@@ -52,6 +52,23 @@ export const RPC_REQUIRED_SCOPES = {
5252 [ WS_METHODS . serverGetBackgroundPolicy ] : AuthOrchestrationReadScope ,
5353 [ WS_METHODS . cloudGetRelayClientStatus ] : AuthRelayReadScope ,
5454 [ WS_METHODS . cloudInstallRelayClient ] : AuthRelayWriteScope ,
55+ [ WS_METHODS . pullRequestsList ] : AuthOrchestrationReadScope ,
56+ [ WS_METHODS . pullRequestsListStats ] : AuthOrchestrationReadScope ,
57+ [ WS_METHODS . pullRequestsDetail ] : AuthOrchestrationReadScope ,
58+ [ WS_METHODS . pullRequestsActivity ] : AuthOrchestrationReadScope ,
59+ [ WS_METHODS . pullRequestsDiffFileContents ] : AuthOrchestrationReadScope ,
60+ [ WS_METHODS . pullRequestsRunAction ] : AuthOrchestrationOperateScope ,
61+ [ WS_METHODS . pullRequestsComment ] : AuthOrchestrationOperateScope ,
62+ [ WS_METHODS . pullRequestsSubmitReview ] : AuthOrchestrationOperateScope ,
63+ [ WS_METHODS . pullRequestsReplyToThread ] : AuthOrchestrationOperateScope ,
64+ [ WS_METHODS . pullRequestsSetThreadResolution ] : AuthOrchestrationOperateScope ,
65+ // Read scope like the reads it un-caches: refreshing is part of reading, and a read-only
66+ // client pressing refresh must not be told it may not look again.
67+ [ WS_METHODS . pullRequestsInvalidate ] : AuthOrchestrationReadScope ,
68+ // The candidate list is a read like the detail beside it; asking somebody for a review is a
69+ // write like every other one.
70+ [ WS_METHODS . pullRequestsReviewerCandidates ] : AuthOrchestrationReadScope ,
71+ [ WS_METHODS . pullRequestsRequestReviewers ] : AuthOrchestrationOperateScope ,
5572 [ WS_METHODS . sourceControlLookupRepository ] : AuthOrchestrationReadScope ,
5673 [ WS_METHODS . sourceControlCloneRepository ] : AuthOrchestrationOperateScope ,
5774 [ WS_METHODS . sourceControlPublishRepository ] : AuthOrchestrationOperateScope ,
0 commit comments