Subject: [boost] GitHub third-party application permissions
From: Vladimir Prus (vladimir_at_[hidden])
Date: 2015-02-11 11:57:29


Hi,

the GitHub boostorg organization is configured in a way that any application authorized by
any organization member will have full access to boostorg data. Is that desirable?

I've noticed accidentally, and don't know much about github permission model, but it seems
that all authorized applications will have access to all repositories the user has, there
does not appear a way to limit either repositories or operations.

Comments?

-- 
Vladimir Prus
CodeSourcery / Mentor Embedded
http://vladimirprus.com