docs: document admin-only ban/unban/blocked commands and ENV

[dosubot]

Update documentation for #3222

Updated the permissions documentation to include additional admin-only sensitive commands: /ban, /unban, and /blocked. It also added a new BLOCKED_USER_IDS ENV setting to define blocked users, noting they cannot be unbanned via /unban and that admins are never blocked.

Generated by Dosu

Summary by Sourcery

Documentation:

• Update chatops permissions documentation to include ban/unban/blocked admin commands and the BLOCKED_USER_IDS configuration for environment-level user blocking.

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

Updates the permissions documentation to mark /ban, /unban, and /blocked as admin-only commands and documents the new BLOCKED_USER_IDS environment variable semantics for blocked users.

Flow diagram for admin-only ban/unban/blocked commands and BLOCKED_USER_IDS ENV

flowchart TD
Admin[Admin user] -->|/ban| BotCheckAdmin[Check ADMIN_USER_IDS]
BotCheckAdmin -->|is admin| BanUser[Apply ban to target user]
Admin -->|/unban| UnbanRequest[Request unban for target user]
UnbanRequest --> UnbanCheckBlockedEnv[Check BLOCKED_USER_IDS]
UnbanCheckBlockedEnv -->|user in BLOCKED_USER_IDS| UnbanDenied[Unban denied]
UnbanCheckBlockedEnv -->|user not in BLOCKED_USER_IDS| UnbanApplied[Remove ban]
AnyUser[Any user] -->|/blocked| BlockedCommand[Show blocked users]
subgraph EnvConfig[ENV configuration]
ADMIN[ADMIN_USER_IDS]
BLOCKED[BLOCKED_USER_IDS]
end
ADMIN --> BotCheckAdmin
BLOCKED --> UnbanCheckBlockedEnv
note1[Admins are never blocked] --> Admin

Loading

File-Level Changes

Change	Details	Files
Expanded permissions documentation to include new admin-only commands and the new BLOCKED_USER_IDS environment configuration for blocked users.	Extended the list of sensitive admin-only commands to include /ban, /unban, and /blocked. Documented the BLOCKED_USER_IDS environment variable for defining blocked users. Clarified that BLOCKED_USER_IDS users cannot be unbanned via /unban and that admins are never blocked via this mechanism.	docs/chatops/permissions.md

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[github-actions]

🧯 Dangerous deletes guard report

Policy: see .cursorrules — dangerous deletions are blocked unless wrapped safely.

Summary:

• Flagged findings (blocking): 0
  0
• Excluded matches (not blocking): 15
• Total matches (all files): 129

Flagged findings (file:line:snippet):
(none)

Excluded matches (by path pattern)

./webapp/static/js/md_preview.bundle.js.map:4: "sourcesContent": ["// Markdown-it plugin to render GitHub-style task lists; see\n//\n// https://github.com/blog/1375-task-lists-in-gfm-issues-pulls-comments\n// https://github.com/blog/1825-t … [truncated]
./README.md:842:find . -name "__pycache__" -exec rm -rf {} +
./docs/DOCUMENTATION_GUIDE.md:453:rm -rf _build
./docs/Makefile:24:	rm -rf $(BUILDDIR)
./Dockerfile:42: rm -rf /var/lib/apt/lists/*
./Dockerfile:121: rm -rf /var/lib/apt/lists/*
./node_modules/katex/src/fonts/Makefile:139:	rm -rf pfa ff otf ttf woff woff2
./node_modules/katex/package.json:153: "build": "rimraf dist/ && mkdirp dist && cp README.md dist && rollup -c --failAfterWarnings && webpack && node update-sri.js package dist/README.md",
./node_modules/mermaid/dist/mermaid.js.map:4: "sourcesContent": ["/**\n* Default values for dimensions\n*/\nconst defaultIconDimensions = Object.freeze({\n\tleft: 0,\n\ttop: 0,\n\twidth: 16,\n\theight: 16\n});\n/**\n* Default values for tr … [truncated]
./node_modules/mermaid/dist/mermaid.min.js:1524:`,"getStyles"),c1e=RQe});var h1e={};dr(h1e,{diagram:()=>NQe});var NQe,f1e=N(()=>{"use strict";$ge();a1e();l1e();u1e();NQe={parser:Fge,db:n1e,renderer:o1e,styles:c1e}});var m1e,g1e=N(()=>{"use … [truncated]
./node_modules/mermaid/dist/chunks/mermaid.esm/chunk-2M32CCKP.mjs.map:4: "sourcesContent": ["{\n \"name\": \"mermaid\",\n \"version\": \"11.12.0\",\n \"description\": \"Markdown-ish syntax for generating flowcharts, mindmaps, sequence d … [truncated]
./node_modules/mermaid/dist/chunks/mermaid.core/chunk-KS23V3DP.mjs.map:4: "sourcesContent": ["{\n \"name\": \"mermaid\",\n \"version\": \"11.12.0\",\n \"description\": \"Markdown-ish syntax for generating flowcharts, mindmaps, sequence … [truncated]
./node_modules/mermaid/dist/chunks/mermaid.esm.min/chunk-4HFYJGYH.mjs.map:4: "sourcesContent": ["{\n \"name\": \"mermaid\",\n \"version\": \"11.12.0\",\n \"description\": \"Markdown-ish syntax for generating flowcharts, mindmaps, sequen … [truncated]
./node_modules/mermaid/dist/chunks/mermaid.esm.min/chunk-4HFYJGYH.mjs:1:var r={name:"mermaid",version:"11.12.0",description:"Markdown-ish syntax for generating flowcharts, mindmaps, sequence diagrams, class diagrams, gantt charts, git graph … [truncated]
./node_modules/mermaid/dist/mermaid.min.js.map:4: "sourcesContent": ["/**\n* Default values for dimensions\n*/\nconst defaultIconDimensions = Object.freeze({\n\tleft: 0,\n\ttop: 0,\n\twidth: 16,\n\theight: 16\n});\n/**\n* Default values fo … [truncated]

[sourcery-ai]

Hey - I've found 1 issue, and left some high level feedback:

• Consider clarifying how BLOCKED_USER_IDS interacts with ADMIN_USER_IDS (e.g., explicit precedence rules) to avoid ambiguity when a user ID appears in both lists.

Prompt for AI Agents

Please address the comments from this code review:
## Overall Comments- Consider clarifying how `BLOCKED_USER_IDS` interacts with `ADMIN_USER_IDS` (e.g., explicit precedence rules) to avoid ambiguity when a user ID appears in both lists.
## Individual Comments### Comment 1
<locationpath="docs/chatops/permissions.md"line_range="8" />
<code_context>
- הגדרת אדמינים ב-ENV: `ADMIN_USER_IDS="123,456"`- הגבלת צ'אטים: `ALLOWED_CHAT_IDS="-100123,-100456"`- קירור לפקודות רגישות: `SENSITIVE_COMMAND_COOLDOWN_SEC` (ברירת מחדל: 5 שניות)
+- משתמשים חסומים ברמת ENV: `BLOCKED_USER_IDS="123,456"` (לא ניתן לשחרור דרך `/unban`, אדמינים לעולם לא נחסמים)
</code_context>
<issue_to_address>
**issue (typo):** Consider correcting the phrase "לא ניתן לשחרור" to a more grammatically accurate form.
Because the subject "משתמשים חסומים" is plural, please adjust the phrase to a grammatically consistent form such as "לא ניתנים לשחרור" or rephrase to the infinitive "לא ניתן לשחרר" for smoother reading.
</issue_to_address>

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

_{Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.}

[github-actions]

⏱️ Performance report

• Run: https://github.com/amirbiron/CodeBot/actions/runs/31773973115
• Artifact: perf-durations

(No performance test durations collected. Mark tests with @pytest.mark.performance.)

[github-actions]

📖 Documentation Preview

The documentation has been built successfully!

• 📦 Download Documentation Artifacts
• 🔍 Check the workflow summary for coverage report
• 📊 Build completed at: Fri, 14 Aug 2026 05:46:56 GMT

To view locally:

1. Download the artifacts
2. Extract the zip file
3. Open index.html in your browser

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

[amirbiron]

Thanks