At the moment, any user can create/edit/delete GitHub subscriptions. This functionality should be limited to users with permission to manage the given channel. The following cases should allow a user to edit subscriptions:
The channel is a private channel and the user has PERMISSION_MANAGE_PRIVATE_CHANNEL_PROPERTIES for this channel
The channel is a public channel and the user has PERMISSION_MANAGE_PUBLIC_CHANNEL_PROPERTIES for this channel
At the moment, any user can create/edit/delete GitHub subscriptions. This functionality should be limited to users with permission to manage the given channel. The following cases should allow a user to edit subscriptions:
PERMISSION_MANAGE_PRIVATE_CHANNEL_PROPERTIES
for this channelPERMISSION_MANAGE_PUBLIC_CHANNEL_PROPERTIES
for this channel_Issue created from a Mattermost message by @hanzei._