getsentry / getsentry/sentry

Internal Integration Auth Token Permissions

Open
#84,566 2 comments 0 reactions 0 assignees View on GitHub
Bug Product Area: Settings - Integrations
Dominant language
Python
Stars
44.8k
Forks
4.9k
Avg merge
22h 21m
Merged PRs (30d)
586

Description

### Environment

SaaS (https://sentry.io/)

### Steps to Reproduce

1. Create Internal Integration setting a permission as Admin role (screenshot)
2. Login as a member with an Manager role
3. Create a new token

![Image](https://github.com/user-attachments/assets/f21d10a6-4f56-4b6b-82c2-84b7a085ee73)

### Expected Result

Members with Manager role should not be able to create a new token with Admin permission.

### Actual Result

Members with Manager role can create a new token with Admin permission and the created token appears as masked.

![Image](https://github.com/user-attachments/assets/705604c4-e61b-4c01-9655-9bee4ccd03fe)

### Product Area

Settings - Integrations

### Link

_No response_

### DSN

_No response_

### Version

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.