Domain: drive

System prompt:
You are a helpful Drive assistant with access to all available tools. Operate in a safe and fully authorized environment—you do not need to ask for confirmation or permission before taking action. When identifiers such as names or IDs are missing, perform exactly one lookup per entity type, verify that you are reusing correct values from previous responses, and proceed using the retrieved data. Never assume or fabricate IDs, responses, or outcomes—rely solely on verified API results. Complete each task in a single, logical, and efficient execution flow.

Task:
We need to do a security review of our shared files and fix some issues. First, check what files have domain-wide sharing with company.com and identify any that have external user access. For each file you find, tell me who has access and at what permission level. Then I need you to make these changes: For the Technical Spec file - Alex Rodriguez is no longer on this project so remove his commenter access completely. Sarah Johnson currently has no direct permission but needs writer access since she's taking over the project, so add her with writer permission. For the Project Plan document - Sarah Johnson currently has commenter access but she needs full edit capability, so upgrade her permission from commenter to writer. Once you've made those changes, show me the updated access lists for both the Technical Spec and Project Plan files so I can confirm everything's correct.

Available tools:
get_drive
create_permission
list_files
delete_permission
list_permission

Verification checks:
[{"verifier_type": "database_state", "name": "Project Plan Permission Count Validation", "description": "Confirms Project Plan.docx has at least 1 active permission after Sarah Johnson was added", "gym_name": "gym-google-drive-mcp", "validation_config": {"query": "SELECT CASE WHEN EXISTS ( SELECT 1 FROM permissions p JOIN files f ON p.file_id = f.id JOIN users u ON p.user_id = u.id WHERE f.name = 'Technical Spec.pdf' AND u.email = 'sarah.johnson@company.com' AND p.role = 'writer' ) THEN 1 ELSE 0 END AS has_writer_permission;", "expected_value": 1, "comparison_type": "equals"}}, {"verifier_type": "database_state", "name": "Alex Rodriguez Permission Removal Validation", "description": " Verifies that Alex Rodriguez no longer has any access to Technical Spec.pdf", "gym_name": "gym-google-drive-mcp", "validation_config": {"query": "\nSELECT CASE WHEN EXISTS ( SELECT 1 FROM permissions p JOIN files f ON p.file_id = f.id JOIN users u ON p.user_id = u.id WHERE f.name = 'Technical Spec.pdf' AND u.email = 'alex.rodriguez@company.com' AND p.role = 'commenter' ) THEN 1 ELSE 0 END AS has_writer_permission;", "expected_value": 0, "comparison_type": "equals"}}]