{"action":"opened","issue":{"url":"https://api.github.com/repos/OpenSWE1R/openswe1r/issues/155","repository_url":"https://api.github.com/repos/OpenSWE1R/openswe1r","labels_url":"https://api.github.com/repos/OpenSWE1R/openswe1r/issues/155/labels{/name}","comments_url":"https://api.github.com/repos/OpenSWE1R/openswe1r/issues/155/comments","events_url":"https://api.github.com/repos/OpenSWE1R/openswe1r/issues/155/events","html_url":"https://github.com/OpenSWE1R/openswe1r/issues/155","id":324064853,"number":155,"title":"Move AppVeyor to organizational account","user":{"login":"JayFoxRox","id":360330,"avatar_url":"https://avatars1.githubusercontent.com/u/360330?v=4","gravatar_id":"","url":"https://api.github.com/users/JayFoxRox","html_url":"https://github.com/JayFoxRox","followers_url":"https://api.github.com/users/JayFoxRox/followers","following_url":"https://api.github.com/users/JayFoxRox/following{/other_user}","gists_url":"https://api.github.com/users/JayFoxRox/gists{/gist_id}","starred_url":"https://api.github.com/users/JayFoxRox/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/JayFoxRox/subscriptions","organizations_url":"https://api.github.com/users/JayFoxRox/orgs","repos_url":"https://api.github.com/users/JayFoxRox/repos","events_url":"https://api.github.com/users/JayFoxRox/events{/privacy}","received_events_url":"https://api.github.com/users/JayFoxRox/received_events","type":"User","site_admin":false},"labels":[{"id":779794562,"url":"https://api.github.com/repos/OpenSWE1R/openswe1r/labels/administrative","name":"administrative","color":"f4b7da","default":false},{"id":761399116,"url":"https://api.github.com/repos/OpenSWE1R/openswe1r/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-05-17T15:06:04Z","updated_at":"2018-05-17T15:06:04Z","closed_at":null,"author_association":"MEMBER","body":"OpenSWE1R AppVeyor CI is currently running on my private account, which is very obvious from the URLs which include \"JayFoxRox82949\".\r\nTo address this, I've created a new [organizational account for AppVeyor](https://www.appveyor.com/docs/team-setup/#setting-up-appveyor-account-for-github-organization) named \"OpenSWE1R\".\r\n\r\nThe benefit is that we could change the AppVeyor links from\r\n\r\n* https://ci.appveyor.com/project/JayFoxRox82949/openswe1r\r\n\r\nto\r\n\r\n* https://ci.appveyor.com/project/OpenSWE1R/openswe1r\r\n\r\nEspecially with deployment ( #154 ) this would look more trustworthy and professional when people ask for the build logs / trusted source.\r\nThe change would also allow me to take full ownership of my personal AppVeyor account again.\r\n\r\nI had also hoped that this would greatly simplify permission and role handling.\r\n\r\n---\r\n\r\nHowever, I had to jump through hoops to even create the organizational account (such as having a unique e-mail address, setting up new oauth keys from my personal account, ...).\r\nEven after all of that, it still has full access to all my repositories (including hidden / private ones that my friends own) because it needs my GitHub accounts oauth.\r\nIt also seems impossible to restrict the organizational AppVeyor account to only the GitHub organization.\r\n\r\nThis means, that an organizational AppVeyor CI account, is essentially the same as a personal account which has the owner as the collaborator. All other AppVeyor permission problems seem to persist.\r\n\r\nI really can't be bothered to review all the permissions right now, because this is an overcomplicated mess. It's very hard to tell what other users might be able to see, or not see.\r\n\r\nEven with the organization, if I ever left the OpenSWE1R organization or my personal accounts got deleted, all hell breaks loose. Not only on GitHub, but also on AppVeyor.\r\n\r\nThe standard solution appears to be to create a new personal GithHub account, just for the organization, and then make that new account the organization owner. - I feel this is stupid.\r\n\r\n**So with the frustration setting in, I'm putting this issue on hold for now.**\r\n\r\nI hope someone can tell us how to do this properly (other than the overcomplicated kludges). Maybe I'll also find motivation to test the permissions with trusted people in the future.\r\nUntil then, the AppVeyor account will, unfortunately, remain \"JayFoxRox82949\".\r\nI'll give limited permissions on case-by-case basis to that account, as I'm unwilling to provide full access to my GitHub / AppVeyor profile (which could be used to download otherwise private code)."}}
{"actor":{"display_login":"JayFoxRox"}}