Fixed in 1.0.11. If you are pinned to 1.0.10, upgrade; the model now accepts the full set of permission fields again.

Context: GitHub issue on merge-api/merge-python-client: version 1.0.10 broke all filestorage files.list calls because PermissionRequest was missing fields and set extra to forbid, so every response failed validation.