Restricted permissions for PATs
With the Drive SDK currently under development, now is the perfect time to integrate a key feature regarding Drive Personal Access Tokens (PATs). It is essential that PATs can be granted individual read and/or write permissions and, furthermore, be restricted to specific directories.
For example, I might want to create a PAT that allows read and write access only within the "videos/" directory (and, naturally, any of its subdirectories), while having read access to other directories completely blocked.
This granular control will address most of the potential security issues that could arise from the gradual opening up of the system to third-party clients.
2
votes