86bb4cdbd6
Phase 1: Setup & Database (13 tasks completed) - Add assignments JSONB column to backup_items table - Add group_mapping JSONB column to restore_runs table - Extend BackupItem model with 7 assignment accessor methods - Extend RestoreRun model with 8 group mapping helper methods - Add scopeWithAssignments() query scope to BackupItem - Update graph_contracts.php with assignments endpoints - Create 5 factories: BackupItem, RestoreRun, Tenant, BackupSet, Policy - Add 30 unit tests (15 BackupItem, 15 RestoreRun) - all passing Phase 2: Graph API Integration (16 tasks completed) - Create AssignmentFetcher service with fallback strategy - Create GroupResolver service with orphaned ID handling - Create ScopeTagResolver service with 1-hour caching - Implement fail-soft error handling for all services - Add 17 unit tests (5 AssignmentFetcher, 6 GroupResolver, 6 ScopeTagResolver) - all passing - Total: 71 assertions across all Phase 2 tests Test Results: - Phase 1: 30/30 tests passing (45 assertions) - Phase 2: 17/17 tests passing (71 assertions) - Total: 47/47 tests passing (116 assertions) - Code formatted with Pint (PSR-12 compliant) Next: Phase 3 - US1 Backup with Assignments (12 tasks)
202 lines
8.6 KiB
PHP
202 lines
8.6 KiB
PHP
<?php
|
|
|
|
return [
|
|
/*
|
|
|--------------------------------------------------------------------------
|
|
| Graph Contract Registry
|
|
|--------------------------------------------------------------------------
|
|
|
|
|
| Central place to describe Graph endpoints, allowed selects/expands, and
|
|
| type families for supported policy types. Used for capability fallbacks
|
|
| and drift checks.
|
|
|
|
|
*/
|
|
'types' => [
|
|
'deviceConfiguration' => [
|
|
'resource' => 'deviceManagement/deviceConfigurations',
|
|
'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'version', 'lastModifiedDateTime'],
|
|
'allowed_expand' => [],
|
|
'type_family' => [
|
|
'#microsoft.graph.deviceConfiguration',
|
|
'#microsoft.graph.windows10CustomConfiguration',
|
|
'#microsoft.graph.iosGeneralDeviceConfiguration',
|
|
'#microsoft.graph.androidGeneralDeviceConfiguration',
|
|
'#microsoft.graph.macOSGeneralDeviceConfiguration',
|
|
],
|
|
'create_method' => 'POST',
|
|
'update_method' => 'PATCH',
|
|
'id_field' => 'id',
|
|
'hydration' => 'properties',
|
|
],
|
|
'settingsCatalogPolicy' => [
|
|
'resource' => 'deviceManagement/configurationPolicies',
|
|
'allowed_select' => ['id', 'name', 'displayName', 'description', '@odata.type', 'version', 'platforms', 'technologies', 'roleScopeTagIds', 'lastModifiedDateTime'],
|
|
'allowed_expand' => ['settings'],
|
|
'type_family' => [
|
|
'#microsoft.graph.deviceManagementConfigurationPolicy',
|
|
],
|
|
'create_method' => 'POST',
|
|
'update_method' => 'PATCH',
|
|
'id_field' => 'id',
|
|
'hydration' => 'properties',
|
|
'update_whitelist' => [
|
|
'name',
|
|
'description',
|
|
],
|
|
'update_map' => [
|
|
'displayName' => 'name',
|
|
],
|
|
'update_strip_keys' => [
|
|
'platforms',
|
|
'technologies',
|
|
'templateReference',
|
|
'assignments',
|
|
],
|
|
'member_hydration_strategy' => 'subresource_settings',
|
|
'subresources' => [
|
|
'settings' => [
|
|
'path' => 'deviceManagement/configurationPolicies/{id}/settings',
|
|
'collection' => true,
|
|
'paging' => true,
|
|
'allowed_select' => [],
|
|
'allowed_expand' => [],
|
|
],
|
|
],
|
|
'settings_write' => [
|
|
'path_template' => 'deviceManagement/configurationPolicies/{id}/settings',
|
|
'method' => 'POST',
|
|
'bulk' => true,
|
|
'body_shape' => 'collection',
|
|
'fallback_body_shape' => 'wrapped',
|
|
],
|
|
'update_strategy' => 'settings_catalog_policy_with_settings',
|
|
|
|
// Assignments CRUD (standard Graph pattern)
|
|
'assignments_list_path' => '/deviceManagement/configurationPolicies/{id}/assignments',
|
|
'assignments_create_path' => '/deviceManagement/configurationPolicies/{id}/assignments',
|
|
'assignments_create_method' => 'POST',
|
|
'assignments_update_path' => '/deviceManagement/configurationPolicies/{id}/assignments/{assignmentId}',
|
|
'assignments_update_method' => 'PATCH',
|
|
'assignments_delete_path' => '/deviceManagement/configurationPolicies/{id}/assignments/{assignmentId}',
|
|
'assignments_delete_method' => 'DELETE',
|
|
|
|
// Scope Tags
|
|
'supports_scope_tags' => true,
|
|
'scope_tag_field' => 'roleScopeTagIds',
|
|
],
|
|
'deviceCompliancePolicy' => [
|
|
'resource' => 'deviceManagement/deviceCompliancePolicies',
|
|
'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'version', 'lastModifiedDateTime'],
|
|
'allowed_expand' => [],
|
|
'type_family' => [
|
|
'#microsoft.graph.deviceCompliancePolicy',
|
|
'#microsoft.graph.windows10CompliancePolicy',
|
|
'#microsoft.graph.iosCompliancePolicy',
|
|
'#microsoft.graph.androidCompliancePolicy',
|
|
'#microsoft.graph.macOSCompliancePolicy',
|
|
],
|
|
'create_method' => 'POST',
|
|
'update_method' => 'PATCH',
|
|
'id_field' => 'id',
|
|
'hydration' => 'properties',
|
|
],
|
|
'appProtectionPolicy' => [
|
|
'resource' => 'deviceAppManagement/managedAppPolicies',
|
|
'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'version'],
|
|
'allowed_expand' => [],
|
|
'type_family' => [
|
|
'#microsoft.graph.targetedManagedAppProtection',
|
|
],
|
|
'create_method' => 'POST',
|
|
'update_method' => 'PATCH',
|
|
'id_field' => 'id',
|
|
'hydration' => 'properties',
|
|
],
|
|
'conditionalAccessPolicy' => [
|
|
'resource' => 'identity/conditionalAccess/policies',
|
|
'allowed_select' => ['id', 'displayName', 'state', 'createdDateTime', 'modifiedDateTime', '@odata.type'],
|
|
'allowed_expand' => [],
|
|
'type_family' => [
|
|
'#microsoft.graph.conditionalAccessPolicy',
|
|
],
|
|
'create_method' => 'POST',
|
|
'update_method' => 'PATCH',
|
|
'id_field' => 'id',
|
|
'hydration' => 'properties',
|
|
],
|
|
'deviceManagementScript' => [
|
|
'resource' => 'deviceManagement/deviceManagementScripts',
|
|
'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'lastModifiedDateTime'],
|
|
'allowed_expand' => [],
|
|
'type_family' => [
|
|
'#microsoft.graph.deviceManagementScript',
|
|
],
|
|
'create_method' => 'POST',
|
|
'update_method' => 'PATCH',
|
|
'id_field' => 'id',
|
|
'hydration' => 'properties',
|
|
],
|
|
'enrollmentRestriction' => [
|
|
'resource' => 'deviceManagement/deviceEnrollmentConfigurations',
|
|
'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'version'],
|
|
'allowed_expand' => [],
|
|
'type_family' => [
|
|
'#microsoft.graph.deviceEnrollmentConfiguration',
|
|
'#microsoft.graph.windows10EnrollmentCompletionPageConfiguration',
|
|
],
|
|
'create_method' => 'POST',
|
|
'update_method' => 'PATCH',
|
|
'id_field' => 'id',
|
|
'hydration' => 'properties',
|
|
],
|
|
'windowsAutopilotDeploymentProfile' => [
|
|
'resource' => 'deviceManagement/windowsAutopilotDeploymentProfiles',
|
|
'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'lastModifiedDateTime'],
|
|
'allowed_expand' => [],
|
|
'type_family' => [
|
|
'#microsoft.graph.windowsAutopilotDeploymentProfile',
|
|
],
|
|
'create_method' => 'POST',
|
|
'update_method' => 'PATCH',
|
|
'id_field' => 'id',
|
|
'hydration' => 'properties',
|
|
],
|
|
'windowsEnrollmentStatusPage' => [
|
|
'resource' => 'deviceManagement/deviceEnrollmentConfigurations',
|
|
'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'version'],
|
|
'allowed_expand' => [],
|
|
'type_family' => [
|
|
'#microsoft.graph.windows10EnrollmentCompletionPageConfiguration',
|
|
],
|
|
'create_method' => 'POST',
|
|
'update_method' => 'PATCH',
|
|
'id_field' => 'id',
|
|
'hydration' => 'properties',
|
|
],
|
|
'endpointSecurityIntent' => [
|
|
'resource' => 'deviceManagement/intents',
|
|
'allowed_select' => ['id', 'displayName', 'description', '@odata.type', 'lastModifiedDateTime'],
|
|
'allowed_expand' => [],
|
|
'type_family' => [
|
|
'#microsoft.graph.deviceManagementIntent',
|
|
],
|
|
'create_method' => 'POST',
|
|
'update_method' => 'PATCH',
|
|
'id_field' => 'id',
|
|
'hydration' => 'properties',
|
|
],
|
|
'mobileApp' => [
|
|
'resource' => 'deviceAppManagement/mobileApps',
|
|
'allowed_select' => ['id', 'displayName', 'publisher', 'description', '@odata.type', 'createdDateTime', 'lastModifiedDateTime'],
|
|
'allowed_expand' => [],
|
|
'type_family' => [
|
|
'#microsoft.graph.mobileApp',
|
|
],
|
|
'create_method' => 'POST',
|
|
'update_method' => 'PATCH',
|
|
'id_field' => 'id',
|
|
'hydration' => 'properties',
|
|
],
|
|
],
|
|
];
|