Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

slack app asks for too many permissions #30

Open
glensc opened this issue Apr 14, 2020 · 1 comment
Open

slack app asks for too many permissions #30

glensc opened this issue Apr 14, 2020 · 1 comment
Assignees

Comments

@glensc
Copy link

glensc commented Apr 14, 2020

image

well that's too much, especially app able to read content of our public channels of our slack instance.

is there way to grant less permissions? run your own instance for the slack app?


What will Chuck Norris be able to view?

Content and info about you

View information about your identity

Content and info about channels & conversations

View messages and other content in public channels, private channels, direct messages, and group direct messages that Chuck Norris has been added to

View basic information about direct and group direct messages that Chuck Norris has been added to

View basic information about public channels in your workspace

View basic information about private channels that Chuck Norris has been added to

View files shared in channels and conversations that Chuck Norris has been added to

View pinned content in channels and conversations that Chuck Norris has been added to

View messages and files that Chuck Norris has starred

View emoji reactions and their associated content in channels and conversations that Chuck Norris has been added to

Content and info about your workspace

View the name, email domain, and icon for workspaces Chuck Norris is connected to

View people in your workspace

View email addresses of people in your workspace

View user groups in your workspace

View custom emoji in your workspace

View Do Not Disturb settings for people in your workspace

What will Chuck Norris be able to do?

Perform actions in channels & conversations

Start direct and group direct messages with people

Send messages as Chuck Norris

Upload, edit, and delete files as Chuck Norris

Add and remove pinned messages and files

Add or remove stars

Add and edit emoji reactions

Perform actions in your workspace

Add the ability for people to direct message or mention @chuck

Add shortcuts and/or slash commands that people can use

Provide Chuck Norris with a stream of all activity in Slack for the conversations and people it can see

Set presence for Chuck Norris

@matchilling
Copy link
Member

Hi @glensc 👋, Thanks for getting in touch and for raising this issue. I'll review Slack's new permission model and try using a more conservative approach with reduced scope.

Background: when the first version of the app was released some 5 years ago, the offered scope options were rather rudimentary and didn't allow that much granular fine tuning. But as you can see, the code is FOSS, we're doing nothing sneaky anywhere and you certainly can run it in your own environment as well.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants