{"action":"closed","issue":{"url":"https://api.github.com/repos/hmrc/vat-api/issues/360","repository_url":"https://api.github.com/repos/hmrc/vat-api","labels_url":"https://api.github.com/repos/hmrc/vat-api/issues/360/labels{/name}","comments_url":"https://api.github.com/repos/hmrc/vat-api/issues/360/comments","events_url":"https://api.github.com/repos/hmrc/vat-api/issues/360/events","html_url":"https://github.com/hmrc/vat-api/issues/360","id":386740217,"node_id":"MDU6SXNzdWUzODY3NDAyMTc=","number":360,"title":"Grant authority suggestion","user":{"login":"PeterGGreen","id":43069040,"node_id":"MDQ6VXNlcjQzMDY5MDQw","avatar_url":"https://avatars1.githubusercontent.com/u/43069040?v=4","gravatar_id":"","url":"https://api.github.com/users/PeterGGreen","html_url":"https://github.com/PeterGGreen","followers_url":"https://api.github.com/users/PeterGGreen/followers","following_url":"https://api.github.com/users/PeterGGreen/following{/other_user}","gists_url":"https://api.github.com/users/PeterGGreen/gists{/gist_id}","starred_url":"https://api.github.com/users/PeterGGreen/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/PeterGGreen/subscriptions","organizations_url":"https://api.github.com/users/PeterGGreen/orgs","repos_url":"https://api.github.com/users/PeterGGreen/repos","events_url":"https://api.github.com/users/PeterGGreen/events{/privacy}","received_events_url":"https://api.github.com/users/PeterGGreen/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":5,"created_at":"2018-12-03T10:01:20Z","updated_at":"2018-12-03T11:55:57Z","closed_at":"2018-12-03T11:55:57Z","author_association":"NONE","body":"Dear HMRC,\r\n\r\nIt's not a stumbling block, but it does seem odd that we can't grant authority for both retrieve and submit VAT with one visit the HMRC website.  So I would suggest a change whereby instead of submitting a \"Scope\" of read:vat or write:vat as part of the submission, we submit some JSON similar to CreateTestUser telling you what we're requesting authorisation for.  That way we can get both read and write authorisation in 1 token (and more importantly in one \"log in\" to HMRC).  Having to go through the same procedure twice for authorisation seems wasteful and fussy.\r\n\r\nPerhaps too late now, but maybe for the future?\r\n\r\nCheers,\r\n\r\nPeter"}}
{"actor":{"display_login":"PeterGGreen"}}