impactmakers / impactmakers/climatechoice

Acccessing the CMS mean I need to give shylands read write access to my private git repos

Open
#158 2 comments 0 reactions 0 assignees View on GitHub
Dominant language
JavaScript
Stars
60
Forks
17
PR merge metrics
No merged PRs in 30d

Description

## Description of issue
Accessing the CMS admin area means I need to give shylands read-write access to my private git repos. It is probably a GIT config issue but it discouraged me from going any further. I do not want to give up all privacy to contribute to the project. Other might feel the same.

## Steps
Go here https://climatechoice.netlify.app/admin/
Click "login with github"

## Result
This dialogue appears:

> Climatechoice by shylands
> wants to access your ricjhill account
> Repositories
> Public and private
>
> This application will be able to read and write all public and private repository data. This includes the following:
>
> Code
> Issues
> Pull requests
> Wikis
> Settings
> Webhooks and services
> Deploy keys
> Collaboration invites

## Expected result:
Shylands gives me access and gets nothing from me :) Or more realistically does not get rw- perms on my account. r-- perms on public repos code.

No r-- access to public or private
- Settings
- Webhooks and services
- Deploy keys
- Collaboration invites

Contributor guide

Open the contributing guide

Research direction

Start at the CMS admin entry point at https://climatechoice.netlify.app/admin/ and follow the GitHub login flow to identify where the requested permissions are configured. Done means the consent dialog requests only the access needed for CMS use, without read-write access to private repositories or settings, webhooks, deploy keys, and collaboration invites.

Written by the indexing model from the issue text.

Assessment

Tech stack
github, javascript
Domain
authentication, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
30/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.