impactmakers / impactmakers/climatechoice
Acccessing the CMS mean I need to give shylands read write access to my private git repos
- Dominant language
- JavaScript
- Stars
- 60
- Forks
- 17
- PR merge metrics
- No merged PRs in 30d
Description
## Description of issue
Accessing the CMS admin area means I need to give shylands read-write access to my private git repos. It is probably a GIT config issue but it discouraged me from going any further. I do not want to give up all privacy to contribute to the project. Other might feel the same.
## Steps
Go here https://climatechoice.netlify.app/admin/
Click "login with github"
## Result
This dialogue appears:
> Climatechoice by shylands
> wants to access your ricjhill account
> Repositories
> Public and private
>
> This application will be able to read and write all public and private repository data. This includes the following:
>
> Code
> Issues
> Pull requests
> Wikis
> Settings
> Webhooks and services
> Deploy keys
> Collaboration invites
## Expected result:
Shylands gives me access and gets nothing from me :) Or more realistically does not get rw- perms on my account. r-- perms on public repos code.
No r-- access to public or private
- Settings
- Webhooks and services
- Deploy keys
- Collaboration invites
Contributor guide
Research direction
Start at the CMS admin entry point at https://climatechoice.netlify.app/admin/ and follow the GitHub login flow to identify where the requested permissions are configured. Done means the consent dialog requests only the access needed for CMS use, without read-write access to private repositories or settings, webhooks, deploy keys, and collaboration invites.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- github, javascript
- Domain
- authentication, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 30/100