chucknorris-io / chuck-api

👊 chucknorris.io is a free resource for hand curated Chuck Norris facts.
https://api.chucknorris.io
GNU General Public License v3.0
240 stars 29 forks source link

slack app asks for too many permissions #30

Open glensc opened 4 years ago

glensc commented 4 years ago

image

well that's too much, especially app able to read content of our public channels of our slack instance.

is there way to grant less permissions? run your own instance for the slack app?


What will Chuck Norris be able to view?

Content and info about you

View information about your identity

Content and info about channels & conversations

View messages and other content in public channels, private channels, direct messages, and group direct messages that Chuck Norris has been added to

View basic information about direct and group direct messages that Chuck Norris has been added to

View basic information about public channels in your workspace

View basic information about private channels that Chuck Norris has been added to

View files shared in channels and conversations that Chuck Norris has been added to

View pinned content in channels and conversations that Chuck Norris has been added to

View messages and files that Chuck Norris has starred

View emoji reactions and their associated content in channels and conversations that Chuck Norris has been added to

Content and info about your workspace

View the name, email domain, and icon for workspaces Chuck Norris is connected to

View people in your workspace

View email addresses of people in your workspace

View user groups in your workspace

View custom emoji in your workspace

View Do Not Disturb settings for people in your workspace

What will Chuck Norris be able to do?

Perform actions in channels & conversations

Start direct and group direct messages with people

Send messages as Chuck Norris

Upload, edit, and delete files as Chuck Norris

Add and remove pinned messages and files

Add or remove stars

Add and edit emoji reactions

Perform actions in your workspace

Add the ability for people to direct message or mention @chuck

Add shortcuts and/or slash commands that people can use

Provide Chuck Norris with a stream of all activity in Slack for the conversations and people it can see

Set presence for Chuck Norris

matchilling commented 4 years ago

Hi @glensc 👋, Thanks for getting in touch and for raising this issue. I'll review Slack's new permission model and try using a more conservative approach with reduced scope.

Background: when the first version of the app was released some 5 years ago, the offered scope options were rather rudimentary and didn't allow that much granular fine tuning. But as you can see, the code is FOSS, we're doing nothing sneaky anywhere and you certainly can run it in your own environment as well.