security - Google Drive SDK Permissions by file/folder -


We are creating a desktop application that connects to Google Drive and performs some processing in user-selected pictures. Note that the pictures are stored in any way (assuming the user has uploaded them using the desktop Google Drive sync tool.)

According to this, the app officially runs the drive app You can request permission for files created, or for all files

It seems that if you create a web Google Drive application, then allow the user to file a file-by-file basis. Will have the option.

However, what we want to do is allow users to view our Google Drive desktop applications folder, so our software users can clearly see the folders / files given by users only.

Otherwise we need access to all of their files, and this is a security concern for the user (if they have all types of files, then anything can be sensitive, they can give us that If we are only working with a subset)

Note: In my trial I am using OAuth 2, and it works fine. It is only that we are forced to request full permissions. We are using the net, it is not that it matters.

Thank you.

As you mentioned, permission per folder will be ideal. We know about this facility and there are plans for this in the future release. Some other interesting scope would be to access only a few file types. Unfortunately is not yet available and if you're building a desktop application, you get trapped using the full access drive area (or using a read-only scope, if you do not need to edit the files) gone.

Comments

Popular posts from this blog

Python SQLAlchemy:AttributeError: Neither 'Column' object nor 'Comparator' object has an attribute 'schema' -

java - How not to audit a join table and related entities using Hibernate Envers? -

mongodb - CakePHP paginator ignoring order, but only for certain values -