Why not to add administrative actions ?

[qamonstir]

James,

I think it will be useful to provide ability for admins to create users, groups using lita. What do you think ?

[yob]

I don't think we'd use features like that ourselves, but I'm not flat against adding them. There's two main reasons I've held off:

1. Security. Having oauth tokens with write permissions floating around makes me much more nervous than tokens that can only read
2. Scale. The range of administrative features we use day to day is broad, so it'd be a lot of work to add them all to this project and my time is limited

[qamonstir]

@yob I cannot promise, but hopefully I can add feature related to creating/deleting users

[yob]

Great!

If you do, can you please include a config option that disables them and ensures only read-only oauth scopes are requested for installations that don't want to make changes with the bot?

Out of interest, have you installed this plugin? So far I haven't heard of anyone but us using it.

[qamonstir]

Ok. Yes, I installed it yesterday. Have not good a chance to play a lot with it though