Request export without full API access

I’m trying to write a bash script to export my gitlab project using curl. I’ve created an access token with the following permissions:
read_user, read_api, read_repository, read_registry

But when I try requesting an export using
curl --request POST --header “PRIVATE-TOKEN: MY_TOKEN” “https://gitlab.com/api/v4/projects/MY_PROJECT_ID/export

I receive the following error:
{“error”:“insufficient_scope”,“error_description”:“The request requires higher privileges than provided by the access token.”,“scope”:“api read_api”}

When I try it with a token with full API access it works fine. Now my question is - does the export feature only work with full API access? I’d prefer to only have reading permissions on it for security reasons. Thanks in advance

3 Likes

Same thing for us. I would really like to know what it needs to full access for.

Any news on this request ? What is (are) the scopes that can export a project ? If only full API access, can we request a more specific role to limit the risks ?

I would also like to know why “git clone” and “git remote update” require full API write access? I would really like to use something read-only, since I literally do not want to modify anything. Just want to clone and update that clone.