Apps Script Execution Permissions for Google Sheets

1
votes

How can I allow users with permissions of "View Only" the ability to execute an apps script in a spreadsheet?

I've created a custom menu choice triggered by onOpen() that launches the script fine for anyone with edit permissions. However, onOpen() does not run for anyone with only view/comment permissions (consistent with the documentation) and thus the menu is not created and there is no way to launch the script.

Ideally, I would like view only users to view and execute the script, but not modify it.

3
google-apps-scriptgoogle-sheets
The first thing that you need to know about "View Only" is that if you do not explicitly check the box to prevent the viewer from copying the file, then there is no real security for your code. The viewer can just make a copy of the file, and then they can view the code in the copy. Because you are using the reserved function name onOpen() that is a simple trigger versus an "Installed" trigger. But even an "installed" trigger will not run when the file is in "View Only" mode. So, if you want to prevent the user from seeing the code, you must use an Add-on. You can publish it unlisted. - Alan Wells
I don't mind if they view the code. I want to keep them from modifying it. - Max
You could try a "library", which is just a reference to another Apps Script file. That will keep people from seeing or modifying the code. It may run slower, and you'll still have the problem with the trigger not running. - Alan Wells

3 Answers

0
votes

If executing the script results in modifying any content of the sheet then I think it's reasonable to expect only those users with edit rights will be able to run the script. In view of this I am not sure I understand the question at all.

0
votes

Ideally, I would like view only users to view and execute the script, but not modify it.

Simple triggers and installable triggers that are able to use SpreadsheetApp.getUi like onOpen and onEdit are executed only for users with edit permissions.

Instead of using a custom menu you could add a link to script published as web app allowed to be accessed by anyone and run. The link could be added to a cell or to an image.

Related

Threads with answers with score > 0

Threads with one answer with 0 score

0
votes

I just spend a few days on this and don't believe you can! In order to let an anonymous user execute a web app google app script, you have to set it to "Anyone on the internet with this link can edit" in the app script sharing options. Plus you have to make the sheets the script touches editable by anyone. Plus you have to deploy it as executed by you and everyone has access.

No sir, I don't like it. The app script should be executable without being editable. Google's choice makes no sense, especially considering how difficult they've made it to share content with anonymous users. You'd think they would allow an execute privilege without a modify privilege. (Are opinions allowed in answers?)