question

JosiahCarpenter-7776 avatar image
2 Votes"
JosiahCarpenter-7776 asked AdamElek-2186 answered

Access denied bug in Granular site permissions for Graph API

When using the new Granular Graph API permissions for Sites.Selected, I'm able to see list items and file data using the read permissions. When I try to download the content of a file however I'm getting a 403 response with an Access Denied message.

microsoft-graph-sites-lists
· 3
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

  • Can you please share the detailed response that you receive (including the response id, timestamp)?

  • Outside of your code, you can repro the same with Graph Explorer/POSTMAN as well, right?

0 Votes 0 ·

Sure no problem. Interestingly the response doesn't include the response id or timestamp like most graph responses do.

Here is a screenshot of the postman request and the response that I'm getting:
76373-sitesselectedbug.jpg



Please let me know if you need any more information to help solve this bug

0 Votes 0 ·

Hi - I have the same issue. There is not much to the error messages.

Stream docStream = await graphClient.Sites[spSite].Lists[spLibId].Items[itm.Id].DriveItem.Content
.Request()
.GetAsync();

Error Msg - Code: accessDenied Message: Access denied

at Microsoft.Graph.HttpProvider.<SendAsync>d__18.MoveNext()
at System.Runtime.CompilerServices.TaskAwaiter.ThrowForNonSuccess(Task task)
at System.Runtime.CompilerServices.TaskAwaiter.HandleNonSuccessAndDebuggerNotification(Task task) ...

0 Votes 0 ·
DawidWysocki-6562 avatar image
0 Votes"
DawidWysocki-6562 answered

I'm encountering the same bug. Is there any plan to fix it?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

37859448 avatar image
0 Votes"
37859448 answered 37859448 edited

Hi @Deva-MSFT

reporting same issue.
trying to download the file content and it is giving {"error":{"code":"accessDenied","message":"Access denied"}}.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

TeixeiraJoel-9822 avatar image
0 Votes"
TeixeiraJoel-9822 answered

Hi @Deva-MSFT

I've the same issue in multiple tenants.
Trying to download the file content/CreateUploadSession and it is giving {"error":{"code":"accessDenied","message":"Access denied"}}.

Do you have idea when it will be released the fix?

Regads

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

JeremyKelleySHAREPOINT-6243 avatar image
0 Votes"
JeremyKelleySHAREPOINT-6243 answered

We are in the process of fixing the upload and download capabilities when using the Sites.Selected scope. We apologize for the inconvenience this has caused.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DorLevi-0264 avatar image
0 Votes"
DorLevi-0264 answered

I'm encountering the same bug:


 "error": {
     "code": "accessDenied",
     "message": "Access denied"


Do you have any idea when the fix will be released?

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

AdamElek-2186 avatar image
0 Votes"
AdamElek-2186 answered

Encountering similar issue.
Could upload a file, and can list drives via graph api.
But content convert gives access denied.

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.