{"action":"created","issue":{"url":"https://api.github.com/repos/mozillascience/site/issues/18","labels_url":"https://api.github.com/repos/mozillascience/site/issues/18/labels{/name}","comments_url":"https://api.github.com/repos/mozillascience/site/issues/18/comments","events_url":"https://api.github.com/repos/mozillascience/site/issues/18/events","html_url":"https://github.com/mozillascience/site/issues/18","id":58614779,"number":18,"title":"Proposal: delay requesting the public_repo scope","user":{"login":"acabunoc","id":617994,"avatar_url":"https://avatars.githubusercontent.com/u/617994?v=3","gravatar_id":"","url":"https://api.github.com/users/acabunoc","html_url":"https://github.com/acabunoc","followers_url":"https://api.github.com/users/acabunoc/followers","following_url":"https://api.github.com/users/acabunoc/following{/other_user}","gists_url":"https://api.github.com/users/acabunoc/gists{/gist_id}","starred_url":"https://api.github.com/users/acabunoc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/acabunoc/subscriptions","organizations_url":"https://api.github.com/users/acabunoc/orgs","repos_url":"https://api.github.com/users/acabunoc/repos","events_url":"https://api.github.com/users/acabunoc/events{/privacy}","received_events_url":"https://api.github.com/users/acabunoc/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":2,"created_at":"2015-02-23T16:59:30Z","updated_at":"2015-02-23T18:08:39Z","closed_at":null,"body":"Currently we request the `public_repo` scope with GitHub authentication upon log in. This helps us encourage users to fork code -- remixing is an important skills for learning and building tools helping science on the web. We don't want to loose this functionality, especially since we'll be using this for our upcoming community blogging system.\r\n\r\nProblem:\r\n`public_scope` is an admittedly permissive scope, giving us write access to all repos the users has access to, including organization repos. We don't actually need or want this -- neither does some of our community: #11 \r\n\r\nProposal:\r\nThe best compromise I can think of now, is to request `no scope` upon log in. Then, when a user wants to take part in Collaborate, request `public_scope`. This would require rewriting some of our authentication code and we'd have less smooth user process around Collaborate. We'll also have to consider how we'll work with tiered scopes with the new blogging system - which will be built around forking.\r\n\r\nMy biggest concern with this approach is the fact that our future plans are tied around forking and encouraging more interaction with code."},"comment":{"url":"https://api.github.com/repos/mozillascience/site/issues/comments/75597431","html_url":"https://github.com/mozillascience/site/issues/18#issuecomment-75597431","issue_url":"https://api.github.com/repos/mozillascience/site/issues/18","id":75597431,"user":{"login":"acabunoc","id":617994,"avatar_url":"https://avatars.githubusercontent.com/u/617994?v=3","gravatar_id":"","url":"https://api.github.com/users/acabunoc","html_url":"https://github.com/acabunoc","followers_url":"https://api.github.com/users/acabunoc/followers","following_url":"https://api.github.com/users/acabunoc/following{/other_user}","gists_url":"https://api.github.com/users/acabunoc/gists{/gist_id}","starred_url":"https://api.github.com/users/acabunoc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/acabunoc/subscriptions","organizations_url":"https://api.github.com/users/acabunoc/orgs","repos_url":"https://api.github.com/users/acabunoc/repos","events_url":"https://api.github.com/users/acabunoc/events{/privacy}","received_events_url":"https://api.github.com/users/acabunoc/received_events","type":"User","site_admin":false},"created_at":"2015-02-23T18:08:39Z","updated_at":"2015-02-23T18:08:39Z","body":"@wking - that sounds like a good workflow"}}