Create a spreadsheet with create-spreadsheet("some name"), then access it with my-spreadsheet("some name"), the API reports that permission is denied, but reports the ID for the file!
I make this guess because the first step happens – getting the ID for the file by name, which ought to require some permissions to do! Need to poke into that part of the auth code around sheets API stuff. Probably around
Create a spreadsheet with
create-spreadsheet("some name"), then access it withmy-spreadsheet("some name"), the API reports that permission is denied, but reports the ID for the file!Guess: This is likely a Drive config issue where requests for sheets by ID are being sent without credentials because of the always-haunting https://github.com/brownplt/code.pyret.org/issues/255.
I make this guess because the first step happens – getting the ID for the file by name, which ought to require some permissions to do! Need to poke into that part of the auth code around sheets API stuff. Probably around
https://github.com/brownplt/code.pyret.org/blob/18af101f37e77c1610ee872270f528c2f091ca51/src/web/js/google-apis/sheets.js#L749
Might need another API entrypoint for "get private sheet by id".