Show HN: GitHub Notifier – Emails for stars/forks your repos and new followers

Re:Show HN: GitHub Notifier – Emails for stars/forks your re... by ghuntley on Monday February 23, 2015 @06:05AM (#9093641)

    > This application will be able to read and write all user data.

Fix your permissions please, sounds useful but no way are you being granted full read/write to personal and organization repos.

[ Parent | on HN ]

Re:Show HN: GitHub Notifier – Emails for stars/forks your re... by Usu on Monday February 23, 2015 @06:45AM (#9093779)

Actually after looking into it the current permissions are:

Grants read/write access to profile info only. Note that this scope includes user:email and user:follow.

Still too broad, but it doesn't give access to repos. I will change it to only user:email as soon as I get off my daily job.

[ Parent | on HN ]

Re:Show HN: GitHub Notifier – Emails for stars/forks your re... by akerl_ on Monday February 23, 2015 @08:19AM (#9094079)

It's been a while since I tested it, but I believe that reading public info like stars and following/followers requires no scopes. I only needed that scope for writing. May be worth checking out?

[ Parent | on HN ]

Re:Show HN: GitHub Notifier – Emails for stars/forks your re... by stingraycharles on Monday February 23, 2015 @07:24AM (#9093889)

Github shoukd rename it into "profile data" then. "User data" seems easy to misinterpret.

[ Parent | on HN ]

Re:Show HN: GitHub Notifier – Emails for stars/forks your re... by masukomi on Monday February 23, 2015 @09:46AM (#9094503)

Yeah, i was about to sign up but didn't because it was asking for too much permission.

[ Parent | on HN ]

Re:Show HN: GitHub Notifier – Emails for stars/forks your re... by Usu on Monday February 23, 2015 @09:54AM (#9094552)

I fixed the issue :)

[ Parent | on HN ]

Re:Show HN: GitHub Notifier – Emails for stars/forks your re... by Usu on Monday February 23, 2015 @06:08AM (#9093652)

Ugh. Nice find, I'll fix that asap!

[ Parent | on HN ]

Re:Show HN: GitHub Notifier – Emails for stars/forks your re... by alpeb on Monday February 23, 2015 @09:47AM (#9094506)

Would it be possible to have it access only your personal profile data? The permissions screen shows an Organization Access section with all my orgs checked.

[ Parent | on HN ]

Re:Show HN: GitHub Notifier – Emails for stars/forks your re... by Usu on Monday February 23, 2015 @10:06AM (#9094622)

Unfortunately I can't exclude organisation altogether, GitHub applications have access to organisation with the permissions that the user has allowed the app. However now GitHub Notifier only asks for read permissions :)

[ Parent | on HN ]