{"action":"opened","issue":{"url":"https://api.github.com/repos/girder/girder/issues/659","labels_url":"https://api.github.com/repos/girder/girder/issues/659/labels{/name}","comments_url":"https://api.github.com/repos/girder/girder/issues/659/comments","events_url":"https://api.github.com/repos/girder/girder/issues/659/events","html_url":"https://github.com/girder/girder/issues/659","id":55778662,"number":659,"title":"Design and implement private user behavior","user":{"login":"zachmullen","id":555959,"avatar_url":"https://avatars.githubusercontent.com/u/555959?v=3","gravatar_id":"","url":"https://api.github.com/users/zachmullen","html_url":"https://github.com/zachmullen","followers_url":"https://api.github.com/users/zachmullen/followers","following_url":"https://api.github.com/users/zachmullen/following{/other_user}","gists_url":"https://api.github.com/users/zachmullen/gists{/gist_id}","starred_url":"https://api.github.com/users/zachmullen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/zachmullen/subscriptions","organizations_url":"https://api.github.com/users/zachmullen/orgs","repos_url":"https://api.github.com/users/zachmullen/repos","events_url":"https://api.github.com/users/zachmullen/events{/privacy}","received_events_url":"https://api.github.com/users/zachmullen/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/girder/girder/labels/feature","name":"feature","color":"207de5"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-01-28T16:26:28Z","updated_at":"2015-01-28T16:26:28Z","closed_at":null,"body":"Currently we don't even expose the creation of private users or editing of user ACLs via the REST API, it can only be done programmatically at this time. We now have plugin developers attempting to use private users, which means we need to answer a few questions about how they should behave.\r\n\r\n* Should users be able to have their own ACL controlled through a widget just like other resource types, or should web API-level control be more specialized?\r\n* If a user is private but generates data that is visible to people who do not have read access to the user, what appears in the \"created by\" field or any other field referencing the user? If the user is in an ACL for a resource, should admins over that resource be able to see them in the list even if they don't have read access to the user?\r\n* If a private user is in a group, should all members (or moderators or admins) of the group automatically be able to see that user? How will this be managed by the backing ACL for the user?"}}