February 2016
Beginner to intermediate
456 pages
9h 18m
English
Content preview from Going GAS
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Chapter 15. Authentication and Security
Google Apps has been designed from the start to ensure that only authorized processes and people have access to its resources. One of its key strengths—letting users access data from anywhere using any device—is also a potential weakness. This is not something that VBA is too concerned with, because local Office relies on Windows file and user protection and the files likely reside on a desktop or private network.
Apps takes a multilayered approach to security, with user-based identification tied to individuals by Google authentication, and role-based protection defined by permissions. Conversely, resources belonging to individual users are protected from unwelcome script access, as scripts require users to have explicit authorization to access private resources defined by scope.
Figure 15-1 shows how authentication and permission combine to grant a user authorization to access and operate on a resource in an agreed-upon way.
OAuth 2.0
When a user first attempts to access an Apps resource, they first need to provide proof of who they are. Like many providers, Google uses an authentication process called OAuth 2.0. This process, shown in Figure 15-2, is analogous to logging in, except that credential management is delegated to an identity provider (Google), and the authentication process is multistage, verified through the passing of tokens.
Coming to grips with the authentication process is often one of the most challenging tasks for those ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access
More than 5,000 organizations count on O’Reilly
O’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.Julian F.
I wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.Addison B.
I’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.Amir M.
I'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.