Check Permission by calling rest /repos/<owner>/<repo> and look at the permission field

[ChristopherHX]

GH

On GitHub Actions this field is only present in authenticated requests to the repo endpoint, otherwise it is missing and I skipped looking into it

  "permissions": {
    "admin": true,
    "maintain": true,
    "push": true,
    "triage": true,
    "pull": true
  },

GT

"permissions":{"admin":false,"push":false,"pull":true}

This allows protecting the rerun button

Also then we can add the following to the webui

• runner management
  • create / delete runner groups
• vars management
• secrets management
• workflow_dispatch
• Configure azure pipelines config locations