https://pulumi.com logo
#general
Title
# general
m

most-mouse-38002

10/02/2023, 9:02 AM
The new Pulumi app for GitHub is requesting way to much access? Why would it need RW access to Administration or Content? I understand some of these things are required, but does it really need access to delete our org (amongst others)?
s

steep-book-56052

10/02/2023, 9:21 AM
I made a slack account on here precisely to find out why it needs these permissions. Github itself also reports this about these permissions:
Copy code
Some webhooks and API access requires "Administration" permissions. If your app requires "Administration" permissions, consider explaining this requirement on your app's homepage. This will help users understand why your app needs a high level permission.
I'd love to hear from Pulumi why these permissions are needed.
m

many-telephone-49025

10/02/2023, 9:35 AM
Hey @most-mouse-38002 and @steep-book-56052, thanks for the feedback. We are in contact with our engineering folks to get informations around this new permissions.
m

most-mouse-38002

10/02/2023, 9:36 AM
Thanks for the quick response, @many-telephone-49025
m

many-telephone-49025

10/02/2023, 9:38 AM
As the related engineering teams are in the US, any response will be later the day.
m

most-mouse-38002

10/02/2023, 9:38 AM
Thats totally fine 🙂
s

steep-book-56052

10/02/2023, 9:43 AM
Thanks for the response so far already @many-telephone-49025
l

limited-rainbow-51650

10/02/2023, 4:35 PM
All, the change was executed in error and has been reverted!
m

most-mouse-38002

10/02/2023, 4:45 PM
Thank you for getting back to us, @limited-rainbow-51650