Problem/Motivation

The README documentation includes the following in Section 7:
Click on "Add a permission", select "Microsoft Graph", and then choose the type of permissions your app requires (for SharePoint Online, "Sites.ReadWrite.All" under "Application permissions" should suffice).

Our SharePoint admin was unhappy about Drupal being able to write to any Sharepoint site, so we used the Sites.Selected permission to restrict access to one specific Site. This works fine.

But it might he helpful for future users to know they can use the Sites.Selected permission for security reasons to restrict access to a specific SharePoint site.

Steps to reproduce

As above

Proposed resolution

Update README documentation for section "7. Set permissions for the Graph API" from:

- Click on "API permissions" in the sidebar.
- Click on "Add a permission", select "Microsoft Graph", and then choose the type of permissions your app requires (for SharePoint Online, "Sites.ReadWrite.All" under "Application permissions" should suffice).
- Click "Add permissions" to save your changes.
- Finally, grant admin consent for the permissions (if required by your organization).

To:

- Click on "API permissions" in the sidebar.
- Click on "Add a permission", select "Microsoft Graph", and then choose the type of permissions your app requires (for SharePoint Online, "Sites.ReadWrite.All" under "Application permissions" should suffice. Use the Sites.Selected permission to restrict access to a specific Site).
- Click "Add permissions" to save your changes.
- Finally, grant admin consent for the permissions (if required by your organization).

Remaining tasks

None

User interface changes

None

API changes

None

Data model changes

None

Command icon Show commands

Start within a Git clone of the project using the version control instructions.

Or, if you do not have SSH keys set up on git.drupalcode.org:

Comments

simon-p created an issue. See original summary.

nickolaj made their first commit to this issue’s fork.

nickolaj’s picture

Status: Active » Needs review

Added documentation for Sites.Selected permission as a security-conscious alternative to Sites.ReadWrite.All.
https://git.drupalcode.org/issue/sharepoint_connector-3569285/-/merge_re...

  • nickolaj committed 93ecc06e on 1.0.x
    Issue #3569285: Added documentation for Sites.Selected permission ...
    
robbymo’s picture

Status: Needs review » Fixed

That makes sense! Thank you for catching this and updating the readme for users to be aware of.

Now that this issue is closed, review the contribution record.

As a contributor, attribute any organization that helped you, or if you volunteered your own time.

Maintainers, credit people who helped resolve this issue.

Status: Fixed » Closed (fixed)

Automatically closed - issue fixed for 2 weeks with no activity.