)]}'
{"specs/template.rst":[{"author":{"_account_id":5293,"name":"Nikhil","email":"SlickNik@gmail.com","username":"slicknik"},"change_message_id":"4e5a4500ba85ddfab8cb29b6db90e187f73bf415","unresolved":false,"context_lines":[{"line_number":73,"context_line":"-------------------"},{"line_number":74,"context_line":""},{"line_number":75,"context_line":"If this change proposes a new API, or if this change relates to"},{"line_number":76,"context_line":"security on an existing API, provide details here."},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"What are the expectations of, and implications to security on the"},{"line_number":79,"context_line":"Public API."}],"source_content_type":"text/x-rst","patch_set":1,"id":"5a890539_e764c2e6","line":76,"updated":"2014-12-03 08:14:01.000000000","message":"I\u0027m a bit unclear on what exactly \"security on an API\" means. \n\nDoes this relate to overall security (e.g. things like SQL injection, MITM attacks, etc) or just credentials needed for the API call? If it\u0027s the former, then does it makes sense to have a separate section and explain what is expected a bit more in detail.","commit_id":"dd250fd09b614797adfd729b3ca9b7703498fb04"},{"author":{"_account_id":9664,"name":"amrith","email":"amrith.kumar@gmail.com","username":"amrith"},"change_message_id":"7845cf55ad137291c5e3b17129576dcf53ad016b","unresolved":false,"context_lines":[{"line_number":73,"context_line":"-------------------"},{"line_number":74,"context_line":""},{"line_number":75,"context_line":"If this change proposes a new API, or if this change relates to"},{"line_number":76,"context_line":"security on an existing API, provide details here."},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"What are the expectations of, and implications to security on the"},{"line_number":79,"context_line":"Public API."}],"source_content_type":"text/x-rst","patch_set":1,"id":"5a890539_399073ec","line":76,"in_reply_to":"5a890539_e764c2e6","updated":"2014-12-04 10:19:17.000000000","message":"Nikhil, this is basically to handle issues like the ones raised in the context of the log spec. Who can access the API, what are the security implications in the implementation. What can an admin do and what can a tenant do. Things of that kind.","commit_id":"dd250fd09b614797adfd729b3ca9b7703498fb04"}]}