<p><strong>Presumably nothing.</strong></p>
<p>But there is already an issue which addresses this.</p>
<p><a href="https://gitlab.com/gitlab-org/gitlab/-/issues/407725" rel="nofollow noreferrer">https://gitlab.com/gitlab-org/gitlab/-/issues/407725</a></p>

CC BY-SA 4.0
2024-03-19T16:25:04.537Z
2024-03-19T16:25:04.537Z
Evan Carroll
<p>If I create a Project Access Token, or Personal Access Token (PAT) token with a role of Guest, and a scope such that it can read_repository and write_repository, what can that token actually do? I'm getting a 403 when I try to use it.</p>
<pre><code>$ git clone https://foo:myToken@gitlab.awe.eco.cpanel.net/evancarroll/foo.git
Cloning into 'foo'...
remote: You are not allowed to download code from this project.
fatal: unable to access 'https://acme.net/evancarroll/foo.git/': The requested URL returned error: 403
</code></pre>

<gitlab>
What can a token with a role of Guest or Reporter do when given scopes to read and write the repository?
Evan Carroll
# What can a token with a role of Guest or Reporter do when given scopes to read and write the repository?

(Asked by: username_0 on 2024-03-19)

If I create a Project Access Token, or Personal Access Token (PAT) token with a role of Guest, and a scope such that it can read_repository and write_repository, what can that token actually do? I'm getting a 403 when I try to use it.
$ git clone https://foo:myToken@gitlab.awe.eco.cpanel.net/evancarroll/foo.git
Cloning into 'foo'...
remote: You are not allowed to download code from this project.
fatal: unable to access 'https://acme.net/evancarroll/foo.git/': The requested URL returned error: 403

**Tags:** gitlab


---

## 1 answers

### Answer by username_0 on 2024-03-19. Score: 0 | Accepted answer

**Presumably nothing.**

But there is already an issue which addresses this.

<https://gitlab.com/gitlab-org/gitlab/-/issues/407725>


---

