Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Limit permissions need to only those needed for the selected object classes #26

Closed
ryannewington opened this issue Mar 29, 2018 · 3 comments
Closed

Limit permissions need to only those needed for the selected object classes #26

ryannewington opened this issue Mar 29, 2018 · 3 comments
Assignees
@ryannewington
Labels
enhancement

Comments

@ryannewington
Copy link
Member

The MA currently requests permissions needed for all object classes, even if those are not needed.
@ryannewington ryannewington self-assigned this Mar 29, 2018
ryannewington added a commit that referenced this issue Mar 29, 2018
@ryannewington
Adds support for user query filters (#25)
4593713 
Constrains permissions requested to only those needed to manage the selected object types (#26)
Fixes an issue where a NullReferenceException occurs when the advancedUser type is selected, by the user type is not
@ryannewington
Copy link
Member Author

ryannewington commented Mar 29, 2018 •
edited

Permissions/Scopes required for each object type

user

https://www.googleapis.com/auth/admin.directory.user
https://www.googleapis.com/auth/admin.directory.userschema.readonly

advancedUser

https://www.googleapis.com/auth/admin.directory.user
https://www.googleapis.com/auth/admin.directory.userschema.readonly
https://apps-apis.google.com/a/feeds/emailsettings/2.0/

group

https://www.googleapis.com/auth/admin.directory.group
https://www.googleapis.com/auth/admin.directory.group.member
https://www.googleapis.com/auth/apps.groups.settings
https://www.googleapis.com/auth/admin.directory.domain.readonly

contact

http://www.google.com/m8/feeds/contacts/

calendar

https://www.googleapis.com/auth/calendar
https://www.googleapis.com/auth/admin.directory.resource.calendar

building

https://www.googleapis.com/auth/admin.directory.resource.calendar

feature

https://www.googleapis.com/auth/admin.directory.resource.calendar

domain

https://www.googleapis.com/auth/admin.directory.domain.readonly

@ryannewington
Copy link
Member Author

ryannewington commented Mar 30, 2018 •
edited

Preview build (v1.2 branch)
Lithnet.GoogleApps.MA.Setup.msi.zip

@ryannewington
Copy link
Member Author

Updated to replace writable user schema scope with read only
Lithnet.GoogleApps.MA.Setup.msi.zip

@ryannewington ryannewington mentioned this issue Apr 21, 2018
Closed
@LukaszKrukowski LukaszKrukowski mentioned this issue Aug 6, 2018
Closed
@ryannewington ryannewington mentioned this issue Sep 30, 2018
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@ryannewington ryannewington

Labels
enhancement
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ryannewington