From 0920690816ffc8b569b2fddfd42c42ebdd94bcc2 Mon Sep 17 00:00:00 2001
From: Sacha Al Himdani <sacha@getprobo.com>
Date: Thu, 26 Mar 2026 18:04:59 +0100
Subject: [PATCH] Add ability to disconnect Slack channel from compliance page

Users could connect a Slack channel to their compliance page but had no
way to remove or change the connection afterward. This adds a disconnect
button with a confirmation dialog next to connected Slack channels.

- GraphQL: deleteSlackConnection mutation with resolver
- Frontend: Disconnect button using useMutation with @deleteEdge

Signed-off-by: Sacha Al Himdani <sacha@getprobo.com>
---
 .../CompliancePageSlackSection.tsx            | 64 ++++++++++++++++---
 pkg/server/api/console/v1/schema.graphql      | 16 ++++-
 pkg/server/api/console/v1/v1_resolver.go      | 28 ++++++++
 3 files changed, 99 insertions(+), 9 deletions(-)

diff --git a/apps/console/src/pages/organizations/compliance-page/overview/_components/CompliancePageSlackSection.tsx b/apps/console/src/pages/organizations/compliance-page/overview/_components/CompliancePageSlackSection.tsx
index 76270a85c..37a2fd437 100644
--- a/apps/console/src/pages/organizations/compliance-page/overview/_components/CompliancePageSlackSection.tsx
+++ b/apps/console/src/pages/organizations/compliance-page/overview/_components/CompliancePageSlackSection.tsx
@@ -1,36 +1,76 @@
 import { sprintf } from "@probo/helpers";
 import { useTranslate } from "@probo/i18n";
-import { Badge, Button, Card, Slack } from "@probo/ui";
-import { useFragment } from "react-relay";
+import { Badge, Button, Card, Slack, useConfirm } from "@probo/ui";
+import { useFragment, useMutation } from "react-relay";
 import { graphql } from "relay-runtime";
 
+import type { CompliancePageSlackSectionDeleteMutation } from "#/__generated__/core/CompliancePageSlackSectionDeleteMutation.graphql";
 import type { CompliancePageSlackSectionFragment$key } from "#/__generated__/core/CompliancePageSlackSectionFragment.graphql";
 import { useOrganizationId } from "#/hooks/useOrganizationId";
 
 const fragment = graphql`
   fragment CompliancePageSlackSectionFragment on Organization {
-    compliancePage: trustCenter {
-      canUpdate: permission(action: "core:trust-center:update")
-    }
+    canConnectSlack: permission(action: "core:connector:initiate")
     slackConnections(first: 100) {
+      __id
       edges {
         node {
           id
           channel
           createdAt
+          canDelete: permission(action: "core:connector:delete")
         }
       }
     }
   }
 `;
 
+const deleteMutation = graphql`
+  mutation CompliancePageSlackSectionDeleteMutation(
+    $input: DeleteSlackConnectionInput!
+    $connections: [ID!]!
+  ) {
+    deleteSlackConnection(input: $input) {
+      deletedSlackConnectionId @deleteEdge(connections: $connections)
+    }
+  }
+`;
+
 export function CompliancePageSlackSection(props: { fragmentRef: CompliancePageSlackSectionFragment$key }) {
   const { fragmentRef } = props;
 
   const organizationId = useOrganizationId();
   const { __, dateTimeFormat } = useTranslate();
+  const confirm = useConfirm();
 
   const organization = useFragment<CompliancePageSlackSectionFragment$key>(fragment, fragmentRef);
+  const [deleteSlackConnection] = useMutation<CompliancePageSlackSectionDeleteMutation>(deleteMutation);
+
+  const connectionId = organization.slackConnections.__id;
+
+  const handleDisconnect = (slackConnectionId: string) => {
+    confirm(
+      () =>
+        new Promise<void>((resolve, reject) => {
+          deleteSlackConnection({
+            variables: {
+              connections: [connectionId],
+              input: {
+                slackConnectionId,
+              },
+            },
+            onCompleted: () => resolve(),
+            onError: error => reject(error),
+          });
+        }),
+      {
+        title: __("Disconnect Slack"),
+        message: __("Are you sure you want to disconnect this Slack channel? This action cannot be undone."),
+        label: __("Disconnect"),
+        variant: "danger",
+      },
+    );
+  };
 
   return (
     <div className="space-y-4">
@@ -60,14 +100,22 @@ export function CompliancePageSlackSection(props: { fragmentRef: CompliancePageS
                 )}
               </p>
             </div>
-            <div>
+            <div className="flex items-center gap-2">
               <Badge variant="success" size="md">
                 {__("Connected")}
               </Badge>
+              {slackConnection.canDelete && (
+                <Button
+                  variant="secondary"
+                  onClick={() => handleDisconnect(slackConnection.id)}
+                >
+                  {__("Disconnect")}
+                </Button>
+              )}
             </div>
           </Card>
         ))}
-        {organization.compliancePage?.canUpdate && organization.slackConnections.edges.length === 0 && (
+        {organization.canConnectSlack && organization.slackConnections.edges.length === 0 && (
           <Card
             padded
             className="flex items-center gap-3"
@@ -100,4 +148,4 @@ function getSlackConnectionUrl(organizationId: string): string {
   url.searchParams.append("continue", redirectUrl);
   const finalUrl = url.toString();
   return finalUrl;
-};
+}
diff --git a/pkg/server/api/console/v1/schema.graphql b/pkg/server/api/console/v1/schema.graphql
index 37b38d683..ff87919f7 100644
--- a/pkg/server/api/console/v1/schema.graphql
+++ b/pkg/server/api/console/v1/schema.graphql
@@ -2077,12 +2077,14 @@ type Organization implements Node {
     permission(action: String!): Boolean! @goField(forceResolver: true)
 }
 
-type SlackConnection {
+type SlackConnection implements Node {
     id: ID!
     channel: String
     channelId: String
     createdAt: Datetime!
     updatedAt: Datetime!
+
+    permission(action: String!): Boolean! @goField(forceResolver: true)
 }
 
 type SlackConnectionConnection {
@@ -3944,6 +3946,10 @@ type Mutation {
     deleteCustomDomain(
         input: DeleteCustomDomainInput!
     ): DeleteCustomDomainPayload!
+    # Slack Connection mutations
+    deleteSlackConnection(
+        input: DeleteSlackConnectionInput!
+    ): DeleteSlackConnectionPayload!
 }
 
 # Input Types
@@ -6096,6 +6102,14 @@ type DeleteCustomDomainPayload {
     deletedCustomDomainId: ID!
 }
 
+input DeleteSlackConnectionInput {
+    slackConnectionId: ID!
+}
+
+type DeleteSlackConnectionPayload {
+    deletedSlackConnectionId: ID!
+}
+
 # Electronic Signature
 
 enum ElectronicSignatureStatus
diff --git a/pkg/server/api/console/v1/v1_resolver.go b/pkg/server/api/console/v1/v1_resolver.go
index 865d2e873..58f00d16e 100644
--- a/pkg/server/api/console/v1/v1_resolver.go
+++ b/pkg/server/api/console/v1/v1_resolver.go
@@ -6811,6 +6811,25 @@ func (r *mutationResolver) DeleteCustomDomain(ctx context.Context, input types.D
 	}, nil
 }
 
+// DeleteSlackConnection is the resolver for the deleteSlackConnection field.
+func (r *mutationResolver) DeleteSlackConnection(ctx context.Context, input types.DeleteSlackConnectionInput) (*types.DeleteSlackConnectionPayload, error) {
+	if err := r.authorize(ctx, input.SlackConnectionID, probo.ActionConnectorDelete); err != nil {
+		return nil, err
+	}
+
+	prb := r.ProboService(ctx, input.SlackConnectionID.TenantID())
+
+	err := prb.Connectors.Delete(ctx, input.SlackConnectionID)
+	if err != nil {
+		r.logger.ErrorCtx(ctx, "cannot delete slack connection", log.Error(err))
+		return nil, gqlutils.Internal(ctx)
+	}
+
+	return &types.DeleteSlackConnectionPayload{
+		DeletedSlackConnectionID: input.SlackConnectionID,
+	}, nil
+}
+
 // Organization is the resolver for the organization field.
 func (r *obligationResolver) Organization(ctx context.Context, obj *types.Obligation) (*types.Organization, error) {
 	if err := r.authorize(ctx, obj.ID, probo.ActionOrganizationGet); err != nil {
@@ -8665,6 +8684,10 @@ func (r *riskConnectionResolver) TotalCount(ctx context.Context, obj *types.Risk
 	return 0, gqlutils.Internal(ctx)
 }
 
+// Permission is the resolver for the permission field.
+func (r *slackConnectionResolver) Permission(ctx context.Context, obj *types.SlackConnection, action string) (bool, error) {
+	return r.Resolver.Permission(ctx, obj, action)
+}
 // Organization is the resolver for the organization field.
 func (r *snapshotResolver) Organization(ctx context.Context, obj *types.Snapshot) (*types.Organization, error) {
 	if err := r.authorize(ctx, obj.ID, probo.ActionOrganizationGet); err != nil {
@@ -10599,6 +10622,10 @@ func (r *Resolver) Risk() schema.RiskResolver { return &riskResolver{r} }
 // RiskConnection returns schema.RiskConnectionResolver implementation.
 func (r *Resolver) RiskConnection() schema.RiskConnectionResolver { return &riskConnectionResolver{r} }
 
+// SlackConnection returns schema.SlackConnectionResolver implementation.
+func (r *Resolver) SlackConnection() schema.SlackConnectionResolver {
+	return &slackConnectionResolver{r}
+}
 // Snapshot returns schema.SnapshotResolver implementation.
 func (r *Resolver) Snapshot() schema.SnapshotResolver { return &snapshotResolver{r} }
 
@@ -10781,6 +10808,7 @@ type rightsRequestResolver struct{ *Resolver }
 type rightsRequestConnectionResolver struct{ *Resolver }
 type riskResolver struct{ *Resolver }
 type riskConnectionResolver struct{ *Resolver }
+type slackConnectionResolver struct{ *Resolver }
 type snapshotResolver struct{ *Resolver }
 type snapshotConnectionResolver struct{ *Resolver }
 type stateOfApplicabilityResolver struct{ *Resolver }