fd24753
issue: repo users to change from public to private They shouldn't be able to do the other way round, since both GET and POST is blocked if the user is not a committer