search

mindyjw / gdocbackup

Automatically exported from code.google.com/p/gdocbackup
0 stars 0 forks source link

GAPPS-lacks ability only download one user's docs, not all #78

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago 
What steps will reproduce the problem?
1. select Google Apps
2. enter Oauth secret key
3. enter user name and pw

I am the admin for our GAPPS account, I only wanted to backup my docs. When I 
exec this utility, documents belonging to all users are downloaded (including 
ones that are not shared with me, such as someone else's diary on their docs). 
The users don't even know I downloaded their diary...pretty serious security 
flaw I must say.

Original issue reported on code.google.com by arn...@bi101.com on 14 Oct 2011 at 5:45

GoogleCodeExporter commented 9 years ago 
No, it's not a security flaw of Google APIs (GDocBackup uses the official 
Google APIs).
Using the OAuth domain keys you (as administrator) are able to interact with 
the whole domain. So you can export all documents of all of your users. This is 
the behaviour of the Google APIs.

If you want to download only your documents use GDocBackup in "normal mode" 
(not in "Google Apps mode").  Use yourusername@yourdomain and your password in 
the Main section of the Config window.

Original comment by fht...@gmail.com on 14 Oct 2011 at 7:10