Under the hood
New internal API validates and applies add/remove edits to permission rules
What
A new internal function handles adding or removing permission rules in settings files. It checks for a number of conditions before applying a change:
- whether enterprise-managed settings restrict edits to only managed permission rules
- whether the rule being added is a duplicate
- whether a tool-wide
*rule should trigger a warning - whether writing the settings file itself failed, with a specific error message for each case
Why
This gives permission-rule editing consistent validation and clearer error messages, including proper handling of enterprise-managed settings that restrict what can be changed.