CODEWITHSUNDEEP
google-drive-api
Renaud Cerrato
Renaud Cerrato

Reputation: 1347

Listing files with Google Drive API returns out-of-scope results (again)

I'm an Android developer, using the Google Drive API for month now.

I got a rise in customer complaints recently (the app is live): my app is only using the drive.file and the drive.appdata scopes, but I noticed that search queries are now returning files not created (nor shared!) by my app! Almost thousands of results.

This can be easily verified using the API Explorer by only checking the "drive.file" scope with an empty query string (or a folder query only).

The same thing happens using the change API: I'm now getting a change for every file recently viewed by the owner!

This is clearly an out-of-scope bug! There was a similar bug last year, but it seems the problem is back:

Listing files with search query returns out-of-scope results (drive.files.list call, using drive.files scope)

My app is clearly broken, and that's a big privacy concern.

Upvotes: 1

Views: 237

Answers (1)

Chris Keller
Chris Keller

Reputation: 404

We've isolated a Google Drive server issue and have implemented a temporary fix. You should no longer be able to see the issue.

Thanks for the report!

Upvotes: 1

Related Questions