search

Synthoid / ExportSheetData

Add-on for Google Sheets that allows data to be exported as JSON or XML.
MIT License
237 stars 46 forks source link

Permissions requested by the Addon #81

Closed iamyaj closed 5 years ago

iamyaj commented 5 years ago

Hi, great work on the tool. As a common user, I was a little concerned by the permissions the addon was requesting. In particular, the one about being able to access to all my google drive files, the email IDs that any file was being shared with, being able to add/remove etc. This seemed a little scary. Can you clarify why this is requested?

Thanks!

Synthoid commented 5 years ago

I sure can! I tried to keep the permissions needed to a minimum, but there's only so much granularity that Google gives me as an add-on developer.

I can't access only some of your files because I need to be able to search for the spreadsheet you are using to export the data beside it. To do that, and to be able to create a new file for the exported data, I have to use the Drive API which requires access to all of your files.

The email ID requests are so I can judge the permissions on the spreadsheet and export the file to your personal Drive if you don't have permission to access the same folder as the spreadsheet. I believe that permission is broader than I actually need in certain areas, but again there's only so fine I can get with those permissions.

Hopefully that has eased some of your concerns. If you'd like to double check the source code though, you can see for yourself that I'm not doing anything besides the bare minimum needed to let the add-on function. Feel free to let me know if you have any more concerns!