-
Bug
-
Resolution: Fixed
-
Critical
-
None
The latest version of the plugin is asking for too much permissions when the users are logging into a Jenkins instance using GitHub OAuth.
I agree that the plugin needs this many permissions to access the various parts of a github's repository, but I believe the scope for user authentication can be narrowed down to username/email address.
I believe it's just a matter of using the right scope for regular user authentication instead of the more broader scope that the plugin needs for "administrative" tasks.
Please see https://github.com/saltstack/salt-jenkins/issues/61 for additional information of the permissions being asked to a regular user.
- is related to
-
JENKINS-26789 Upcoming GitHub API changes
- Resolved
-
JENKINS-27691 make Github OAuth Scopes configurable
- Resolved