BC Observatoryunofficial, made by waldo
code change · fixAdministration & Setupofficial - Microsoftreviewed - checked by Opus

#12255 Fix overwrite import of exported system permission sets

System permission set imports with overwrite option now correctly delete permissions and relations that differ from the imported file, instead of merging silently. The fix handles both system and tenant format files, with tenant format now using exact role ID matching.

Open in Claude12255.mdPull request #12255

Pull request · merged into main (BC30) on 2026-10-05 by darjoo · 2 files (+78 -6), 1 AL · fix · tier official · reviewed (checked by Opus)

What changed

  • System-format overwrite import now deletes existing tenant permissions and relations filtered on the empty App ID
  • Tenant-format overwrite uses SetRange, so role IDs containing filter characters cannot match the wrong records
  • After an overwrite import the set matches the file, instead of silently merging
  • The Yes (update) option is unchanged and still only adds or raises permissions
  • New test covers removed and lowered permissions and relation changes on an overwrite import
  • Behaviour changes for users or extensions.

AL objects touched

Also merged into

  • #12371 into releases/29.x on 2026-10-06

Context

  • Work items: AB#631431, AB#639487
  • Labels: AL: System Application, Team: Integrations
  • Systems: administration

Source: metadata of a merged pull request in microsoft/BCApps (bcapps): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).