feedback

Author: msukkari

CHANGELOG.md

@@ -9,7 +9,7 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### Changed
 - Fixed typos in UI, docs, code [#369](https://github.com/sourcebot-dev/sourcebot/pull/369)
-- Add anonymous access option to core [#385](https://github.com/sourcebot-dev/sourcebot/pull/385)
+- Add anonymous access option to core and deprecate the `enablePublicAccess` config setting. [#385](https://github.com/sourcebot-dev/sourcebot/pull/385)
 
 ## [4.5.1] - 2025-07-14
 

docs/docs/configuration/auth/access-settings.mdx

@@ -13,6 +13,8 @@ By default, your Sourcebot deployment is gated with a login page. If you'd like
 
 This can be enabled by navigating to **Settings -> Access** or by setting the `FORCE_ENABLE_ANONYMOUS_ACCESS` environment variable.
 
+When accessing Sourcebot anonymously, a user's permissions are limited to that of the  [Guest](/docs/configuration/auth/roles-and-permissions) role.
+
 # Member Approval 
 
 By default, Sourcebot requires new members to be approved by the owner of the deployment. This section explains how approvals work and how

docs/docs/configuration/auth/roles-and-permissions.mdx

@@ -10,4 +10,5 @@ Each member has a role which defines their permissions within an organization:
 | Role | Permission |
 | :--- | :--------- |
 | `Owner` | Each organization has a single `Owner`. This user has full access rights, including: connection management, organization management, and inviting new members. |
-| `Member` | Read-only access to the organization. A `Member` can search across the repos indexed by an organization's connections, but may not manage the organization or its connections. |
+| `Member` | Read-only access to the organization. A `Member` can search across the repos indexed by an organization's connections, as well as view the organizations configuration and member list. However, they cannot modify this configuration or invite new members. |
+| `Guest` | When accessing Sourcebot [anonymously](/docs/configuration/auth/access-settings#anonymous-access), a user has the `Guest` role. `Guest`'s can search across repos indexed by an organization's connections, but cannot view any information regarding the organizations configuration or members. |

packages/web/src/actions.ts

@@ -37,7 +37,7 @@ import JoinRequestApprovedEmail from "./emails/joinRequestApprovedEmail";
 import { createLogger } from "@sourcebot/logger";
 import { getAuditService } from "@/ee/features/audit/factory";
 import { addUserToOrganization, orgHasAvailability } from "@/lib/authUtils";
-import { getOrgMetadata } from "@/types";
+import { getOrgMetadata } from "@/lib/utils";
 import { getOrgFromDomain } from "./data/org";
 
 const ajv = new Ajv({

packages/web/src/app/[domain]/components/submitJoinRequest.tsx

@@ -27,7 +27,7 @@ export const SubmitJoinRequest = async ({ domain }: SubmitJoinRequestProps) => {
                     />
 
                     <div className="space-y-6">
-                        <div className="w-12 h-12 mx-auto bg-[var(--primary)] rounded-full flex items-center justify-center">
+                        <div className="w-12 h-12 mx-auto bg-primary rounded-full flex items-center justify-center">
                             <svg className="w-6 h-6 text-[var(--primary-foreground)]" fill="none" stroke="currentColor" viewBox="0 0 24 24">
                                 <path strokeLinecap="round" strokeLinejoin="round" strokeWidth={1.5} d="M18 9v3m0 0v3m0-3h3m-3 0h-3m-2-5a4 4 0 11-8 0 4 4 0 018 0zM3 20a6 6 0 0112 0v1H3v-1z" />
                             </svg>

packages/web/src/app/[domain]/settings/access/page.tsx

@@ -22,7 +22,7 @@ export default async function AccessPage({ params: { domain } }: AccessPageProps
                         href="https://docs.sourcebot.dev/docs/configuration/auth/access-settings"
                         target="_blank"
                         rel="noopener"
-                        className="underline text-[var(--primary)] hover:text-[var(--primary)]/80 transition-colors"
+                        className="underline text-primary hover:text-primary/80 transition-colors"
                     >
                         Learn more
                     </a>

packages/web/src/app/components/anonymousAccessToggle.tsx

@@ -83,7 +83,7 @@ export function AnonymousAccessToggle({ hasAnonymousAccessEntitlement, anonymous
                                             href="https://www.sourcebot.dev/contact"
                                             target="_blank"
                                             rel="noopener"
-                                            className="font-medium text-[var(--primary)] hover:text-[var(--primary)]/80 underline underline-offset-2 transition-colors"
+                                            className="font-medium text-primary hover:text-primary/80 underline underline-offset-2 transition-colors"
                                         >
                                             reach out
                                         </a>

packages/web/src/app/components/joinOrganizationButton.tsx

@@ -46,7 +46,7 @@ export function JoinOrganizationButton({ inviteLinkId }: { inviteLinkId?: string
         <Button 
             onClick={handleJoinOrganization}
             disabled={isLoading}
-            className="w-full h-11 bg-[var(--primary)] hover:bg-[var(--primary)]/90 text-[var(--primary-foreground)] transition-all duration-200 font-medium"
+            className="w-full h-11 bg-primary hover:bg-primary/90 text-[var(--primary-foreground)] transition-all duration-200 font-medium"
         >
             {isLoading && <Loader2 className="w-4 h-4 mr-2 animate-spin" />}
             Join Organization

packages/web/src/app/components/organizationAccessSettings.tsx

@@ -2,7 +2,7 @@ import { createInviteLink, getBaseUrl } from "@/lib/utils"
 import { AnonymousAccessToggle } from "./anonymousAccessToggle"
 import { OrganizationAccessSettingsWrapper } from "./organizationAccessSettingsWrapper"
 import { getOrgFromDomain } from "@/data/org"
-import { getOrgMetadata } from "@/types"
+import { getOrgMetadata } from "@/lib/utils"
 import { headers } from "next/headers"
 import { SINGLE_TENANT_ORG_DOMAIN } from "@/lib/constants"
 import { hasEntitlement } from "@sourcebot/shared"

packages/web/src/app/login/components/credentialsForm.tsx

@@ -77,7 +77,6 @@ export const CredentialsForm = ({ callbackUrl, context }: CredentialsFormProps)
                 <Button
                     type="submit"
                     className="w-full"
-                    variant="outline"
                     disabled={isLoading}
                 >
                     {isLoading ? <Loader2 className="animate-spin mr-2" /> : ""}