While doing the rewrite of my action today, I stumbled upon a new way to give permissions to action tokens. We had the issue that people who don't have write access to our repo (so those who came from forks) didn't generate tokens with write access to the pull request. This resulted in my action failing with the Resource not accessible by integration error, see Poolitzer/pull/2 or the actual errror https://github.com/Poolitzer/python-telegram-bot/runs/6211635584?check_suite_focus=true or https://github.com/python-telegram-bot/python-telegram-bot/runs/6189881374?check_suite_focus=true.

This was unfixable without exposing a token to the public. But with this new setting, we are all good \o/. See Poolitzer#3.

I see no downside to this change.