# Netlify GitHub App permission updates with collaborative Deploy Previews

**URL:** <https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872>\
**Category:** Updates\
**Tags:** git, updates\
**Created:** [May 19, 2021, 4:17pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872 "2021-05-19T16:17:59Z")\
**Posts on this page:** 20\
**Page:** 1

<div class="post-metadata">

**Author:** ![keiko](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/keiko/32/1977_2.png) [@keiko](https://answers.netlify.com/u/keiko)\
**Post date:** [May 19, 2021, 4:17pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/1 "2021-05-19T16:17:59Z")

</div>

Have you received the email with the title “[GitHub] Netlify is requesting updated permissions” and wondered what it’s about? If so, this post is for you!

If you have Netlify’s GitHub App installed on your GitHub account (which is usually true if you have deployed any sites to Netlify with GitHub previously), you received this email due to the permission changes we made for the new collaborative Deploy Previews feature.

(for more information on collaborative deploy previews, please see this post:  
[Introducing new collaborative Deploy Previews!](https://answers.netlify.com/t/introducing-new-collaborative-deploy-previews/37873))

With Netlify’s new collaborative Deploy Previews feature, we are now subscribing to events from GitHub activity to be able to display them in the Netlify Drawer. This keeps the activity between Netlify and GitHub in sync and in real-time.

Additionally, it allows your Netlify team to be able to create new GitHub issues from the Drawer as they review Deploy Previews.

Updating the permissions does not give us write access to your repo, or make any private information publicly available. Nothing changes as far as any other Git or GitHub settings go.

You can learn more about this new feature in [here](https://www.netlify.com/products/deploy-previews/).

👷‍♂️ **May I choose to opt-out for this permission change?**

Yes, you may. You can keep using Netlify and deploy sites with GitHub. However, you’ll be missing out on some features of collaborative Deploy Previews, such as real-time sync. You may still use collaborative Deploy Previews with limited features.

Please feel free to ask any questions you may have in the threads.

---

<div class="post-metadata">

**Author:** ![perry](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/perry/32/16_2.png) [@perry](https://answers.netlify.com/u/perry)\
**Post date:** [May 19, 2021, 4:26pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/2 "2021-05-19T16:26:07Z")

</div>



---

<div class="post-metadata">

**Author:** ![amussap](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/amussap/32/14544_2.png) [@amussap](https://answers.netlify.com/u/amussap)\
**Post date:** [May 20, 2021, 8:56am UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/3 "2021-05-20T08:56:35Z")

</div>

Hi @keiko

I’ve read the announcement ‘[Next generation of Deploy Previews](https://www.netlify.com/blog/2021/05/19/next-generation-deploy-previews-plus-netlify-acquires-featurepeek/)’, and the new feature looks very interesting so I’m thinking about giving it a try, but I was wondering, what if for any reason it doesn’t work for me and my team, how could I **disable** it in the feature if I don’t want to use it anymore?

Thanks  
Andrea

---

<div class="post-metadata">

**Author:** ![Scott](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/scott/32/26136_2.png) [@Scott](https://answers.netlify.com/u/Scott)\
**Post date:** [May 20, 2021, 3:00pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/4 "2021-05-20T15:00:24Z")

</div>

Hey @amussap,

I’m glad you found the launch interesting! Rather than disable the feature, there are ways to **avoid** the feature, if you so wish.

Rather than sharing deploy preview URLs – such as `https://deploy-preview-8--yoursitename.netlify.app` – you could share commit URLs – such as `https://f07cdc10ad44cf00088db11d--yoursitename.netlify.app`.

The numbered deploy preview URLs contain all of our new collaborative deploy preview tools whereas the status commit URLs do not contain any of this iterative goodness. Both URLs can be found on a particular deploy’s overview.

 ![Deploy_details___www](https://global.discourse-cdn.com/netlify/original/3X/1/3/130469b72786e8169883b748407f7d4234ef1057.png)

---

<div class="post-metadata">

**Author:** ![ianjmacintosh](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/ianjmacintosh/32/15283_2.png) [@ianjmacintosh](https://answers.netlify.com/u/ianjmacintosh)\
**Post date:** [May 20, 2021, 7:38pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/5 "2021-05-20T19:38:53Z")

</div>

Thanks @Scott … my CI pipeline uses the deploy preview URLs, but that’s good to know I could switch my URL to use the commit hash instead. I didn’t know that was an option.

I’m a wolf-pack of one for a lot of my projects hosted on Netlify, so the “collaborative” feature doesn’t give me much value. And the extra assets are messing around with my Lighthouse checks. Is there no other way to opt out of featurepeek/collaborative deploy preview?

---

<div class="post-metadata">

**Author:** ![amussap](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/amussap/32/14544_2.png) [@amussap](https://answers.netlify.com/u/amussap)\
**Post date:** [May 21, 2021, 9:09am UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/6 "2021-05-21T09:09:41Z")

</div>

Thank you, @Scott  
but I think it’s not that simple. We’ve configured our project to add the deploy preview link as a **comment** on PRs. So, I don’t think I can choose which URL to share in this comment. Moreover, I really want to share the deploy preview of the pull request, not of specific commits. So, I’m watching this thread to see what’s the answer for the two people whos already asked how to disable this feature, in case you want to.

Just one more thing - I thought that the feature would only be enabled **if** , or **after** , I updated the GitHub app permissions. However, I didn’t click to update this permissions, and I can see the new collaborative deploy preview already available in my pull requests… 🤔

---

<div class="post-metadata">

**Author:** ![Scott](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/scott/32/26136_2.png) [@Scott](https://answers.netlify.com/u/Scott)\
**Post date:** [May 21, 2021, 9:41am UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/7 "2021-05-21T09:41:00Z")

</div>

Hey both,

Appreciate the feedback!

We felt that there were adequate solutions and alternatives when determining _how_ collaborative deploy previews should look. But rest assured, we’ll take your feedback on board!

As for enabling the feature/permissions – I believe this perms change only actually relates to providing real-time data and not the implementation of CDP as a whole.

One (admittedly drastic) workaround to inhibit the drawer would be to remove the `<body>` elements from your HTML. Perhaps, as part of your workflow for deploy previews, you could create a [build plugin](https://docs.netlify.com/configure-builds/build-plugins/create-plugins/) that parses your files for this element and removes it. Similarly, CSPs for deploy previews have been discussed in the [other, directly related thread](https://answers.netlify.com/t/introducing-new-collaborative-deploy-previews/37873/8) so you may be able to inhibit the drawer this way.

---

<div class="post-metadata">

**Author:** ![addyosmani](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/addyosmani/32/25939_2.png) [@addyosmani](https://answers.netlify.com/u/addyosmani)\
**Post date:** [May 27, 2021, 11:26pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/8 "2021-05-27T23:26:11Z")

</div>

Hey folks. First off, I love Netlify.

I work on the Google Chrome team and manage projects like Lighthouse. I recently started seeing large regressions in performance for PRs using deploy preview URLs and was surprised to see that this was caused by the new Drawer feature. I don’t believe I’m in the minority of folks relying on Deploy Preview URLs for performance testing in CI and think at minimum, there **has** to be a way made available to disable this feature.

I totally get why it’s enabled by default (discovery), but users should have the ability to turn it off in they would rather not rewrite their CI pipelines to rely on commit URLs just to workaround this feature. Please consider giving us some control over this as a semi-clean testing environment is a must for CI performance tests…

Cheers,  
Addy

---

<div class="post-metadata">

**Author:** ![Scott](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/scott/32/26136_2.png) [@Scott](https://answers.netlify.com/u/Scott)\
**Post date:** [May 28, 2021, 9:53am UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/9 "2021-05-28T09:53:42Z")

</div>

Hey, @addyosmani! Great to hear from you. I’ve passed this over to our CDP team and we’ll loop back as soon as possible.

---

<div class="post-metadata">

**Author:** ![robhawkes](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/robhawkes/32/6246_2.png) [@robhawkes](https://answers.netlify.com/u/robhawkes)\
**Post date:** [May 28, 2021, 10:43am UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/10 "2021-05-28T10:43:07Z")

</div>

@addyosmani touches on a point that’s been bothering me since the release of the new Netlify Drawer in the deploy previews:

> […] at minimum, there **has** to be a way made available to disable this feature

My concern isn’t even about performance; it’s purely down to the fact that I didn’t ask for this feature to appear on my deploy previews. And regardless of that it just adds UI cruft and looks out of place. It also forces me to allow for feedback when sharing a deploy preview link, which isn’t always desired.

Fundamentally, it feels rather dodgy to me that a script / iframe is being automatically injected into my sites considering I gave zero permission for it to do so and in many cases don’t require its functionality.

As Addy mentions, I get that you would want to enable this by default (so people can try it out) but the inability to disable it and **fully** turn it off doesn’t sit right with me.

To put it another way; this feels like a move in the wrong direction and it has genuinely made me more cautious about using Netlify as, aside from the whole forced injection thing, I feel like it is the start of sleep-walking into a Netlify way of doing things that I have less control over.

The reason why I love using Netlify is that it gives me super powers and makes my development experience so much easier, and it does this **without getting in the way**. This new drawer and feedback system absolutely gets in the way and I have no choice about it.

---

<div class="post-metadata">

**Author:** ![thescientist13](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/thescientist13/32/2362_2.png) [@thescientist13](https://answers.netlify.com/u/thescientist13)\
**Post date:** [May 28, 2021, 5:22pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/11 "2021-05-28T17:22:46Z")

</div>

Just also wanted to chime in here as well, in regards to having a way to disable this feature, but also ideally make it _programatic_ via some mechanism like cookies or query string or something at a per user / browser level?

Deploy previews are great not only for collaboration, but also auditing and automation as Addy mentioned. For example, even if I load the deploy preview site in Incognito mode, I still have the drawer prompting me to sign in, and so comes all the assets and requests that come along with that, so there really is no way to get a “clean” / pure evaluation of your site at all now with deploy previews. ☹

So hoping there can be a middle ground to be considered so everyone can get what they need out of these two great features coming together.

Thanks Netlify! 🙂

---

<div class="post-metadata">

**Author:** ![tom](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/tom/32/23693_2.png) [@tom](https://answers.netlify.com/u/tom)\
**Post date:** [May 31, 2021, 2:04am UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/13 "2021-05-31T02:04:47Z")

</div>

The permalink solution does not work for me because I use an identity provider (Auth0) which requires me to specify the urls for the site. This would mean I would need to update my Auth0 settings every single commit.

How do I get around this?

---

<div class="post-metadata">

**Author:** ![land.jonathan](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/land.jonathan/32/26018_2.png) [@land.jonathan](https://answers.netlify.com/u/land.jonathan)\
**Post date:** [May 31, 2021, 8:32am UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/14 "2021-05-31T08:32:03Z")

</div>

I’ve found a temporary workaround, by removing the injected script’s container:

```auto
<script>
const s = document.querySelector('[data-netlify-deploy-id]');
s && s.remove();
</script>

```

To keep this separate from my code I added it in the dashboard as a post processing snippet before `</body>`.

The browser still downloads the script (1.2kb) but it doesn’t run, so it should have a much smaller perf impact. Since the injected script is marked async, this will (theoretically) always remove it before it runs.

---

<div class="post-metadata">

**Author:** ![perry](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/perry/32/16_2.png) [@perry](https://answers.netlify.com/u/perry)\
**Post date:** [June 1, 2021, 4:06pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/15 "2021-06-01T16:06:50Z")

</div>

Hey @onlyhuman -

i appreciate you sharing your thoughts, and i know that there are others here that agree with you. That said, no one here on the Netlify design or dev teams wants to be told that they are “braindead” and that “they suck”, etc.

Lets turn the volume down on the intensity here.

Your feedback has been shared, you have a workaround for now, we will share an update when we have one. thanks.

---

<div class="post-metadata">

**Author:** ![ooloth](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/ooloth/32/8164_2.png) [@ooloth](https://answers.netlify.com/u/ooloth)\
**Post date:** [June 2, 2021, 4:52pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/18 "2021-06-02T16:52:34Z")

</div>

I’m a long-time user of Netlify and love the product and the whole team behind it.

That said, I’d like to add my voice to those requesting the option to disable this new feature on all deploy preview URLs.

It interferes with performance testing and visual regression testing and for many of us, adds no value if we’re happy with our existing collaboration tools.

The primary value of deploy previews has always been their similarity to production. The extra visuals and JS introduced by the new drawer are variables that make that preview vs. prod comparison less accurate.

So yeah, lots of love to team that worked hard on this, but the ability to opt in/out would be appreciated.

---

<div class="post-metadata">

**Author:** ![perry](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/perry/32/16_2.png) [@perry](https://answers.netlify.com/u/perry)\
**Post date:** [June 2, 2021, 8:20pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/19 "2021-06-02T20:20:25Z")

</div>

thanks for that @ooloth , totally get what you are saying!

I just had a chance to chat with the CDP team and we are pleased to let you know that some of the changes you are asking for have already been released - now is a good time to check in on CDP again.

We’ll have a blog post and a note here in the forums with more information tomorrow, but i thought you’d all want to know we’re definitely listening to the feedback 🙂

---

<div class="post-metadata">

**Author:** ![Ajaxy](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/ajaxy/32/26186_2.png) [@Ajaxy](https://answers.netlify.com/u/Ajaxy)\
**Post date:** [June 5, 2021, 9:26am UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/20 "2021-06-05T09:26:52Z")

</div>

So is there a way to disable the Drawer now? I could not find any blog post related to that.

---

<div class="post-metadata">

**Author:** ![amoline](https://avatars.discourse-cdn.com/v4/letter/a/c67d28/32.png) [@amoline](https://answers.netlify.com/u/amoline)\
**Post date:** [June 5, 2021, 5:44pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/21 "2021-06-05T17:44:44Z")

</div>

I commend Netlify for having patience, swallowing their pride, and providing you a little grace.

When you make a statement of:

> Yes, @Scott I will use the commit URLs from now **but can you please share the feedback to your UI _designers that they suck_. FFS,…**

There is really no other way to interrupt your intent to insult.

You seem very passionate about this topic and it sounds like it’s been very frustrating. Just remember there are better and more respectful ways to convey your frustrations without attacking others. I really hope that’s not how your team(s) talk to each other. That would be terribly sad.

If you’ve been a developer this long and have never created a bug or have found patience when that happens, I suggest your write more code. 😉 Besides, if it wasn’t for developers and some bugs, Quality Engineer’s wouldn’t exist. How boring would that be? 🤔 😆

---

<div class="post-metadata">

**Author:** ![perry](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/perry/32/16_2.png) [@perry](https://answers.netlify.com/u/perry)\
**Post date:** [June 7, 2021, 4:22pm UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/22 "2021-06-07T16:22:52Z")

</div>

thanks for the kind words, @amoline ! We appreciate you and your perspective (and, truly, that of everyone who shares encouragement and critique constructively and respectfully!)

Here is a forums announcement:

> [@Usability improvements for Collaborative Deploy Previews (CDP)](https://answers.netlify.com/t/usability-improvements-for-collaborative-deploy-previews/38746):
>
> A big THANK YOU pray to the Netlify Community for sharing feedback with us about improving the new collaborative Deploy Previews. Even though we just launched collaborative Deploy Previews a couple weeks ago, the Netlify Team already has new features and usability improvements to share! 1. Drag to move the Netlify Drawer icon Initially, the Netlify Drawer icon was pinned in the lower-left corner of Deploy Previews. This created a problem for some users, as the Drawer icon would sometimes hid…

blog post (basically the same info):

> **[Usability improvements for collaborative Deploy Previews | Netlify](https://www.netlify.com/blog/2021/06/07/usability-improvements-for-collaborative-deploy-previews/)**
>
> Realize the speed, agility and performance of a scalable, composable web architecture with Netlify. Explore the composable web platform now!

please let us know how these changes work for you!

---

<div class="post-metadata">

**Author:** ![robhawkes](https://sea1.discourse-cdn.com/netlify/user_avatar/answers.netlify.com/robhawkes/32/6246_2.png) [@robhawkes](https://answers.netlify.com/u/robhawkes)\
**Post date:** [June 9, 2021, 11:04am UTC](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/23 "2021-06-09T11:04:22Z")

</div>

If I’m not mistaken the latest changes still don’t allow you to fully and permanently disable the drawer and other injected code / iframes. It’s great that there are options that don’t have the drawer on, however that was always the case.

The problem for me still remains that if I want to continue using Deploy Previews (which I love) then I have to accept that there will be an auto-generated link with these features enabled and I simply have no say in the matter. I have no use for the new functionality right now and it doesn’t feel right that I can’t disable it.

I still stand by [my original post](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872/10) that not being able to disable this functionality has caused Netlify to get right in the way of my process, when previously Netlify never got in the way.

At risk of being over-dramatic, before this feature I never had a reason to try alternatives to Netlify. Currently I do.

[Next page](https://answers.netlify.com/t/netlify-github-app-permission-updates-with-collaborative-deploy-previews/37872.md?page=2)