#1435 Less privileged API tokens?
Closed: MIGRATED a year ago by nikromen. Opened 3 years ago by praiskup.

Each user has only one, fully privileged API token.

Such token can not be stored to per-project specific CI system, because
such a CI system would be able to control anything the user is able to control.

We could have a user-managed set of API tokens with a precise set of
permissions, e.g. per-project build, admin.

Complements #1434.


Metadata Update from @nikromen:
- Issue close_status updated to: MIGRATED
- Issue status updated to: Closed (was: Open)

a year ago

Login to comment on this ticket.

Metadata