First, it was Craigslist, next it's Zapier

Re:First, it was Craigslist, next it's Zapier by benatkin on Saturday May 09, 2020 @06:04PM (#23128655)

I'm famiilar with the Google Sheets API. The way to get fine-grained access to the Google Sheets API is by asking for a specific permission within Google Drive. While it involves two APIs, it's less permissions than giving access to all the spreadsheets in a google sheets account.

Another way to go is to use a service account, and have the user share their sheet with your service account's email address.

[ Parent | on HN ]

Re:First, it was Craigslist, next it's Zapier by slouch on Sunday May 10, 2020 @09:03AM (#23132289)

Hi, I'm not OP, but have built a similar thing. Are you suggesting to use https://www.googleapis.com/auth/drive.file instead of https://www.googleapis.com/auth/spreadsheets?

[ Parent | on HN ]

Re:First, it was Craigslist, next it's Zapier by benatkin on Sunday May 10, 2020 @10:06AM (#23132654)

Yeah. It gives read/write access to one file. The ideal for this use case would be read only access for one file. I think read/write access for one file follows the principle of least privilege better than read access for all files. https://developers.google.com/drive/api/v2/about-auth https://en.wikipedia.org/wiki/Principle_of_least_privilege

[ Parent | on HN ]

Re:First, it was Craigslist, next it's Zapier by slouch on Wednesday May 13, 2020 @09:35PM (#23174178)

I've found that drive.file doesn't work so well with existing Sheets https://stackoverflow.com/questions/61778469/append-rows-to-...

[ Parent | on HN ]