3 ms·
> This application will be able to read and write all user data. Fix your permissions please, sounds useful but no way are you being granted full read/write t
by ghuntley 12y ago
> This application will be able to read and write all user data.
Fix your permissions please, sounds useful but no way are you being granted full read/write to personal and organization repos.
- Usu 12y agoUgh. Nice find, I'll fix that asap!
- deleted 12y ago[deleted]
- Usu 12y agoActually after looking into it the current permissions are: Grants read/write access to profile info only. Note that this scope includes user:email and user:follow. Still too broad, but it doesn't give access to repos. I will change it to only user:email as soon as I get off my daily job.
- stingraycharles 12y agoGithub shoukd rename it into "profile data" then. "User data" seems easy to misinterpret.
- akerl_ 12y agoIt's been a while since I tested it, but I believe that reading public info like stars and following/followers requires no scopes. I only needed that scope for writing. May be worth checking out?
- masukomi 12y agoYeah, i was about to sign up but didn't because it was asking for too much permission.
- Usu 12y agoI fixed the issue :)
- alpeb 12y agoWould it be possible to have it access only your personal profile data? The permissions screen shows an Organization Access section with all my orgs checked.
- Usu 12y agoUnfortunately I can't exclude organisation altogether, GitHub applications have access to organisation with the permissions that the user has allowed the app. However now GitHub Notifier only asks for read permissions :)