使用Python API为Google Drive文件夹授予组织级访问权限

import httplib2
from apiclient import discovery # For older versions, consider googleapiclient.discovery for newer

# 假设您已有一个函数来获取并刷新Google Drive API的凭据
# 例如：
# from google_auth_oauthlib.flow import InstalledAppFlow
# from google.auth.transport.requests import Request
# import pickle
# import os
# SCOPES = ['https://www.googleapis.com/auth/drive']
# def get_google_drive_credentials():
#     creds = None
#     if os.path.exists('token.pickle'):
#         with open('token.pickle', 'rb') as token:
#             creds = pickle.load(token)
#     if not creds or not creds.valid:
#         if creds and creds.expired and creds.refresh_token:
#             creds.refresh(Request())
#         else:
#             flow = InstalledAppFlow.from_client_secrets_file(
#                 'credentials.json', SCOPES)
#             creds = flow.run_local_server(port=0)
#         with open('token.pickle', 'wb') as token:
#             pickle.dump(creds, token)
#     return creds

credentials = get_google_drive_credentials() # 请替换为您的凭据获取逻辑
http = credentials.authorize(httplib2.Http())
drive_service = discovery.build('drive', 'v3', http=http)

# 创建文件夹
folder_metadata = {
    'name': '我的组织共享文件夹',
    'mimeType': "application/vnd.google-apps.folder",
}
new_folder = drive_service.files().create(
    body=folder_metadata,
    supportsAllDrives=True # 如果在共享云端硬盘中创建，此参数很重要
).execute()

print(f"文件夹 '{new_folder['name']}' 已创建，ID: {new_folder['id']}")

# 授予组织级访问权限
permission_body = {
    "role": "writer", # 可以是 'reader', 'writer', 'commenter'
    "type": "domain",
    "allowFileDiscovery": True,
    "domain": "yourdomain.com" # 请替换为您的实际Google Workspace域名
}

permission_res = drive_service.permissions().create(
    fileId=new_folder["id"],
    body=permission_body,
    supportsAllDrives=True, # 同样适用于共享云端硬盘
    fields='*' # 请求返回所有权限字段以便验证
).execute()

print("组织级访问权限已设置成功。")
print(f"权限详情: {permission_res}")

import httplib2
from apiclient import discovery
# from google_auth_oauthlib.flow import InstalledAppFlow
# from google.auth.transport.requests import Request
# import pickle
# import os

# --- 假设的凭据获取函数 ---
# 请根据您的实际认证方式替换此函数。
# 示例使用了一个占位符，您可能需要实现OAuth 2.0流程或服务帐号认证。
def get_google_drive_credentials():
    # 实际项目中，这里会包含您的认证逻辑，例如：
    # SCOPES = ['https://www.googleapis.com/auth/drive']
    # creds = None
    # if os.path.exists('token.pickle'):
    #     with open('token.pickle', 'rb') as token:
    #         creds = pickle.load(token)
    # if not creds or not creds.valid:
    #     if creds and creds.expired and creds.refresh_token:
    #         creds.refresh(Request())
    #     else:
    #         flow = InstalledAppFlow.from_client_secrets_file(
    #             'credentials.json', SCOPES) # 您的客户端凭据文件
    #         creds = flow.run_local_server(port=0)
    #     with open('token.pickle', 'wb') as token:
    #         pickle.dump(creds, token)
    # return creds
    raise NotImplementedError("请实现您的Google Drive API凭据获取逻辑。")

# --- 主程序逻辑 ---
if __name__ == "__main__":
    try:
        credentials = get_google_drive_credentials()
        http = credentials.authorize(httplib2.Http())
        drive_service = discovery.build('drive', 'v3', http=http)

        # 1. 创建文件夹
        folder_name = '我的组织共享文件夹_API_示例'
        folder_metadata = {
            'name': folder_name,
            'mimeType': "application/vnd.google-apps.folder",
        }
        print(f"正在创建文件夹 '{folder_name}'...")
        new_folder = drive_service.files().create(
            body=folder_metadata,
            supportsAllDrives=True
        ).execute()
        print(f"文件夹 '{new_folder['name']}' 已创建，ID: {new_folder['id']}")

        # 2. 授予组织级访问权限
        # 请务必将 "yourdomain.com" 替换为您的实际Google Workspace域名
        organization_domain = "yourdomain.com"
        permission_body = {
            "role": "writer", # 可选 'reader', 'writer', 'commenter'
            "type": "domain",
            "allowFileDiscovery": True,
            "domain": organization_domain
        }

        print(f"正在为文件夹 '{folder_name}' 授予域 '{organization_domain}' 的访问权限...")
        permission_res = drive_service.permissions().create(
            fileId=new_folder["id"],
            body=permission_body,
            supportsAllDrives=True,
            fields='*'
        ).execute()

        print("组织级访问权限已设置成功。")
        print(f"权限详情: {permission_res}")

        print(f"\n您可以在Google Drive中查看此文件夹: https://drive.google.com/drive/folders/{new_folder['id']}")

    except Exception as e:
        print(f"发生错误: {e}")