Editing fine‑grained PAT resets repository access to 'All repositories' #183307
Replies: 2 comments
-
|
💬 Your Product Feedback Has Been Submitted 🎉 Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users. Here's what you can expect moving forward ⏩
Where to look to see what's shipping 👀
What you can do in the meantime 💻
As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities. Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐ |
Beta Was this translation helpful? Give feedback.
-
|
same bug! |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Select Topic Area
Bug
Body
Summary
When editing an existing fine‑grained personal access token (PAT) that was originally scoped to specific repositories, the UI defaults to the 'All repositories' option instead of pre‑selecting the repositories originally chosen.
Steps to Reproduce
https://github.com/settings/personal-access-tokens/10554559).Expected Behavior
The editor should remember the repositories that were originally selected and show those repositories in the “Selected repositories” list, so you can adjust permissions without changing the repository scope.
Actual Behavior
The editor defaults to “All repositories” under “Repository access”, effectively broadening the token’s scope. This happens even when the original token was restricted to one repository.
Impact
This bug makes it easy to accidentally grant a token access to all repositories, which defeats the purpose of fine‑grained scoping.
Environment
Let me know if additional details are required.
Beta Was this translation helpful? Give feedback.
All reactions