Incorrect permissions granted to the bot during install

matrix-org / matrix-hookshot

A bridge between Matrix and multiple project management services, such as GitHub, GitLab and JIRA.

https://matrix-org.github.io/matrix-hookshot/

Apache License 2.0

293 stars 68 forks source link

Incorrect permissions granted to the bot during install #739

Open bkil opened 1 year ago

bkil commented 1 year ago

It is granted PL50 after installation. However, this can be either too little or too much, as the role needs to be at least as high as the maximum of the following level requirements:

Invite users
Send messages
Change settings
(Anything else?)