I’m worried

Gantter request too many permissions from google docs

Hello.

I like your project but I have stopped using it because it requests too many permissions from google docs. Why would your program need to list all of my google docs documents and be able to download any of them, even when I am not online???
5 people have
this question
+1
Reply
  • First, Gantter doesn't force you to use it with Google Drive. You can register your Gantter account, login using it, save your projects to Gantter, share your projects. In this case your Google account is not used at all.

    Permissions to manage documents and spreadsheets are required for legacy Gantter files which were stored in Google Docs (not Drive) as spreadsheets or documents. Many of our users know that before Google Drive integration Gantter had limited Google Docs integration, so for our users to be able to open their old files this permission is necessary.

    "Perform these operations when I'm not using the application" fixes a number of issues (at Google's side) when the application talks to Google Drive. This permission is forced by URL parameter access_type=offline. All Google's own examples (see https://developers.google.com/drive/c...) use setting access type to offline.

    Please note that an application can have access to Google Drive only if installed by the user from Chrome Web Store. Please also note that besides these permissions Google Drive has file-level permissions, so one Google Drive application cannot have access to a file of another application unless the user explicitly chooses the other application in "Open with" menu.

    Anyway, as written above, you can use Gantter even if you don't want it to access your Google Drive.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. happy, confident, thankful, excited kidding, amused, unsure, silly indifferent, undecided, unconcerned sad, anxious, confused, frustrated

  • 1
    Hi and thank you for the reply. New user here and would like a bit more info please.

    The only reason we are looking at using Gantter is for google drive integration. At face value the permissions seem too invasive. I really like the product and would like a better understanding of why and what purpose you have asked for each of the 5 bullet item permissions requested.

    There is only one reference to Google Docs and that is under the spreadsheet bullet. The main bullet I am concerned about is View and manage any of your documents and files in Google Drive.

    Are you saying that even if you ask for this permission and we allow it. The Google Drive file permissions will prevent opening other documents spreadsheets not opened or saved using the Gantter App?

    I understand the view and manage google drive files that have been opened or created using the Gantter app. If you could provide a more detailed explanation of each of the bullet item permissions and sub-bullets I would appreciate it. That would allow me to provide our eval team with the information needed to either go forward with Gantter or hold off.

    I understand we can use Gantter even if we don't want it to access Google Drive but again that is the reason we are interested in it.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated indifferent, undecided, unconcerned kidding, amused, unsure, silly happy, confident, thankful, excited

  • I agree with Whitewash. Our team has been a real fan of this app and we look forward to supporting it through its development cycle and beyond. We were really excited to be able to use this with Google Drive.

    However, this is a tremendous show stopper, to the the point we have had meetings about scrapping use of the application all together in favor of something else - all for this one reason.

    We have proprietary and private information in our files. Of course we refuse to allow you List, and Search any of our document; Download any and all of our documents; you certainly may not copy, edit, or delete any of our files or documents; and we do not give you permission Share our files with anyone.

    The legacy reasons you gave just don't make sense, nor does the link full of engineering code. If you have a previous product that is incompatible with Google Drive, then it should not be used with Google Drive. Sure, we can use it without Google Drive, but then, as Whitewash pointed out, what is the point?

    Please fix this so we, and other companies who have come to really love this solution can move forward with the confidence you have our best interests in mind.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. happy, confident, thankful, excited kidding, amused, unsure, silly indifferent, undecided, unconcerned sad, anxious, confused, frustrated

  • I'm in the same position the permissions being asked for a just too broad. I'd love to roll this out across my user base (and heck, even pay for the rights to do so - I know it's free today), but not when as far as I can see I give unfettered access to all Drive files.

    While I accept eh developers position here, it's optically so bad I just can't bring myself to allow it and I really want to!
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated indifferent, undecided, unconcerned kidding, amused, unsure, silly happy, confident, thankful, excited

  • 1
    same story over here. We simply won't give that kind of permission to any external unit.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated indifferent, undecided, unconcerned kidding, amused, unsure, silly happy, confident, thankful, excited

  • I’m potentially concerned
    1
    Hmm... I've only just really noticed this - the other posters seem right as well - does it really need this much access?

    If we're NOT using legacy Google Docs stuff - i.e. only things created since switching to GoogleDrive, do you still need this much access?

    Cheers
    BC
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated indifferent, undecided, unconcerned kidding, amused, unsure, silly happy, confident, thankful, excited

  • I’m disappointed
    1
    This is interesting. I agree with everyone here. The first thing I noticed were the inappropriate permissions and found this thread. I won't be using this product, even though it looks promising.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. happy, confident, thankful, excited kidding, amused, unsure, silly indifferent, undecided, unconcerned sad, anxious, confused, frustrated

  • We thank all our users who contributed opinions about this issue. We've heard you!

    I hope you've already noticed that while using "Open from Google Drive" Gantter doesn't request as many permissions as before. Now Gantter requests only permissions relevant to its own files! I hope this answers all your concerns about security.

    For users who have their projects in our very old format (Google Docs/Spreadsheets) we have a new menu item "Open from Google Docs (legacy)", which asks for more permissions.

    This fixes the security issue for most of our users while our old users still have the ability to open their files.

    Thank you again!
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. happy, confident, thankful, excited kidding, amused, unsure, silly indifferent, undecided, unconcerned sad, anxious, confused, frustrated

  • I’m suspicious...
    It still asks:

    View and manage any of your documents and files in Google Drive

    Perform these operations when I'm not using the application

    which is too much!

    Also, when you try to go to the app web page, the site's security certificate has problems...
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. happy, confident, thankful, excited kidding, amused, unsure, silly indifferent, undecided, unconcerned sad, anxious, confused, frustrated

  • I don't understand what you are referring to Volodymyr when you say, "Open from Google Drive".

    I go to Drive and click on the red "Create" button. I see all the "App" choices , including Gantter. I select Gantter and it says what Steve says it says, "View and manage any of your documents and files in Google Drive ".

    That doesn't sound fixed to me, and is a deal killer.

    Let me know if there is another way.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. happy, confident, thankful, excited kidding, amused, unsure, silly indifferent, undecided, unconcerned sad, anxious, confused, frustrated

  • Volodymyr,

    Are the permissions equally limited if I add Gantter to my Google Apps applications by way of the Google Apps Marketplace? The statement on permissions there is vague, but it does not say anything about the app only accessing the files associated with Gantter.

    If you don't know where I'm talking about, it starts with:
    https://www.google.com/enterprise/mar... ....

    Thanks.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated indifferent, undecided, unconcerned kidding, amused, unsure, silly happy, confident, thankful, excited

  • I'm not sure if this is helpful, but the data access section says the following:

    Data access

    Approval Needed Approval Needed
    Enabling data access allows the third party to impersonate the users in your domain and access their data with the following APIs:

    Learn more

    Docs (Read/Write)
    This application loads and saves Gantter project files directly into your Google documents list.

    Spreadsheets (Read/Write)
    This application loads and saves Gantter project files directly into your Google documents list.

    Calendar (Read/Write)
    This application integrates with your Google calendar events.

    Contacts (Read/Write)
    This application allows you to reference your Google contacts.

    ***
    It is unclear to me in reading this whether the read/write is limited to the files associated with Gantter. (I'm not sure if that ambiguity is strictly Google's fault or if there are different wordings for different situations).

    It does look like I would be able to change some aspects of Gantter's permissions after the fact. (http://support.google.com/a/bin/answe...)
    I suppose I can install and revoke if I don't like what I see... but I thought it might be helpful if you shared what you could here as well.

    Thanks
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. happy, confident, thankful, excited kidding, amused, unsure, silly indifferent, undecided, unconcerned sad, anxious, confused, frustrated

  • Greetings,

    I'm still confused. I just tried to save a test project to my Google Drive and encounter the request for permissions copied below. This appears to give Gantter permission to do essentially anything with any of the files on my Google Drive including creating, modifying and deleting files whether or not they're Gantter files.

    Is this really correct?

    Thanks

    ------------------------------
    View and manage the files and documents in your Google Drive

    More info

    Upload, download, update, and delete files in your Google Drive
    Create, access, update, and delete native Google documents in your Google Drive
    Manage files and documents in your Google Drive (e.g., search, organize, and modify permissions and other metadata, such as title)

    View and manage Google Drive files that you have opened or created with this app

    More info

    View files from Google Drive that you have opened with this app or that are shared publicly
    Save changes to files that you have opened with this app
    Create new files in Google Drive using this app

    View your email address

    More info

    View the email address associated with your account

    View basic information about your account

    More info

    View your name, public profile URL, and photo
    View your gender and birthdate
    View your country, language, and timezone

    File Central for smartapp.com and Google will use this information in accordance with their respective terms of service and privacy policies.

    ------------------------------
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated indifferent, undecided, unconcerned kidding, amused, unsure, silly happy, confident, thankful, excited

  • Hmmm -- I just added Ganttr to my Google Drive app list and the permissions it seeks (January 16, 2014) is to access "metadata" for any documents I have stored on Google Drive, not just Ganttr documents or legacy spreadsheet documents. This is what it says:

    View metadata for files and documents in your Google Drive

    This appears to refer to metadata for all files not just Ganttr files and documents. Am I misreading this?
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated indifferent, undecided, unconcerned kidding, amused, unsure, silly happy, confident, thankful, excited

  • "View and manage the files and documents in your Google Drive" is still needed, why does Ganttr want access to all my documents rather than just the ones it creates? I'm no longer using it because of this unfortunately.

    Hmm, this makes things a little murkier;

    https://support.google.com/drive/answ...

    From the look of it, despite an app having access to "all files" it isn't authorized to access all of them. Not terribly intuitive and I'd welcome some clarity from people who know more.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated indifferent, undecided, unconcerned kidding, amused, unsure, silly happy, confident, thankful, excited

  • This app http://cellspyapps.org/mmguardian would be a great help for every parent who is obsessed with kids' security.
  • (some HTML allowed)
    How does this make you feel?
    Add Image
    I'm

    e.g. sad, anxious, confused, frustrated indifferent, undecided, unconcerned kidding, amused, unsure, silly happy, confident, thankful, excited