Repository navigation
docs(4838ca3b-09dd-418e-ae65-da2141b5b1b5): Document OAuth connection privacy controls for FGA organizations - #832
claude[bot] wants to merge 9 commits into
Conversation
|
Preview deployment for your docs. Learn more about Mintlify Previews.
💡 Tip: Enable Automations to automatically generate PRs for you. |
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
🎯 Vibe checkReviewed: 1 file (1 with issues, 0 clean) Scores
Score key: 🟢 9–10, 🟡 6–8, 🔴 1–5. ✨ Overall vibe: Solid content that covers the feature thoroughly with a good FAQ — the FGA privacy controls section in particular is well-detailed. Main cleanup needed is the title-case slip in the "Why use" card group, a callout formatting violation, and an unverified 🔧 Issues (8)
🧩 Component suggestions (2)
🏗️ Page structure (1)
|
| Item | Count |
|---|---|
| Files reviewed | 1 |
| Context pages read | 2 |
| Total lines processed | ~615 |
Files read: enterprise/user-level-authentication.mdx (233 lines), enterprise/rbac.mdx (382 lines), enterprise/integration-controls.mdx (42 lines)
… privacy controls for FGA organizations Expand the "Privacy and account visibility" section to cover the new explicit privacy controls available to Fine-Grained Access (FGA) orgs: default-private connections, per-card status labels, the Share with project action, post-connect nudge, and the irreversibility warning. Non-FGA behavior is unchanged and noted explicitly. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
e4e25e1 to
24fd93d
Compare
🎯 Vibe checkReviewed: 1 file (1 with issues, 0 clean) Scores
Score key: 🟢 9–10, 🟡 6–8, 🔴 1–5. ✨ Overall vibe: Solid, thorough page — covers requirements, scope, limitations, and the user flow in good detail. The main cleanup items are mechanical: swap 🔧 Issues (8)
🧩 Component suggestions (2)
🏗️ Page structure (1)
🔋 Credit usage
Files read: |
Privacy labels and the share button render for every org (gated by oauth-connection-sharing-ux-fe at 100%), not just FGA orgs. FGA only controls whether new connections default to private; non-FGA orgs default to shared. Share is a button on the card in the customer layout, and the nudge copy matches the banner variant. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
🎯 Vibe checkReviewed: 1 file (1 with issues, 0 clean) Scores
Score key: 🟢 9–10, 🟡 6–8, 🔴 1–5. ✨ Overall vibe: The content is thorough and well-structured — the step-by-step setup, the embedded demos, and the FAQ are all genuinely useful. The main drag is mechanical consistency: the "Why use" section's card titles all use title case, and "agent/agents" is written lowercase throughout a page that is entirely about the Relevance AI Agent product feature. Fix the caps and anchor link, and this ships cleanly. 🔧 Issues (14)Card title capitalization (sentence case required)
Agent capitalization (product feature = proper noun)
Banned-word-adjacent / fluff
Potentially broken anchor link
🧩 Component suggestions (1)
🏗️ Page structure (2)
✅ Clean files (0)No files were fully clean in this PR. 🔋 Credit usage
Files read: |
- Members do see project-shared connections (visibility filter includes namespace=project); they just can't reconnect or remove ones others connected without the Editor or Admin project role. - Sharing (UpdateOAuthAccountNamespace) requires project editor. - Project Admins see others' private connections on the integrations page and can remove them, but tool/agent pickers filter to the user's own, so "only you can use" rather than "only you can see and use". Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
🎯 Vibe checkReviewed: 1 file (1 with issues, 0 clean) Scores
Score key: 🟢 9–10, 🟡 6–8, 🔴 1–5. ✨ Overall vibe: Solid first draft — the content is thorough, well-scoped, and covers the right scenarios. The main drag is mechanical: five Card titles in title case, a non-standard layout component, and one likely-broken anchor link. Fix those and this will be in good shape. 🔧 Issues (11)
🧩 Component suggestions (4)
🏗️ Page structure (2)
|
| Item | Count |
|---|---|
| Files reviewed | 1 |
| Context pages read | 2 |
| Total lines processed | ~657 |
Files read: site/content/docs/enterprise/user-level-authentication.mdx (233 lines), site/content/docs/enterprise/rbac.mdx (382 lines), site/content/docs/enterprise/integration-controls.mdx (42 lines)
GetOAuthUrl accepts any project role (chat or viewer and up), so connecting isn't tied to dynamic auth being on. Non-editors only see providers enabled via integration controls (ListProviderAccountsData). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
🎯 Vibe checkReviewed: 1 file (1 with issues, 0 clean) Scores
✨ Overall vibe: A well-intentioned page with good use of 🔧 Issues (5)
🧩 Component suggestions (2)
🏗️ Page structure (1)
|
| Item | Count |
|---|---|
| Files reviewed | 1 |
| Context pages read | 2 |
| Total lines processed | ~615 |
Files read: site/content/docs/enterprise/user-level-authentication.mdx (233 lines), site/content/docs/enterprise/rbac.mdx (382 lines), site/content/docs/enterprise/integration-controls.mdx (42 lines)
- The sidebar entry and page header are "Connectors & API Keys" (useMainNav.ts, pages/integrations/[region]/[project]/index.vue). - Private connections can be shared with a single tool (OAuthAccountToolLink via AccountSelector, asset admins only), so they aren't strictly usable by the owner alone, and admins can pick others' private connections in a tool they've been shared with. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
🎯 Vibe checkReviewed: 1 file (1 with issues, 0 clean) Scores
Score key: 🟢 9–10, 🟡 6–8, 🔴 1–5. ✨ Overall vibe: The page is thorough and well-organized — the FAQ is strong, the requirements section clearly separates supported from unsupported, and the first-time auth 🔧 Issues (8)
🧩 Component suggestions (2)
🏗️ Page structure (2)
|
| Item | Count |
|---|---|
| Files reviewed | 1 |
| Context pages read | 2 |
| Total lines processed | ~657 |
Files read: site/content/docs/enterprise/user-level-authentication.mdx (233 lines), site/content/docs/enterprise/rbac.mdx (382 lines), site/content/docs/enterprise/integration-controls.mdx (42 lines)
Only the Connectors drawer (FGA + sharing UX flag) and the tool-step AddAccountModal (FGA) send sharing_permission=user-private. Trigger setup, the Slack relay, error CTAs, signup and native migration send nothing, so the backend default applies: project, unless the org is on the oauth-account-user-controls allowlist. Hence "usually", with the card label as the source of truth. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
- Remove the integration-controls sentence: only the provider-list filter was confirmed, not that it's the list the UI connects from. - "Anyone with access" becomes "you don't need to be an admin". - Shared connections: "see and select", not "use" (Viewers can't run). - Non-FGA and other-path defaults: "may be shared", since the allowlist orgs' FGA status couldn't be confirmed. - Cards live in the integration drawer, so say "when you open an integration". Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
🎯 Vibe checkReviewed: 1 file (1 with issues, 0 clean) Scores
Score key: 🟢 9–10, 🟡 6–8, 🔴 1–5. ✨ Overall vibe: This page covers the feature thoroughly and its logical progression from "what is it" → "why" → "how to set up" → FAQ works well. The main friction is a cluster of title-case violations on the benefit cards and a few component misuses (bold in a 🔧 Issues (9)
🧩 Component suggestions (3)
🏗️ Page structure (1)
|
| Item | Count |
|---|---|
| Files reviewed | 1 |
| Context pages read | 2 |
| Total lines processed | ~657 |
Files read: site/content/docs/enterprise/user-level-authentication.mdx (233 lines), site/content/docs/enterprise/rbac.mdx (382 lines), site/content/docs/enterprise/integration-controls.mdx (42 lines)
Drops the nudge copy and the separate heading. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
🎯 Vibe checkReviewed: 1 file (1 with issues, 0 clean) Scores
Score key: 🟢 9–10, 🟡 6–8, 🔴 1–5. ✨ Overall vibe: This page does solid work — it covers edge cases well (per-tool vs per-integration auth, embedded chat limitation, admin visibility of private connections), the FAQ is comprehensive, and the tone is appropriately technical without being dry. The main drag is mechanical: five Card titles in title case, a non-standard layout component to verify, and a Note that appears to link to the wrong page. 🔧 Issues (8)
🧩 Component suggestions (2)
|
| Item | Count |
|---|---|
| Files reviewed | 1 |
| Context pages read | 2 |
| Total lines processed | ~323 |
Files read: site/content/docs/enterprise/user-level-authentication.mdx (233 lines), site/content/docs/enterprise/rbac.mdx (80 lines, first section), site/content/docs/enterprise/asset-controls.mdx (43 lines)
🎯 Vibe checkReviewed: 1 file (1 with issues, 0 clean) Scores
Score key: 🟢 9–10, 🟡 6–8, 🔴 1–5. ✨ Overall vibe: The content itself is solid — clear requirements, useful gotchas (per-tool vs per-integration auth), and well-structured steps. The issues are almost entirely mechanical: a batch of title-case card titles that didn't get sentence-cased, a component choice that deviates from house style, and one real content gap (the Chat role limitation is called out in rbac.mdx but silently absent from the Limitations section here). 🔧 Issues (9)
🧩 Component suggestions (4)
🏗️ Page structure (2)
|
| Item | Count |
|---|---|
| Files reviewed | 1 |
| Context pages read | 2 |
| Total lines processed | ~654 |
Files read: enterprise/user-level-authentication.mdx (230 lines), enterprise/rbac.mdx (381 lines), enterprise/asset-controls.mdx (43 lines)
Three passages (setup Info block, first-time auth, FAQ) said members can't view shared accounts and that they're admin-managed. Shared accounts are visible to everyone (visibility filter includes namespace=project), and Editors as well as Admins can reconnect or remove ones others connected (CanEditGlobalProjectAccounts = editor). Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
🎯 Vibe checkReviewed: 1 file (1 with issues, 0 clean) Scores
Score key: 🟢 9–10, 🟡 6–8, 🔴 1–5. ✨ Overall vibe: Solid enterprise feature page — well-structured, appropriately thorough, and covers the edge cases that matter (OAuth vs. API key, embedded chat limitation, non-admin access). The main friction is mechanical: five Card titles in title case, a banned bold label inside a 🔧 Issues (6)
🧩 Component suggestions (3)
🏗️ Page structure (2)
|
| Item | Count |
|---|---|
| Files reviewed | 1 |
| Context pages read | 2 |
| Total lines processed | ~613 |
Files read: site/content/docs/enterprise/user-level-authentication.mdx (231 lines), site/content/docs/enterprise/rbac.mdx (382 lines)
Summary
user-level-authentication.mdxwith a new####subsection covering FGA-specific OAuth connection privacy controls<Warning>callout that sharing is permanent and irreversible without removing and reconnectingTest plan
<Warning>callout is a single paragraph with no bullets or bold labelsRelates to: https://linear.app/relevance/issue/4838ca3b-09dd-418e-ae65-da2141b5b1b5/