Feature Request: dormant non-admin repo users should lose access after period of inactivity #176457
Replies: 1 comment
-
|
💬 Your Product Feedback Has Been Submitted 🎉 Thank you for taking the time to share your insights with us! Your feedback is invaluable as we build a better GitHub experience for all our users. Here's what you can expect moving forward ⏩
Where to look to see what's shipping 👀
What you can do in the meantime 💻
As a member of the GitHub community, your participation is essential. While we can't promise that every suggestion will be implemented, we want to emphasize that your feedback is instrumental in guiding our decisions and priorities. Thank you once again for your contribution to making GitHub even better! We're grateful for your ongoing support and collaboration in shaping the future of our platform. ⭐ |
Beta Was this translation helpful? Give feedback.
Uh oh!
There was an error while loading. Please reload this page.
-
Select Topic Area
Product Feedback
Body
There should be a setting so that non-admin users who have performed no repo (or organization) activity for a long time (e.g. 6 months) lose their write access. This is an obvious security issue and has been exploited in the past: search "hackathon" in
https://www.ftc.gov/system/files/ftc_gov/pdf/2023185-drizly-combined-consent.pdf
Manually terminating user access will evoke negative emotions, so people will avoid doing it. Hence why an automated system is key here.
I know there is some enterprise support for dormant user reporting, but given that the security of open source software concerns us all, I believe my suggested feature should be available for all open source repositories.
Beta Was this translation helpful? Give feedback.
All reactions