**\tsebastienros\n**Reported on:**\tNov 15, 2010 at 6:59 PM\n**Reported by:**\tloudej\n**Updated on:**\tDec 8, 2010 at 9:15 PM\n**Updated by:**\tsebastienros\n**Closed on:**\tDec 8, 2010 at 9:15 PM\n**Closed by:**\tsebastienros\n**Status:**\tClosed\n**Reason Closed:**\tUnassigned\n**Assigned to:**\tsebastienros\n**Reported on:**\tNov 15, 2010 at 6:59 PM\n**Reported by:**\tloudej\n**Updated on:**\tDec 8, 2010 at 9:15 PM\n**Updated by:**\tsebastienros\n**Closed on:**\tDec 8, 2010 at 9:15 PM\n**Closed by:**\tsebastienros\n"}}