3 ms·

I wanted to see if it would ask for access to my entire Google Sheets account, so I tried signing into https://gsheet2mail.com/ https://gsheet2mail.com/ and got

I wanted to see if it would ask for access to my entire Google Sheets account, so I tried signing into https://gsheet2mail.com/ https://gsheet2mail.com/ and got an error message. Looking at the page again, I saw this, which I missed: > Hi there! We're currently being verified by Google. So just click "Advanced" when signing up to continue :) I tried clicking advanced, and yep, it wants access to all my spreadsheets =) I said no, but I don't want a google sheets to RSS converter right now anyway. This is one advantage Zapier has over unbundled apps - I'm more likely to want to give Zapier permissions to my APIs because it's an established company and it can help with a bunch of different things, than to give access to a new single function tool.

kamerontanseli 7y ago
Hi, the author here, That's the read-only scope that's required to query a single spreadsheet on the user's account. The API doesn't allow listing queries unless you also ask for drive permissions (which I don't). See more info here: https://developers.google.com/sheets/api/guides/authorizing https://developers.google.com/sheets/api/guides/authorizing
- benatkin 7y ago
  I'm famiilar with the Google Sheets API. The way to get fine-grained access to the Google Sheets API is by asking for a specific permission within Google Drive. While it involves two APIs, it's less permissions than giving access to all the spreadsheets in a google sheets account. Another way to go is to use a service account, and have the user share their sheet with your service account's email address.
  - slouch 7y ago
    Hi, I'm not OP, but have built a similar thing. Are you suggesting to use https://www.googleapis.com/auth/drive.file https://www.googleapis.com/auth/drive.file instead of https://www.googleapis.com/auth/spreadsheets https://www.googleapis.com/auth/spreadsheets?
    - benatkin 7y ago
      Yeah. It gives read/write access to one file. The ideal for this use case would be read only access for one file. I think read/write access for one file follows the principle of least privilege better than read access for all files. https://developers.google.com/drive/api/v2/about-auth https://developers.google.com/drive/api/v2/about-auth https://en.wikipedia.org/wiki/Principle_of_least_privilege https://en.wikipedia.org/wiki/Principle_of_least_privilege
      - slouch 7y ago
        I've found that drive.file doesn't work so well with existing Sheets https://stackoverflow.com/questions/61778469/append-rows-to-a-google-sheet-using-drive-file-scope https://stackoverflow.com/questions/61778469/append-rows-to-...

kamerontanseli 7y ago

Hi, the author here, That's the read-only scope that's required to query a single spreadsheet on the user's account. The API doesn't allow listing queries unless you also ask for drive permissions (which I don't). See more info here: https://developers.google.com/sheets/api/guides/authorizing https://developers.google.com/sheets/api/guides/authorizing

benatkin 7y ago
I'm famiilar with the Google Sheets API. The way to get fine-grained access to the Google Sheets API is by asking for a specific permission within Google Drive. While it involves two APIs, it's less permissions than giving access to all the spreadsheets in a google sheets account. Another way to go is to use a service account, and have the user share their sheet with your service account's email address.
- slouch 7y ago
  Hi, I'm not OP, but have built a similar thing. Are you suggesting to use https://www.googleapis.com/auth/drive.file https://www.googleapis.com/auth/drive.file instead of https://www.googleapis.com/auth/spreadsheets https://www.googleapis.com/auth/spreadsheets?
  - benatkin 7y ago
    Yeah. It gives read/write access to one file. The ideal for this use case would be read only access for one file. I think read/write access for one file follows the principle of least privilege better than read access for all files. https://developers.google.com/drive/api/v2/about-auth https://developers.google.com/drive/api/v2/about-auth https://en.wikipedia.org/wiki/Principle_of_least_privilege https://en.wikipedia.org/wiki/Principle_of_least_privilege
    - slouch 7y ago
      I've found that drive.file doesn't work so well with existing Sheets https://stackoverflow.com/questions/61778469/append-rows-to-a-google-sheet-using-drive-file-scope https://stackoverflow.com/questions/61778469/append-rows-to-...