[openstreetmap/openstreetmap-website] Add user block api call (PR #4301)

mmd notifications at github.com
Fri Oct 20 14:07:39 UTC 2023


@mmd-osm commented on this pull request.



> @@ -1,7 +1,7 @@
 module Oauth
   SCOPES = %w[read_prefs write_prefs write_diary write_api read_gpx write_gpx write_notes].freeze
   PRIVILEGED_SCOPES = %w[read_email skip_authorization].freeze
-  OAUTH2_SCOPES = %w[openid].freeze
+  OAUTH2_SCOPES = %w[write_blocks openid].freeze

I'm wondering if it would make sense to only allow moderators and admins to register a new app with "Create and revoke user blocks" permissions?

-- 
Reply to this email directly or view it on GitHub:
https://github.com/openstreetmap/openstreetmap-website/pull/4301#pullrequestreview-1690125469
You are receiving this because you are subscribed to this thread.

Message ID: <openstreetmap/openstreetmap-website/pull/4301/review/1690125469 at github.com>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstreetmap.org/pipermail/rails-dev/attachments/20231020/c06472f0/attachment.htm>


More information about the rails-dev mailing list