Expand ALL permissions in MCP describe_entities to explicit operations

[souvikghosh04]

The MCP describe_entities tool returns "ALL" for wildcard permissions, which confuses LLM consumers that need explicit operation lists.

Changes

Modified DescribeEntitiesTool.BuildPermissionsInfo() to expand EntityActionOperation.All:

• Tables/Views: Expands to ["CREATE", "DELETE", "READ", "UPDATE"] via EntityAction.ValidPermissionOperations
• Stored Procedures: Expands to ["EXECUTE"] via EntityAction.ValidStoredProcedurePermissionOperations

Example

Before:

{
  "name": "Todo",
  "permissions": ["ALL"]
}

After:

{
  "name": "Todo",
  "permissions": ["CREATE", "DELETE", "READ", "UPDATE"]
}

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[Bug]: MCP describe_entities permissions value ALL needs to be expanded.</issue_title>
<issue_description>## What?

Models are confused by ALL.

{
  "entities": [
    {
      "name": "Todo",
      "description": "This table contains the list of todo items.",
      "fields": [ ],
      "permissions": [
        "ALL" // this is the problem
      ]
    }
  ],
  "count": 1,
  "mode": "full",
  "status": "success"
}

Solution

When table/view.

{
  "permissions: [
    "CREATE",
    "DELETE",
    "READ",
    "UPDATE"
  ]
}

When stored procedure.

{
  "permissions: [
    "EXECUTE"
  ]
}

</issue_description>

Comments on the Issue (you are @copilot in this section)

• Fixes [Bug]: MCP describe_entities permissions value ALL needs to be expanded. #2935

[Copilot]

Pull Request Overview

This PR enhances the BuildPermissionsInfo method in DescribeEntitiesTool to properly expand the EntityActionOperation.All wildcard permission into its constituent operations based on entity type.

Key changes:

• Added early return for null permissions
• Implemented entity-type-aware expansion of the "All" wildcard operation (EXECUTE for stored procedures, CREATE/READ/UPDATE/DELETE for regular entities)
• Switched to case-insensitive string comparison for the permissions HashSet to avoid duplicates

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[souvikghosh04]

/azp run

[azure-pipelines]

Azure Pipelines successfully started running 6 pipeline(s).