chore: tighten ACL sharing comments

coder · ibetitsmike · Aug 26, 2026 · Aug 25, 2026 · Aug 25, 2026 · Aug 25, 2026
commit 3a048005293c856dd94f979de186def6c93493bb
diff --git a/coderd/mcp_acl_available_test.go b/coderd/mcp_acl_available_test.go
@@ -146,10 +146,7 @@ func TestMCPServerConfigDisabledSharerFetch(t *testing.T) {
 	})
 	require.NoError(t, err)
 
-	// Delegated sharers hold read alongside share: share alone deliberately
-	// does not admit the detail route (enterprise share-only contract), but
-	// sharers with read keep access to disabled configs so they can still
-	// open them and manage sharing, matching the list behavior.
+	// The detail route requires read permission in addition to share.
 	fetched, err := sharerClient.MCPServerConfigByID(ctx, firstUser.OrganizationID, config.ID)
 	require.NoError(t, err)
 	require.Equal(t, config.ID, fetched.ID)

diff --git a/site/src/pages/AISettingsPage/MCPServersPage/organizationSharing.ts b/site/src/pages/AISettingsPage/MCPServersPage/organizationSharing.ts
@@ -6,9 +6,8 @@ type UseCanShareOrganizationMCPServersOptions = {
 	enabled?: boolean;
 };
 
-// Discovers whether the user can share MCP servers in any organization so
-// top-level navigation can admit share-only users who hold no site-wide MCP
-// permissions.
+// Top-level navigation must admit organization-scoped sharers without
+// site-wide MCP permissions.
 export const useCanShareOrganizationMCPServers = (
 	organizations: readonly Organization[],
 	options: UseCanShareOrganizationMCPServersOptions = {},

diff --git a/site/src/testHelpers/handlers.ts b/site/src/testHelpers/handlers.ts
@@ -82,7 +82,6 @@ export const handlers = [
 		},
 	),
 
-	// MCP servers
 	http.get(
 		"/api/experimental/organizations/:organizationId/mcp-servers/:serverId/acl/available",
 		() => HttpResponse.json(M.MockMCPServerConfigACLAvailable),