Weekly Permissions sync 2025-11-16 #1348
Conversation
There was a problem hiding this comment.
Pull Request Overview
This PR performs a weekly permissions sync that adds new API endpoint permissions across multiple permission scopes. The changes primarily introduce support for workHoursAndLocations settings endpoints, a new CloudPC client usage report endpoint, and a new Copilot retrieval endpoint.
Key Changes:
- Added workHoursAndLocations endpoints with full CRUD operations (GET, POST, PUT, PATCH, DELETE) under Calendars.Read and Calendars.ReadWrite permission scopes
- Added workHoursAndLocations endpoints under MailboxSettings.Read and MailboxSettings.ReadWrite permission scopes
- Added retrieveCloudPcClientUsageReport endpoint under CloudPC.ReadWrite.All permission scope
- Added copilot/retrieval endpoint under FileStorageContainer.Selected permission scope
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| "/me/settings/workHoursAndLocations/occurrencesView(startDateTime={value},endDateTime={value})": "least=DelegatedWork", | ||
| "/me/settings/workHoursAndLocations/recurrences": "least=DelegatedWork", | ||
| "/users/{id}/settings/workHoursAndLocations": "", | ||
| "/users/{id}/settings/workHoursAndLocations/occurrencesView(startDateTime={value},endDateTime={value})": "least=DelegatedWork", | ||
| "/users/{id}/settings/workHoursAndLocations/recurrences": "least=DelegatedWork" |
There was a problem hiding this comment.
Inconsistent permission annotations for similar paths. In this block (lines 5273-5277), child paths like occurrencesView and recurrences have "least=DelegatedWork" annotations. However, in the similar block at lines 5732-5737, these same paths have empty string "" annotations instead. The annotations should be consistent across similar permission blocks.
| "/me/settings/workHoursAndLocations": "", | ||
| "/users/{id}/settings/workHoursAndLocations": "" |
There was a problem hiding this comment.
Inconsistent permission annotations for the same paths. These GET paths use empty string "" annotations, but at lines 29835-29836, the identical paths in MailboxSettings.Read permission use "least=DelegatedWork" annotations. The annotations should be consistent across permission scopes for the same endpoints.
Weekly Permissions sync 2025-11-16