If you look at the FAQ, they go over the reason for that: > Sadly, the Github oAuth mechanism is severely > limited in how much access control that we can

If you look at the FAQ, they go over the reason for that: > Sadly, the Github oAuth mechanism is severely > limited in how much access control that we can request. > We just want the ability to create issues in one specific > public repository, but the minimum privileges we can > request from Github are the ones you see when you login. > If you can convince someone at Github to add more > granular permissions, let us know! However, we never > store your authorization tokens in our server, and > instead just directly pass your authorization token into > a client-side cookie. http://www.realworldocaml.org/#faq http://www.realworldocaml.org/#faq