Code security questions on Google Apps Script

0
votes

I am looking at developing an app to leverage the Google Doc side of Google Apps Scripts. I have a couple of questions about the security of Google Apps Scripts.

How easy is it for a user to copy the code from a shared Google Apps Script? Is there any way to prevent this?

Are there any plans to create a similar API for the Google App Engine for manipulating Google Documents( not just listing what documents are available) so that document manipulation could be done on the server side?

Is there a way planned to share out Google Apps Scripts per Google User or per group, and not just "Publish to the World" or "Within a domain" as is currently the case?

Thanks

Bob

1
javascriptgoogle-apps-script

1 Answers

0
votes

About copying the shared script: dont share it there is no need to share. Publish as webapp and share the url. Nobody can get to the script that way.

About opening the api: no plans that i know of (im not from google), but note that apps script does run server side.

The last one: publish to your domain and run as owner, then in your handler (Roget) use user services to tell the active user email. Use group services to see it she belongs to a group. If user shouldnt access show an access error.

Voila.