3 ms·

I tried signing in with Github, but the permissions your app is requesting are too liberal for the level of familiarity I have with your service. I absolutely

I tried signing in with Github, but the permissions your app is requesting are too liberal for the level of familiarity I have with your service. I absolutely understand the rationale of asking for permission to view my private repositories, but you're asking for read AND WRITE permissions to my (and I assume my company's) private repos without giving any information about how you protect my or my company's closed source code. My suggestion (being completely unfamiliar with the Github permissions API) would be to only ask for read permissions to public repos for people who get to the login page by clicking "View live demo." I understand it might limit the live demo but personally I just want to see the UI and what have you. No need for write permissions. edit: And you're also asking for permission to read AND WRITE my email, my followers and my profile. I cannot think of any web app I would grant those kinds of permissions to my Github account. I am sure this is just a benign mistake but it could be perceived as sloppy.

ryansouza 13y ago
Over-eager permissions like this are especially bad if you have access to private work repos. Github's oauth scopes are based solely on the public/private nature of the repo, no way to restrict access to a subset you'd actually like to use for a service.
maciejb 13y ago
Hey @mattdeboard, We are aware of the issue with requesting too broad permissions. We fully understand you don't feel comfortable giving them. For the time being, if you want to login to the demo app, please use the usernames that are listed below the login screen. Any of the usernames: fox, scully, skinner. Password: codebrag. -Maciej, Codebrag team.
wozmirek 13y ago
We've just rolled out new version on demo.codebrag.com which asks for minimal set of permissions from Github (in fact only public infotmation). We used to ask for broader permissions as in earlier version we needed some more information from GH which is not the case anymore. Give it a try, we hope it's ok now. Codebrag Team

ryansouza 13y ago

Over-eager permissions like this are especially bad if you have access to private work repos. Github's oauth scopes are based solely on the public/private nature of the repo, no way to restrict access to a subset you'd actually like to use for a service.

maciejb 13y ago

Hey @mattdeboard, We are aware of the issue with requesting too broad permissions. We fully understand you don't feel comfortable giving them. For the time being, if you want to login to the demo app, please use the usernames that are listed below the login screen. Any of the usernames: fox, scully, skinner. Password: codebrag. -Maciej, Codebrag team.

wozmirek 13y ago

We've just rolled out new version on demo.codebrag.com which asks for minimal set of permissions from Github (in fact only public infotmation). We used to ask for broader permissions as in earlier version we needed some more information from GH which is not the case anymore. Give it a try, we hope it's ok now. Codebrag Team