github / github/platform-samples

Reinviting org members thorugh API does not support reinstating privileges

Đang mở
#388 2 bình luận 2 reaction 0 người được giao Xem trên GitHub
Ngôn ngữ chính
Shell
Star
2.2k
Fork
1.9k
Merge trung bình
7 ngày 19 giờ
Pull request đã merge (30 ngày)
1

Mô tả

https://github.com/github/platform-samples/blob/master/api/powershell/invite_members_to_org.ps1

So through the GUI if you invite users who have been part of the org recently, you get these options to reinstate privileges which is great

![image](https://user-images.githubusercontent.com/21334768/112442021-ab3e9100-8d4b-11eb-9266-53755c41c17a.png)

I checked the network tab and it makes a POST request towards
https://github.com/orgs/equinor/invitations?invitee_id=&role=reinstate

This doesn’t seem to happen / be available when making the call through the API though
https://docs.github.com/en/rest/reference/orgs#create-an-organization-invitation

We tested removing a user, inviting them through the script. The invite works, but the privileges are not reinstated. The person had lost access to their repos + starred equinor repos (assuming this is because he lost repo access, assuming also access to Github teams etc.

Since this isn’t supported through the API call, I assume this also means that the SCIM provisioning which re-invites removed org members also makes them start fresh, which is sub-optimal for our use case.

I’ve also had reports earlier that re-instated members also have had their personal access tokens / ssh keys “lost”, which probably means they mean have been de-authortized from using SSO to the org. I have not verified if or when this happens myself.

Hướng dẫn đóng góp

Mở hướng dẫn đóng góp

Hướng nghiên cứu

Start with api/powershell/invite_members_to_org.ps1 and the linked REST documentation for creating organization invitations. Compare the script/API behavior with the GUI request using role=reinstate, then verify whether reinstated members retain repository and organization access. Done means the supported API path and its effect on reinstated privileges are documented or implemented.

Do mô hình lập chỉ mục viết ra từ nội dung của issue.

Đánh giá

Công nghệ
github, powershell
Lĩnh vực
api, authorization
Loại issue
Tính năng
Độ khó
5/5
Thời gian dự kiến
Hơn một tuần
Mức độ hoạt động
Đình trệ
Độ rõ ràng
Cần làm rõ
Mức phù hợp với người mới
25/100

Nhận issue mới trong hộp thư của bạn

Bản tóm tắt ngắn những issue GitHub phù hợp với người mới.