GitHub authentication for REST API does not support team/user filter

zalando-zmon / zmon-controller

ZMON UI and REST API

https://docs.zmon.io/

Other

21 stars 17 forks source link

GitHub authentication for REST API does not support team/user filter #235

Closed hjacobs closed 8 years ago

hjacobs commented 8 years ago

Using the GitHub integration will not correctly check team/user membership for the REST API. This is a security issue as any GitHub personal access token can access the ZMON REST API (if deployed with "github" profile).

Jan-M commented 8 years ago

fix with #241