Limit required access rights
Limit required access rights

When registering a new repository, only request permission for those
actions required by this application. This includes:

> - `user:email` - Grants read access to a user’s email addresses.
> - `repo:status` - Grants read/write access to public and private
>   repository commit statuses. This scope is only necessary to grant
>   other users or services access to private repository commit statuses
>   without granting access to the code.
> - `admin:repo_hook` - Grants read, write, ping, and delete access to
>   hooks in public or private repositories.
> - `admin:org_hook` - Grants read, write, ping, and delete access to
>   organization hooks. **Note:** OAuth tokens will only be able to
>   perform these actions on organization hooks which were created by
>   the OAuth application. Personal access tokens will only be able to
>   perform these actions on organization hooks created by a user.
> - `read:org` - Read-only access to organization, teams, and
>   membership.

[1]

...and is facilitated by the OmniAuth Github gem:

> ### Scopes
>
> GitHub API v3 lets you set scopes to provide granular access to
> different types of data:
>
>     use OmniAuth::Builder do
>       provider :github, ENV['GITHUB_KEY'], ENV['GITHUB_SECRET'], scope: "user,repo,gist"
>     end

[2]

[1] GitHub API Documentation - OAuth: Scopes
    https://developer.github.com/v3/oauth/#scopes
[2] OmniAuth-Github gem documentation
    https://github.com/intridea/omniauth-github#scopes

strongloop-forks/clahub,freddyrangel/clahub,strongloop-forks/clahub,step21/clahub-1,freddyrangel/clahub,step21/clahub-1,clahub/clahub,clahub/clahub,step21/clahub-1,phenomax/clahub,step21/clahub-1,strongloop-forks/clahub,phenomax/clahub,strongloop-forks/clahub,freddyrangel/clahub,phenomax/clahub,freddyrangel/clahub,phenomax/clahub,clahub/clahub,clahub/clahub