modelcontextprotocol/access
Watch
1
0
Fork
You've already forked access
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: ignoreChanges on all user-managed fields for GWS users

Browse source 
After creation/import we only care that the user exists and is in the
right groups. All profile settings (name, recovery info, password,
org unit, etc.) are left to users and admins to manage directly.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
David Soria Parra 2026-02-20 00:22:17 +00:00
commit 520ccc7bd8
1 changed files with 65 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

67
src/google.ts
View file

@ -89,7 +89,39 @@ MEMBERS.forEach((member) => {
name: { familyName: member.lastName!, givenName: member.firstName! },
orgUnitPath: mcpOrgUnit.orgUnitPath,
},
{ import: primaryEmail, dependsOn: [mcpOrgUnit], ignoreChanges: ['recoveryEmail', 'recoveryPhone'] }
{
import: primaryEmail,
dependsOn: [mcpOrgUnit],
ignoreChanges: [
'recoveryEmail',
'recoveryPhone',
'password',
'hashFunction',
'changePasswordAtNextLogin',
'orgUnitPath',
'archived',
'suspended',
'isAdmin',
'includeInGlobalAddressList',
'ipAllowlist',
'addresses',
'aliases',
'customSchemas',
'emails',
'externalIds',
'ims',
'keywords',
'languages',
'locations',
'organizations',
'phones',
'posixAccounts',
'relations',
'sshPublicKeys',
'websites',
'name',
],
}
);
provisionedUsersByEmail[primaryEmail] = user;
} else {
@ -112,7 +144,38 @@ MEMBERS.forEach((member) => {
changePasswordAtNextLogin: true,
orgUnitPath: mcpOrgUnit.orgUnitPath,
},
{ dependsOn: [mcpOrgUnit] }
{
dependsOn: [mcpOrgUnit],
ignoreChanges: [
'recoveryEmail',
'recoveryPhone',
'password',
'hashFunction',
'changePasswordAtNextLogin',
'orgUnitPath',
'archived',
'suspended',
'isAdmin',
'includeInGlobalAddressList',
'ipAllowlist',
'addresses',
'aliases',
'customSchemas',
'emails',
'externalIds',
'ims',
'keywords',
'languages',
'locations',
'organizations',
'phones',
'posixAccounts',
'relations',
'sshPublicKeys',
'websites',
'name',
],
}
);
provisionedUsersByEmail[primaryEmail] = user;