todogroup / gh-issues

A curated set of issues related to GitHub and running corporate scale open source
http://todogroup.org
25 stars 4 forks source link

Traffic API permissions too high #51

Open hyandell opened 7 years ago

hyandell commented 7 years ago

Copy of an email to GitHub Support:

Hi GitHub folk,

I develop a dashboard for GitHub projects ( https://github.com/amzn/oss-dashboard ) and currently the dashboarding user has to be an Owner of the organization for two reasons. The first is a to show 2fa status, which now that GitHub allows organizations to require 2fa feels like a feature I can drop. The second is to pull the traffic data (where you either make the user Admin on a lot of repositories, or make them Owner).

Is there a reason why a member of an organization cannot see the Traffic data for the repository? Any chance that could be adjusted to allow any member to see it?

Bug report wise, I should also point out that the documentation says anyone with push permissions can see it (https://developer.github.com/v3/repos/traffic/) whereas the error message says "403 - Must have admin rights to Repository. // See: https://developer.github.com/v3".

Thanks,

Hen