guides/credentials.md: the minimum Gitea and GitHub permissions are checked per API call against the Gitea source (routers/api/v1/api.go, main branch) and the GitHub page "Permissions required for fine-grained personal access tokens":
Gitea: read:repository, and the user must be an administrator of the repository (the push_mirrors routes use reqAdmin());
GitHub: Administration: Read and write (PATCH and PUT .../topics), with Metadata: Read automatic for GET;
wiki token: write:repository and write access to the wiki unit.
The guide now says S01, standing in for S05, approved them on 2026-10-10. It also says plainly that they are not tested on this instance with a token that holds only these permissions; the checklist stays as an optional test.
Target dates
MIL-001 to MIL-006: the date marked "proposed; to be confirmed by S01 and S05" is now confirmed (S01 standing in for S05); each milestone has a new version row and a review record (RC-026 to RC-031, QC-MIL-001, Go).
PP-001: Purpose and Planning Assumptions say the dates were confirmed, and the confirmation item is removed from Open Issues (RC-032, Go).
TM-001 lists RC-026 to RC-032; the registry's next RC is 033.
Wiki pages changed (rule 8)
English: Credentials. Danish and Bahasa Malaysia: Credentials (retranslated). Tests: 156 passed.
Not approved
RC-003's manual run for a repository without a mirror (no run of the current code exists there).
The S03 items of RC-014 and RC-016.
Review status
Every review here is by S01, standing in as ADR-0002 records; there is no independent reader.
Records S01's approvals in place of S05 (ADR-0002) for the token permissions and the target dates. Documents and the Credentials wiki page only.
## Token permissions (MIL-002 task 4, issue #11)
- `guides/credentials.md`: the minimum Gitea and GitHub permissions are checked per API call against the Gitea source (`routers/api/v1/api.go`, `main` branch) and the GitHub page "Permissions required for fine-grained personal access tokens":
- Gitea: `read:repository`, and the user must be an administrator of the repository (the `push_mirrors` routes use `reqAdmin()`);
- GitHub: `Administration: Read and write` (`PATCH` and `PUT .../topics`), with `Metadata: Read` automatic for `GET`;
- wiki token: `write:repository` and write access to the wiki unit.
- The guide now says S01, standing in for S05, approved them on 2026-10-10. It also says plainly that they are **not tested on this instance with a token that holds only these permissions**; the checklist stays as an optional test.
## Target dates
- MIL-001 to MIL-006: the date marked "proposed; to be confirmed by S01 and S05" is now confirmed (S01 standing in for S05); each milestone has a new version row and a review record (RC-026 to RC-031, QC-MIL-001, Go).
- PP-001: Purpose and Planning Assumptions say the dates were confirmed, and the confirmation item is removed from Open Issues (RC-032, Go).
- TM-001 lists RC-026 to RC-032; the registry's next RC is 033.
## Wiki pages changed (rule 8)
English: Credentials. Danish and Bahasa Malaysia: Credentials (retranslated). Tests: 156 passed.
## Not approved
- RC-003's manual run for a repository without a mirror (no run of the current code exists there).
- The S03 items of RC-014 and RC-016.
## Review status
Every review here is by S01, standing in as ADR-0002 records; there is no independent reader.
Refs #11
S01, standing in for S05 (ADR-0002), approves the minimum Gitea and GitHub
token permissions, recorded with the evidence from the Gitea source and the
GitHub documentation; they are still not tested with a minimal token on the
instance. Confirm the target dates of MIL-001 to MIL-006 and PP-001 (RC-026
to RC-032), update TM-001 and regenerate the Credentials wiki page with its
translations.
Task: MIL-002#4
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Records S01's approvals in place of S05 (ADR-0002) for the token permissions and the target dates. Documents and the Credentials wiki page only.
Token permissions (MIL-002 task 4, issue #11)
guides/credentials.md: the minimum Gitea and GitHub permissions are checked per API call against the Gitea source (routers/api/v1/api.go,mainbranch) and the GitHub page "Permissions required for fine-grained personal access tokens":read:repository, and the user must be an administrator of the repository (thepush_mirrorsroutes usereqAdmin());Administration: Read and write(PATCHandPUT .../topics), withMetadata: Readautomatic forGET;write:repositoryand write access to the wiki unit.Target dates
Wiki pages changed (rule 8)
English: Credentials. Danish and Bahasa Malaysia: Credentials (retranslated). Tests: 156 passed.
Not approved
Review status
Every review here is by S01, standing in as ADR-0002 records; there is no independent reader.
Refs #11