monzo / response

Monzo's real-time incident response and reporting tool ⚡️
MIT License
1.52k stars 165 forks source link

Restrict incident creation based on INCIDENT_REPORT_CHANNEL_ID #236

Closed rafaellima closed 2 years ago

rafaellima commented 3 years ago

reason

By default, it is possible to create an incident from any Slack channel. This can create more workload on people responsible for dealing with the incidents because anyone else is able to raise an incident that they then have to triage.

proposed solution

Use the environment variable INCIDENT_REPORT_CHANNEL_ID by only allowing creation of incidents if the current channel is the same as the value in the environment variable. When INCIDENT_REPORT_CHANNEL_ID is not set, it's then possible to create incidents from any channel.