Use minimal slack permissions

rtCamp / frappe-slack-connector

Frappe app that integrates the Leave Management module with Slack

GNU Affero General Public License v3.0

3 stars 2 forks source link

Use minimal slack permissions #16

Closed ananyo141 closed 3 weeks ago

ananyo141 commented 1 month ago

Permissions: For now App Tokens related permissions are not required at all (can be disabled entirely without affecting the app) For now Oauth (Bot) Permissions can be removed: channels:manage groups:write groups:read

Also, we can Restrict API Token Usage by providing only the IP Address from which it can be accessed (I think this can be very useful)

ananyo141 commented 1 month ago

Screenshot 2024-09-09 at 8 25 19 PM

ananyo141 commented 3 weeks ago

We are using these for now

channels:history channels:read chat:write commands users:read users:read.email