{"action":"created","issue":{"url":"https://api.github.com/repos/CartoDB/cartodb/issues/2306","labels_url":"https://api.github.com/repos/CartoDB/cartodb/issues/2306/labels{/name}","comments_url":"https://api.github.com/repos/CartoDB/cartodb/issues/2306/comments","events_url":"https://api.github.com/repos/CartoDB/cartodb/issues/2306/events","html_url":"https://github.com/CartoDB/cartodb/issues/2306","id":58054263,"number":2306,"title":"403 in viz.json for private/password-protected visualizations","user":{"login":"rochoa","id":45346,"avatar_url":"https://avatars.githubusercontent.com/u/45346?v=3","gravatar_id":"","url":"https://api.github.com/users/rochoa","html_url":"https://github.com/rochoa","followers_url":"https://api.github.com/users/rochoa/followers","following_url":"https://api.github.com/users/rochoa/following{/other_user}","gists_url":"https://api.github.com/users/rochoa/gists{/gist_id}","starred_url":"https://api.github.com/users/rochoa/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/rochoa/subscriptions","organizations_url":"https://api.github.com/users/rochoa/orgs","repos_url":"https://api.github.com/users/rochoa/repos","events_url":"https://api.github.com/users/rochoa/events{/privacy}","received_events_url":"https://api.github.com/users/rochoa/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/CartoDB/cartodb/labels/backend","name":"backend","color":"d4c5f9"},{"url":"https://api.github.com/repos/CartoDB/cartodb/labels/bug","name":"bug","color":"fc2929"},{"url":"https://api.github.com/repos/CartoDB/cartodb/labels/New%20dashboard","name":"New dashboard","color":"c7def8"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2015-02-18T11:06:08Z","updated_at":"2015-02-18T13:21:55Z","closed_at":null,"body":"## STR\r\n\r\n1. Create a new private visualization\r\n1. Click on share\r\n1. Access the URL from CartoDB.js option\r\n\r\n## Current result\r\n\r\nEven being authenticated it returns a 403 error\r\n\r\n## Expected result\r\n\r\nBeing authenticated it should return the viz.json\r\nNon-authenticated and **non-authorized** (if the visualization is shared in an organization) requests should keep raising a 403 error\r\n\r\nAlthough I tagged this as a bug I'm not sure if this was intentional from the very beginning."},"comment":{"url":"https://api.github.com/repos/CartoDB/cartodb/issues/comments/74862467","html_url":"https://github.com/CartoDB/cartodb/issues/2306#issuecomment-74862467","issue_url":"https://api.github.com/repos/CartoDB/cartodb/issues/2306","id":74862467,"user":{"login":"Kartones","id":2085449,"avatar_url":"https://avatars.githubusercontent.com/u/2085449?v=3","gravatar_id":"","url":"https://api.github.com/users/Kartones","html_url":"https://github.com/Kartones","followers_url":"https://api.github.com/users/Kartones/followers","following_url":"https://api.github.com/users/Kartones/following{/other_user}","gists_url":"https://api.github.com/users/Kartones/gists{/gist_id}","starred_url":"https://api.github.com/users/Kartones/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Kartones/subscriptions","organizations_url":"https://api.github.com/users/Kartones/orgs","repos_url":"https://api.github.com/users/Kartones/repos","events_url":"https://api.github.com/users/Kartones/events{/privacy}","received_events_url":"https://api.github.com/users/Kartones/received_events","type":"User","site_admin":false},"created_at":"2015-02-18T13:21:55Z","updated_at":"2015-02-18T13:21:55Z","body":"in Varnish? no prob, I'll check that as IIRC on privacy change of a visualization we invalidate Varnish, else implement it."}}