Enhance Set-CIPPCalendarPermission to include CanViewPrivateItems parameter for improved calendar access control

Author: Jr7468

Modules/CIPPCore/Public/Entrypoints/HTTP Functions/Email-Exchange/Administration/Invoke-ExecEditCalendarPermissions.ps1

@@ -21,12 +21,13 @@ function Invoke-ExecEditCalendarPermissions {
     $Permissions = $Request.Query.Permissions ?? $Request.Body.Permissions.value
     $FolderName = $Request.Query.FolderName ?? $Request.Body.FolderName
     $RemoveAccess = $Request.Query.RemoveAccess ?? $Request.Body.RemoveAccess.value
+    $CanViewPrivateItems = $Request.Query.CanViewPrivateItems ?? $Request.Body.CanViewPrivateItems
 
     try {
         if ($RemoveAccess) {
             $Result = Set-CIPPCalendarPermission -Headers $Headers -UserID $UserID -FolderName $FolderName -RemoveAccess $RemoveAccess -TenantFilter $TenantFilter
         } else {
-            $Result = Set-CIPPCalendarPermission -Headers $Headers -UserID $UserID -FolderName $FolderName -TenantFilter $TenantFilter -UserToGetPermissions $UserToGetPermissions -Permissions $Permissions
+            $Result = Set-CIPPCalendarPermission -Headers $Headers -UserID $UserID -FolderName $FolderName -TenantFilter $TenantFilter -UserToGetPermissions $UserToGetPermissions -Permissions $Permissions -CanViewPrivateItems $CanViewPrivateItems
         }
         $StatusCode = [HttpStatusCode]::OK
     } catch {

Modules/CIPPCore/Public/Set-CIPPCalendarPermission.ps1

@@ -9,7 +9,8 @@ function Set-CIPPCalendarPermission {
         $folderName,
         $UserToGetPermissions,
         $LoggingName,
-        $Permissions
+        $Permissions,
+        [bool]$CanViewPrivateItems
     )
 
     try {
@@ -26,6 +27,10 @@ function Set-CIPPCalendarPermission {
             AccessRights = @($Permissions)
             User         = $UserToGetPermissions
         }
+
+        if ($CanViewPrivateItems) {
+            $CalParam | Add-Member -NotePropertyName 'SharingPermissionFlags' -NotePropertyValue 'Delegate,CanViewPrivateItems'
+        }
 
         if ($RemoveAccess) {
             if ($PSCmdlet.ShouldProcess("$UserID\$folderName", "Remove permissions for $LoggingName")) {
@@ -42,6 +47,9 @@ function Set-CIPPCalendarPermission {
                 }
                 Write-LogMessage -headers $Headers -API $APIName -tenant $TenantFilter -message "Successfully set Calendar permissions $Permissions for $LoggingName on $UserID." -sev Info
                 $Result = "Successfully set permissions on folder $($CalParam.Identity). The user $LoggingName now has $Permissions permissions on this folder."
+                if ($CanViewPrivateItems) {
+                    $Result += " The user can also view private items."
+                }
             }
         }
     } catch {