Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Google Drive - limit access to KeeAnywhere files only and not the whole drive (like Dropbox-restricted) #398

Closed
khelge opened this issue Jun 2, 2024 · 3 comments
Milestone

Comments

@khelge
Copy link

khelge commented Jun 2, 2024

Could you change the permission requested by the addon when choosing google drive? Currently it seems like it requests access to my whole account, while you can limit the request to only access a specific folder or files created by the addon

https://www.googleapis.com/auth/drive.appfolder Allows access to the Application Data folder
https://www.googleapis.com/auth/drive.file Per-file access to files created or opened by the app. File authorization is granted on a per-user basis and is revoked when the user deauthorizes the app.

Or something like this: https://stackoverflow.com/questions/58041597/use-google-drive-from-an-app-with-a-folder-limit-like-dropbox

@ElizaZadura
Copy link

I just got a new PC, and adding a Google drive is blocked, don't know how to get around it. I'm still connected and using my Google drive storage (and the keypass key file that's stored there) on my laptop, with no problems.

@Jackabomb
Copy link
Contributor

I'm not the developer, but I do have two use cases that need the broader access level:

  • I share a database with someone who uses an iPhone, using KeePassium. The KeePassium app appears to have the drive.file permission, because that iPhone can only see items in the "KeePassium" folder of the shared Google Drive, and even then only those files and folders that the KeePassium app has created. (So that user can't see the 10 backups that KeeAnywhere creates). For us to be able to interoperate, this means KeeAnywhere has to have access to the whole drive. KeePassium can't break out of its "jail", so KeeAnywhere has to reach in.
  • Uploading a Keepass database to your Google Drive in the web interface may not work with apps that have the more limited scope. I think the apps wouldn't be able to see the newly uploaded file.

@Kyrodan Kyrodan added this to the 2.1.0 milestone Jun 17, 2024
@Kyrodan Kyrodan changed the title Google Drive - access to whole drive and not just KeeAnywhere files? Google Drive - limit access to KeeAnywhere files only and not the whole drive (like Dropbox-restricted) Jun 17, 2024
Kyrodan added a commit that referenced this issue Jun 17, 2024
@Kyrodan
Copy link
Owner

Kyrodan commented Jun 17, 2024

Implementation: Using drive.file permission.
Jackabomb's comment completely is completely right. Currently we have no option to create folders from KeeAnywhere, so saving is restricted to "root" folder. But maybe this helps to circumvent #393

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants