Uploaded image for project: 'COmanage'
  1. COmanage
  2. CO-1818

githubProvisioner Invitations Support

    XMLWordPrintable

Details

    Description

      The GitHub API used by COmanage does not support repository invitations:

      https://github.com/KnpLabs/php-github-api/issues/713

      This means that there's a race condition when removing unknown users, as if the user is added to a team, but removed before they accept the invitation, their invite is still pending and they can join the team. This will be fixed the next time the group is synced, but to prevent a security hole the GitHub organization admin has to manually check this and remove pending invitations of removed group members.

      Attachments

        Activity

          People

            benn.oshrin@at.internet2.edu Benn Oshrin (internet2.edu)
            duncan.brown@at.internet2.edu Duncan Brown
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: