{"action":"created","issue":{"url":"https://api.github.com/repos/rust-lang/crates.io/issues/137","labels_url":"https://api.github.com/repos/rust-lang/crates.io/issues/137/labels{/name}","comments_url":"https://api.github.com/repos/rust-lang/crates.io/issues/137/comments","events_url":"https://api.github.com/repos/rust-lang/crates.io/issues/137/events","html_url":"https://github.com/rust-lang/crates.io/issues/137","id":58700699,"number":137,"title":"Groups for ownership *or* GitHub-based permissions","user":{"login":"SimonSapin","id":291359,"avatar_url":"https://avatars.githubusercontent.com/u/291359?v=3","gravatar_id":"","url":"https://api.github.com/users/SimonSapin","html_url":"https://github.com/SimonSapin","followers_url":"https://api.github.com/users/SimonSapin/followers","following_url":"https://api.github.com/users/SimonSapin/following{/other_user}","gists_url":"https://api.github.com/users/SimonSapin/gists{/gist_id}","starred_url":"https://api.github.com/users/SimonSapin/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/SimonSapin/subscriptions","organizations_url":"https://api.github.com/users/SimonSapin/orgs","repos_url":"https://api.github.com/users/SimonSapin/repos","events_url":"https://api.github.com/users/SimonSapin/events{/privacy}","received_events_url":"https://api.github.com/users/SimonSapin/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-02-24T06:52:12Z","updated_at":"2015-02-24T14:02:03Z","closed_at":null,"body":"We (the Servo team) want to publish more of our libraries on crates.io. One thing this implies is dealing with crates ownership: who can publish new versions. Currently, AFAIU, we have to add or remove permissions for individual people for individual crates. Compare with GitHub where we have \"teams\" where people participate, and teams has a whole have push access to repositories. This is much easier to manage when the number of people and/or repositories/crates grows.\r\n\r\nIt would help us if cartes.io had \"groups\" or \"teams\" or something like it, to manage crates ownership.\r\n\r\nAlternatively, I was going to suggest deferring permission management to GitHub: if a crate name is associated with a repository, anyone with permission to push to that repo can also publish a new version. Unfortunately, [that part of the GitHub API](https://developer.github.com/v3/repos/collaborators/#get) seems not to be public:\r\n\r\n```\r\n$ curl -si https://api.github.com/repos/rust-lang/crates.io/collaborators/alexcrichton | grep Status\r\nStatus: 401 Unauthorized\r\n```"},"comment":{"url":"https://api.github.com/repos/rust-lang/crates.io/issues/comments/75760672","html_url":"https://github.com/rust-lang/crates.io/issues/137#issuecomment-75760672","issue_url":"https://api.github.com/repos/rust-lang/crates.io/issues/137","id":75760672,"user":{"login":"Manishearth","id":1617736,"avatar_url":"https://avatars.githubusercontent.com/u/1617736?v=3","gravatar_id":"","url":"https://api.github.com/users/Manishearth","html_url":"https://github.com/Manishearth","followers_url":"https://api.github.com/users/Manishearth/followers","following_url":"https://api.github.com/users/Manishearth/following{/other_user}","gists_url":"https://api.github.com/users/Manishearth/gists{/gist_id}","starred_url":"https://api.github.com/users/Manishearth/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Manishearth/subscriptions","organizations_url":"https://api.github.com/users/Manishearth/orgs","repos_url":"https://api.github.com/users/Manishearth/repos","events_url":"https://api.github.com/users/Manishearth/events{/privacy}","received_events_url":"https://api.github.com/users/Manishearth/received_events","type":"User","site_admin":false},"created_at":"2015-02-24T14:02:03Z","updated_at":"2015-02-24T14:02:03Z","body":"Crates is anyway associated with a GH account, perhaps it can ask for those additional permissions?"}}