search

rstedman / tfs-pullrequest-dashboard

tfs dashboard for pullrequests across all repos
MIT License
30 stars 29 forks source link

Minimal permission scopes #42

Closed hacst closed 5 years ago

hacst commented 5 years ago

Is it possible to reduce the permissions scope of this extension from vso.code to vso.code_status or does this scope lack anything essential?

vso.code also include permissions to read the full source code which is quite a dangerous permission to have.

rstedman commented 5 years ago

I looked into using the code_status scope, but it isn't enough. It doesn't allow the extension to list all the repositories in a project. That was just the first error I encountered, there may be other issues in using that scope.

hacst commented 5 years ago

Bummer. Thanks for checking.