Problem/Motivation
The README documentation includes the following in Section 7:
Click on "Add a permission", select "Microsoft Graph", and then choose the type of permissions your app requires (for SharePoint Online, "Sites.ReadWrite.All" under "Application permissions" should suffice).
Our SharePoint admin was unhappy about Drupal being able to write to any Sharepoint site, so we used the Sites.Selected permission to restrict access to one specific Site. This works fine.
But it might he helpful for future users to know they can use the Sites.Selected permission for security reasons to restrict access to a specific SharePoint site.
Steps to reproduce
As above
Proposed resolution
Update README documentation for section "7. Set permissions for the Graph API" from:
- Click on "API permissions" in the sidebar.
- Click on "Add a permission", select "Microsoft Graph", and then choose the type of permissions your app requires (for SharePoint Online, "Sites.ReadWrite.All" under "Application permissions" should suffice).
- Click "Add permissions" to save your changes.
- Finally, grant admin consent for the permissions (if required by your organization).
To:
- Click on "API permissions" in the sidebar.
- Click on "Add a permission", select "Microsoft Graph", and then choose the type of permissions your app requires (for SharePoint Online, "Sites.ReadWrite.All" under "Application permissions" should suffice. Use the Sites.Selected permission to restrict access to a specific Site).
- Click "Add permissions" to save your changes.
- Finally, grant admin consent for the permissions (if required by your organization).
Remaining tasks
None
User interface changes
None
API changes
None
Data model changes
None
Issue fork sharepoint_connector-3569285
Show commands
Start within a Git clone of the project using the version control instructions.
Or, if you do not have SSH keys set up on git.drupalcode.org:
Comments
Comment #3
nickolajAdded documentation for Sites.Selected permission as a security-conscious alternative to Sites.ReadWrite.All.
https://git.drupalcode.org/issue/sharepoint_connector-3569285/-/merge_re...
Comment #6
robbymo commentedThat makes sense! Thank you for catching this and updating the readme for users to be aware of.