正确使用组的权限 [英] Correct Usage Of Groups For Permissions

问题描述

我已经发布了一个使用开发人员帐户运行的部署.在部署设置中，我具有一个称为主管"的角色.我已将一个Google组分配给该角色，[e-mail].

I have published a deployment that runs with the developer account. In the deployment settings I have a role called "Supervisors". I have assigned a google group to that role, [e-mail].

使用开发人员帐户运行部署时，一切正常.但是当该部署由其他任何用户运行时，我将收到以下错误:

When the deployment runs with the developer account, everythings works fine. But when the deployment is ran by any other user, I get the following error:

appmaker.application.permission.GroupsPermission:读取组[e-mail]时出错.注意:部署者[e-mail]必须有权访问该组. 例外: 例外:您无权查看该组的成员列表:[e-mail]

appmaker.application.permission.GroupsPermission: Error reading group [e-mail]. Note: The deployer [e-mail] must have access to this group. Exception: Exception: You do not have permission to view the member list for the group: [e-mail]

配置组设置，以便域中的每个人都可以查看成员身份；此外，开发者帐户是该组的成员.

The group settings are configured so that everyone in the domain can view the membership; moreover, the developer account is a member of the group.

我已检查了中提供的信息这篇文章以及在这篇文章中，但都没有他们似乎有所帮助.开发者帐户已于72小时前添加到该组中，并且部署已于48小时前发布.

I have checked the information provided in this post and also in this post but none of them seem to help. The developer account was added to the group more than 72 hours ago and the deployment was published more than 48 hours ago.

到目前为止，一切都使我相信这是一个错误.在与G Suite AppMaker团队一起打开支持通知单之前，我想知道是否有人遇到过相同的问题以及是否有解决方案.

So far, everything is leading me to believe this is a bug. Before I open a support ticket with the G Suite AppMaker team, I would like to know if anyone has had the same issue and if there was a solution to it.

提前感谢您的帮助！

更新: 现在，当开发者帐户运行该应用程序时，它还会显示错误！

UPDATE: Now it is also showing the error when the app is ran by the developer account!

推荐答案

碰巧的是，AppMaker团队纠正了一个有问题的行为，该行为允许在没有正确设置组设置权限的情况下从组中读取电子邮件地址.为了使该应用程序再次正常运行，我必须确保对群组权限具有查看电子邮件地址的正确访问权限； 组设置->权限->访问权限->查看电子邮件地址.

It so happens that the AppMaker team corrected a buggy behavior that allowed the reading of email addresses from groups without having the permission properly set up in the group settings. To make the app work again I had to make sure the group permission had the proper access for viewing email addresses; Group Settings -> Permissions -> Access permissions -> View Email Addresses.

一旦我将权限更改为组的所有成员，我便会重新发布该应用，然后它又可以正常工作了.

Once I changed the permission to All members of the group, I proceeded to republish the app and then it worked again.

更新12/31/2019

除了上面已经提到的，您还需要确保该组对组织中的所有成员可见:

On top of the already mentioned above, you also need to make sure that the group is visible to all members in the organization:

组设置->权限->基本权限->组可见性.

这篇关于正确使用组的权限的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！