code.pyret.org icon indicating copy to clipboard operation
code.pyret.org copied to clipboard

Cannot get fully private sheets with my-spreadsheet, likely regression when reducing initial permissions

Open jpolitz opened this issue 4 years ago • 0 comments

Create a spreadsheet with create-spreadsheet("some name"), then access it with my-spreadsheet("some name"), the API reports that permission is denied, but reports the ID for the file!

Guess: This is likely a Drive config issue where requests for sheets by ID are being sent without credentials because of the always-haunting https://github.com/brownplt/code.pyret.org/issues/255.

I make this guess because the first step happens – getting the ID for the file by name, which ought to require some permissions to do! Need to poke into that part of the auth code around sheets API stuff. Probably around

https://github.com/brownplt/code.pyret.org/blob/18af101f37e77c1610ee872270f528c2f091ca51/src/web/js/google-apis/sheets.js#L749

Might need another API entrypoint for "get private sheet by id".

jpolitz avatar Dec 02 '21 04:12 jpolitz