File.ReadBasic and File.ReadBasic.All Permissions

File.ReadBasic and File.ReadBasic.All Permissions



 May 07 2024
Currently, to list a user's files, the minimum required permission is Files.Read, which grants read access to the full content of the files. However, there are scenarios where an application might only need to list the files and access basic metadata (e.g., file name, last modified date, size) without requiring access to the actual file contents.

Adding a new Files.ReadBasic permission, similar to the existing Mail.ReadBasic permission, would allow developers to build applications that can list and access basic metadata of the user's files without granting unnecessary access to the file contents. This would align with the principle of least privilege and enhance the security and privacy of end-users' data.