Can I give read-only access to a private repo (from a developer account)?

[richfromm]

+1 for this as a feature request.

I assumed this was possible, but couldn't figure out how to do it, and ended up here after googling and now learning that it's not possible.

Not being able to differentiate read-only vs. read/write access when selectively sharing something private seems to me to be somewhat of a departure from the common practice of other web services.

[nlacombe42]

+1 to read only access rights for a private repo

[adaley222]

+1. Useful feature for sharing in interviews and with potential collaborators.

[sfindeisen]

Dear GH Team

Any plans to implement private repo access restriction for collaborators to read-only + pull-request? I want collaborators on my private (user) repo(s) put don't want to allow them direct push... Where is this feature on your roadmap?

Thanks
Stanisław

[nadiajoyce]

Hi @sfindeisen,

Thanks for this feedback! We're always working to improve GitHub, and we consider every suggestion we receive. I've logged your feature request in our internal feature request list. Though I can't guarantee anything or share a timeline for this, I can tell you that it's been shared with the appropriate teams for consideration.

Cheers!

[epodox]

+ 1 

Having more granular control on private repos for individual users is a must. Sure if they can read it they should be able to clone/fork but i want to disable specific users ability to push with out a propper pull request. Same with branching. Really should be able to have same functionallity as public for private, just we control the viewers.

Thank you,

Joshua Dooley

[Misiu]

Hi there,

any updates on this?

I have the same requirement as others that reply to this topic.

I want to add users to my private repo, but I want them to contribute only using PR, not by committing directly.

I'm sure that not only I have such a requirement.

This feature request is from ‎12-11-2017, so it is taking forever 😥

[that-pat]

Hi @Misiu,

You should be able to use branch protection and codeowner rules to accomplish the goal of preventing users from committing without a pull request. Does this accomplish what you're looking for?

Thanks!

[WaleedMortaja]

Using protected branch ( especially for master) will give you some options, such as requesting members with write permission review to the changes before merging. You can also enforce the need for owner review. I did not tried protected branches with private reops before but I think it would be the same as the public repos.

[Septdir]

@WaleedMortajaThis is not exactly what you need.

+ 1 it would be nice to have possibly give a look at the private private repository.