microsoftgraph / microsoftgraph/msgraph-sdk-java

Owners not assigned correctly in bulk member add & inconsistent response behavior

未关闭
#2,562 0 条评论 0 个 reaction 已指派 0 人 在 GitHub 查看

还没有人认领这个 Issue。

status:waiting-for-triage type:bug
主要语言
Java
星标
444
派生
154
平均合并
18 小时 28 分钟
30 天内合并 PR
4

描述

Describe the bug

When creating a Team and adding members using the Microsoft Graph SDK for Java, there are two issues:

  1. Bulk add does not correctly assign owner roles
    When using the bulk member add endpoint (/teams/{id}/members/add), users specified with the role "owner" are not assigned as owners.
    Instead, they are added as regular members, even though the request payload explicitly defines the owner role.

This behavior occurs without any error or exception, making it difficult to detect programmatically. As a result, affected users do not receive the required owner permissions.

  1. createTeam does not return the created Team
    The SDK method used to create a Team suggests that a Team object will be returned. However, the response does not contain the created Team resource.
    Instead, the Team ID must be retrieved indirectly (e.g., via response headers or additional handling), which is not aligned with common framework expectations.
Expected behavior
  1. Correct role assignment in bulk add
    When adding members via the bulk endpoint, the roles provided in the request (e.g., "owner") should be correctly applied.
    Users specified as owners must be assigned owner permissions within the Team.

  2. Ability to define members and roles during Team creation
    It should be possible to fully define all desired members and their roles (including owners) directly during Team creation, without requiring a separate bulk add step.

  3. Consistent and intuitive SDK response behavior
    The createTeam operation should either:

  • return the created Team entity, or
  • clearly reflect (through API design and SDK behavior) that no resource is returned.

Ideally, the SDK should align with common framework standards and not imply a return value that is not actually provided.

How to reproduce

Create Team
POST https://graph.microsoft.com/v1.0/teams
Content-Type: application/json

{
"template@odata.bind": "https://graph.microsoft.com/v1.0/teamsTemplates('standard')",
"displayName": "Test Team",
"members": [
{
"@odata.type": "#microsoft.graph.aadUserConversationMember",
"roles": ["owner"],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('john.doe@xy.com')"
}
]
}
Retrieve Team ID
The Team ID is extracted from the response (e.g., via response headers / response options).
Bulk add members
POST https://graph.microsoft.com/v1.0/teams/{team-id}/members/add
Content-Type: application/json

{
"values": [
{
"@odata.type": "microsoft.graph.aadUserConversationMember",
"roles": [],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('some.user@xy.com')"
},
{
"@odata.type": "microsoft.graph.aadUserConversationMember",
"roles": [],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('the.user@xy.com')"
},
{
"@odata.type": "microsoft.graph.aadUserConversationMember",
"roles": [],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('john.smith@xy.com')"
},
{
"@odata.type": "microsoft.graph.aadUserConversationMember",
"roles": ["owner"],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('one.owner@xy.com')"
},
{
"@odata.type": "microsoft.graph.aadUserConversationMember",
"roles": ["owner"],
"user@odata.bind": "https://graph.microsoft.com/v1.0/users('another.owner@xy.com')"
}
]
}

SDK Version

6.62.0

Latest version known to work for scenario above?

No response

Known Workarounds

No response

Debug output

The log contains no errors, which is also a real problem.

Configuration
  • OS: Windows Local and a Debian on the production VM but the behavior is on both systems the same
    -Within a permission management workflow implemented in a Spring Boot 3.5.x application, Teams are programmatically created and populated in a Job with members using the Microsoft Graph SDK for Java.
Other information

No response

贡献指南

打开贡献指南

从这里开始

  1. 先读完整个 Issue,再读项目的贡献指南。
  2. 在 Issue 下留言说明你要接手 —— 这能避免两个人做同样的事。
  3. Fork 仓库,在一个分支上完成修改。
  4. 提交 Pull Request,并在描述里引用这个 Issue 编号。

调研方向

首先跟踪 createTeam 和 /teams/{id}/members/add 的 SDK 入口点,以复现请求和响应标头作为基线。将 owner 角色的处理方式和创建响应与 Microsoft Graph 的行为进行比较,然后确定每项差异属于 SDK 还是服务。两项已报告行为的修复范围都已确认且可测试,即表示完成。

由索引模型根据 Issue 内容生成。

评估

技术栈
java, spring-boot
领域
api, backend
Issue 类型
缺陷
难度
4/5
预计耗时
3-5 天
活跃度
冷清
描述清晰度
基本清楚
新手友好度
42/100

把新 issue 发到你的邮箱

精选适合新手参与的 GitHub issue 摘要。