Remove slack user chat:write scope (#5177)
It was unused & caused customers frustration. DO NOT CONFUSE with bot permission chat:write, it's used & needed.
This commit is contained in:
parent
10b532c688
commit
287bfcc4c7
3 changed files with 1 additions and 8 deletions
|
|
@ -108,12 +108,6 @@ This set of permissions is supporting the ability of Grafana OnCall to match use
|
|||
- **View user groups in your workspace**
|
||||
- **View profile details about people in your workspace**
|
||||
|
||||
### Perform actions as you
|
||||
|
||||
- **Send messages on your behalf** — this permission may sound suspicious, but it's actually a general ability
|
||||
to send messages as the bot: <https://api.slack.com/scopes/chat:write> Grafana OnCall will not impersonate or post
|
||||
using your handle to slack. It will always post as the bot.
|
||||
|
||||
### Perform actions in channels & conversations
|
||||
|
||||
- **View messages that directly mention @grafana_oncall in conversations that the app is in**
|
||||
|
|
|
|||
|
|
@ -122,7 +122,6 @@ oauth_config:
|
|||
scopes:
|
||||
user:
|
||||
- channels:read
|
||||
- chat:write
|
||||
- identify
|
||||
- users.profile:read
|
||||
bot:
|
||||
|
|
|
|||
|
|
@ -9,7 +9,7 @@ from apps.auth_token.models import GoogleOAuth2Token, SlackAuthToken
|
|||
|
||||
# Scopes for slack user token.
|
||||
# It is main purpose - retrieve user data in SlackOAuth2V2 but we are using it in legacy code or weird Slack api cases.
|
||||
USER_SCOPE = ["channels:read", "identify", "chat:write", "users.profile:read", "users:read", "users:read.email"]
|
||||
USER_SCOPE = ["channels:read", "identify", "users.profile:read", "users:read", "users:read.email"]
|
||||
|
||||
# Scopes for slack bot token.
|
||||
# It is prime token we are using for most requests to Slack api.
|
||||
|
|
|
|||
Loading…
Add table
Reference in a new issue