Search code examples
google-drive-apislack

Access rights hierarchy


Drive-SDK Devs, thought you would be the best to ask. Looking at Slack - Google drive integration for example, it is asking to give permission to following:

  1. View the files on your Google Drive ...
  2. View and manage google Drive files and folders that you have opened or created with this app.

Questions is about the hierarchy of this capability based security levels:

Does this mean that Slack has view access to all google drive files and manage to those opened/created by Slack

or is (4) prevailing in which case (1) is superfluous?

enter image description here


Solution

  • The two are additive to the ACL. So Slack has full r/w rights to any files which are created/opened by it. Any files which have not been created/opened by Slack are able to be read by Slack, but may not be changed/deleted.