docker-node icon indicating copy to clipboard operation
docker-node copied to clipboard

Published 20 hours ago • verified publisher icon nodejs

Node.js Bot Permissions

Open nschonni opened this issue 4 years ago • 3 comments

Currently it looks like it has Write access, but the original idea was just for Read https://github.com/nodejs/docker-node/issues/670#issue-308668692 Is there a reason the Bot still needs Write access? It might change if https://github.com/nodejs/docker-node/issues/1008 goes forward, but right now it looks like it doesn't need it.

Right now it looks like it's only used by this repo, but with https://github.com/nodejs/admin/issues/471 maybe it will be re-used

nschonni avatar Feb 21 '20 22:02 nschonni

We just reused one that already existed. I think it would be fine getting a more restricted one for this one as long as it still has access to write comments

LaurentGoderre avatar Feb 24 '20 16:02 LaurentGoderre

@LaurentGoderre now that I think of it, I don't think it even needs "Read", since it's a public repo, so any user should be able to make comments on the issues (that isn't locked).

nschonni avatar Feb 24 '20 20:02 nschonni

True but it should still be a bot with a token. It could be a token with no special access.

LaurentGoderre avatar Feb 27 '20 18:02 LaurentGoderre