4 ms·

This looks cool! But could you (if you are the author?) please restrict the Google Drive permissions from “See, edit, create and delete all of your Google Driv

by secure 7y ago

This looks cool! But could you (if you are the author?) please restrict the Google Drive permissions from “See, edit, create and delete all of your Google Drive files” to only affect a sub directory of my drive please? That’s best practice for isolation. Thanks!

moioci 7y ago
not the author, just a non-techy person who wants to try org mode without the complexity of emacs.
- gryffin 7y ago
  A non-techy person who has heard of emacs!
  - gregknicholson 7y ago
    "Non-techy" is Impostor Syndrome for "somewhat techy".
  - fipar 7y ago
    I think org-mode has contributed a lot to making emacs more popular (or less obscure, depending on how you see it? :) ) See this for example: https://github.com/incandescentman/Emacs-Settings https://github.com/incandescentman/Emacs-Settings
- na85 7y ago
  Just as a bit of encouragement, I used emacs for like 4 years knowing only 5 commands (open file, change buffers, save file, kill buffer, close emacs). It's not that bad if you wade into it slowly.
DanielDe 7y ago
Yep, I should’ve done that in the first place, and it’s on my todo list, though I haven’t put many hours into org-web lately. In the meantime, you can always host the project yourself if that makes you feel a bit more comfortable about linking to GDrive (though this doesn’t solve every potential privacy issue, of course)
mshroyer 7y ago
I'd recommend the author use the OAuth 2.0 scope https://www.googleapis.com/auth/drive.file https://www.googleapis.com/auth/drive.file ("View and manage Google Drive files and folders that you have opened or created with this app") instead of https://www.googleapis.com/auth/drive https://www.googleapis.com/auth/drive ("See, edit, create, and delete all of your Google Drive files"), if/when they get a chance to work on this. Anyway, this is really cool and totally fills a niche for me (90% of the time I want to edit org files in Emacs on my computer, but sometimes I need remote access). So I'm really happy to see this exists.
- efm 7y ago
  I've created a pull request to fix this: https://github.com/DanielDe/org-web/pull/52 https://github.com/DanielDe/org-web/pull/52
lukax 7y ago
There is actually no OAuth 2 scope that allow only subdirectory access. App developers can either get full access, per-file access with a file picker or Application data folder access. Using Application data folder would seem to be the right choice but there is one problem: you cannot access Application data folder through Google Drive apps. Only the OAuth 2 application can access that folder. You can delete it in your Google Drive settings but you cannot see the actual files.
- your-nanny 7y ago
  sqlite to the rescue?

by secure 7y ago

moioci 7y ago

not the author, just a non-techy person who wants to try org mode without the complexity of emacs.

gryffin 7y ago
A non-techy person who has heard of emacs!
- gregknicholson 7y ago
  "Non-techy" is Impostor Syndrome for "somewhat techy".
- fipar 7y ago
  I think org-mode has contributed a lot to making emacs more popular (or less obscure, depending on how you see it? :) ) See this for example: https://github.com/incandescentman/Emacs-Settings https://github.com/incandescentman/Emacs-Settings
na85 7y ago
Just as a bit of encouragement, I used emacs for like 4 years knowing only 5 commands (open file, change buffers, save file, kill buffer, close emacs). It's not that bad if you wade into it slowly.

DanielDe 7y ago

Yep, I should’ve done that in the first place, and it’s on my todo list, though I haven’t put many hours into org-web lately. In the meantime, you can always host the project yourself if that makes you feel a bit more comfortable about linking to GDrive (though this doesn’t solve every potential privacy issue, of course)

mshroyer 7y ago

I'd recommend the author use the OAuth 2.0 scope https://www.googleapis.com/auth/drive.file https://www.googleapis.com/auth/drive.file ("View and manage Google Drive files and folders that you have opened or created with this app") instead of https://www.googleapis.com/auth/drive https://www.googleapis.com/auth/drive ("See, edit, create, and delete all of your Google Drive files"), if/when they get a chance to work on this. Anyway, this is really cool and totally fills a niche for me (90% of the time I want to edit org files in Emacs on my computer, but sometimes I need remote access). So I'm really happy to see this exists.

efm 7y ago
I've created a pull request to fix this: https://github.com/DanielDe/org-web/pull/52 https://github.com/DanielDe/org-web/pull/52

lukax 7y ago

There is actually no OAuth 2 scope that allow only subdirectory access. App developers can either get full access, per-file access with a file picker or Application data folder access. Using Application data folder would seem to be the right choice but there is one problem: you cannot access Application data folder through Google Drive apps. Only the OAuth 2 application can access that folder. You can delete it in your Google Drive settings but you cannot see the actual files.

your-nanny 7y ago
sqlite to the rescue?