Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove GUEST write permission #1091

Open
wants to merge 2 commits into
base: main
Choose a base branch
from
Open

Conversation

ikhoon
Copy link
Contributor

@ikhoon ikhoon commented Jan 22, 2025

Motivation:

A public repository in GitHub grants READ permission to normal users but does not give WRITE permission to them. Similarly, it does not make sense to grant a WRITE permission to GUEST role in Central Dogma.

Related: #1048

Modifications:

  • Disallow setting the GUEST WRITE permission in the repo role UI.
  • The old WRITE permission of GUEST is automatically converted to READ permission.
    • I will write a migration to clean the GUEST WRITE permission data stored in metadata.json later. Because two role formats are fixed in metadata.json and I don't think the new format is stabilized. The new format could be changed when a new permission feature is added.
  • Breaking) GUEST users no longer write a change to a repository. A MEMBER WRITE role is explicitly necessary.

Result:

The GUEST WRITE permission is removed from the repository roles.

Motivation:

A public repository in GitHub grants READ permission to normal users but
does not give WRITE permission to them. Similarly, I don't think it is
not make sense to grant a `WRITE` permission to `GUEST` role in Central
Dogma.

Related: line#1048

Modifications:

- Disallow setting the GUEST WRITE permssion in the repo role UI.
- The old WRITE permission of GUEST is automatically converted to READ
  permission.
  - I will write a migration to clean the GUEST WRITE permission data
    stored in `metadata.json` later. Because two role formats are fixed
    in `metadata.json` and I don't think the new format is stabilized.
    The new format could be changed when adding a new permission feature.
- Breaking) GUEST users no longer write a change to a repository. A
  MEMBER WRITE role is explicitly necessary.

Result:

The GUEST WRITE permission is remove from the repository roles.
@ikhoon ikhoon added this to the 0.74.0 milestone Jan 22, 2025
@ikhoon ikhoon marked this pull request as draft January 23, 2025 03:01
@ikhoon ikhoon marked this pull request as ready for review January 23, 2025 10:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants