Answers: <p><strong>Presumably nothing.</strong></p>
  <p>But there is already an issue which addresses this.</p>
  <p><a href="https://gitlab.com/gitlab-org/gitlab/-/issues/407725" rel="nofollow noreferrer">https://gitlab.com/gitlab-org/gitlab/-/issues/407725</a></p>
  
Answers: CC BY-SA 4.0
Answers: 2024-03-19T16:25:04.537Z
Answers: 2024-03-19T16:25:04.537Z
Answers: Evan Carroll
Body: <p>If I create a Project Access Token, or Personal Access Token (PAT) token with a role of Guest, and a scope such that it can read_repository and write_repository, what can that token actually do? I'm getting a 403 when I try to use it.</p>
  <pre><code>$ git clone https://foo:myToken@gitlab.awe.eco.cpanel.net/evancarroll/foo.git
  Cloning into 'foo'...
  remote: You are not allowed to download code from this project.
  fatal: unable to access 'https://acme.net/evancarroll/foo.git/': The requested URL returned error: 403
  </code></pre>
  
Tags: <gitlab>
Title: What can a token with a role of Guest or Reporter do when given scopes to read and write the repository?
UserDisplayName: Evan Carroll
ThreadText: # What can a token with a role of Guest or Reporter do when given scopes to read and write the repository?
  
  (Asked by: username_0 on 2024-03-19)
  
  If I create a Project Access Token, or Personal Access Token (PAT) token with a role of Guest, and a scope such that it can read\_repository and write\_repository, what can that token actually do? I'm getting a 403 when I try to use it.
  
  ```
  $ git clone https://foo:myToken@gitlab.awe.eco.cpanel.net/username_0/foo.git
  Cloning into 'foo'...
  remote: You are not allowed to download code from this project.
  fatal: unable to access 'https://acme.net/username_0/foo.git/': The requested URL returned error: 403
  
  ```
  
  **Tags:** gitlab
  
  
  ---
  
  ## 1 answers
  
  ### Answer by username_0 on 2024-03-19. Score: 0 | Accepted answer
  
  **Presumably nothing.**
  
  But there is already an issue which addresses this.
  
  <https://gitlab.com/gitlab-org/gitlab/-/issues/407725>
  
  
  ---
  
  