Skip to content

docs: make hardening channel access section channel-agnostic#32

Merged
Aaronontheweb merged 1 commit into
devfrom
docs/channel-access-restrictions-index
May 19, 2026
Merged

docs: make hardening channel access section channel-agnostic#32
Aaronontheweb merged 1 commit into
devfrom
docs/channel-access-restrictions-index

Conversation

@Aaronontheweb
Copy link
Copy Markdown
Contributor

What

Reworks the channel access section of the Hardening docs so it stops being Slack-prescriptive.

  • Renames ## Slack Channel Restrictions -> ## Channel Access Restrictions.
  • Explains the four access controls (channel allowlist, user allowlist, DMs, per-channel audiences) as channel-agnostic concepts, with the shared restrictive defaults.
  • Drops the duplicated Slack JSON examples. Per-channel setup details (ID formats, where to copy IDs) stay on the channel pages, which already carry full Access control sections.
  • Adds an index table linking to each channel's access control docs (/channels/slack/#access-control, /channels/discord/#access-control), with a maintainer comment to add a row as new channels ship.
  • Notes webhooks are the exception — they authenticate via HMAC signatures, not allowlists.
  • Removes the Slack-specific "Locate your URL or ID" link from Further Reading (that guidance lives on the Slack page).

The netclaw doctor reference stays scoped to Slack — SlackAclDoctorCheck is the only channel ACL check that exists.

Why

The section duplicated content already on the channel pages and read as Slack-only. An index that points to per-channel pages is easier to keep correct as channel support grows.

Closes #26.

Verification

  • npm run build passes (55 pages).

Rename the Slack-specific 'Slack Channel Restrictions' section to
'Channel Access Restrictions'. Explain the four access controls
(channel allowlist, user allowlist, DMs, per-channel audiences) as
channel-agnostic concepts and drop the duplicated Slack JSON examples.

Add an index table linking to each channel's own Access control
section, so per-channel setup details live on the channel pages and
the index grows as new channels ship. Note that webhooks authenticate
via HMAC rather than allowlists, and remove the Slack-specific ID
lookup link from Further Reading.

Closes #26
@Aaronontheweb Aaronontheweb enabled auto-merge (squash) May 19, 2026 02:34
@Aaronontheweb Aaronontheweb merged commit baeec04 into dev May 19, 2026
2 checks passed
@Aaronontheweb Aaronontheweb deleted the docs/channel-access-restrictions-index branch May 19, 2026 02:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

User allowlist docs are too Slack-specific — need to cover Discord and other channels too

1 participant