How to protect script

[Ashish Chauhan]

Hi 

Is there any way to protect script code to protect from the users who have access to the google sheet.

Is there any way to encript the whole script?

Regards,

Ashiss

[CBMServices Web]

None that I know of. But if you trust the persons enough to give the edit access, then you should trust them not to mess with the code.

Alternatively what you can do is remove the majority of the code out of the script and turn it into a webapp that can be invoked from the spreadsheet code. That would remove majority of code out of view/edit capability of the users. You can also turn code into an add-on, but that may be a lot of work for one spreadsheet deployment.

--
You received this message because you are subscribed to the Google Groups "Google Apps Script Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email to google-apps-script-c...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-script-community/CAKGrJp8_afuHr%2BiXqA%3DJ2o%2B1JkG0fr5EPymY1hhZueNiPgo7CA%40mail.gmail.com.

[Martin Hawksey]

Hi Ashiss,

George provides some great tips. Some additional pointers are to look at 'JavaScript Obfuscation' e.g. https://obfuscator.io/. Given obfuscation adds additional code it can slow down your execution and unless you are selective about what you obscure can break your code (an example of obfuscation can be viewed if you make a copy of this sheet https://docs.google.com/spreadsheets/d/18AU-vAfGnhBPFcPAFS5LzjJWKk6CBTdr6hBQBYKVTXg/copy - using the code example here https://developers.google.com/apps-script/guides/menus#custom_menus_in_google_docs_sheets_slides_or_forms

If you are collaborating with Sheet users outside your organisation Google recently added a new feature to email the script owner when changes are made:

February 14, 2022

Owners receive email alerts when someone outside the owner's organization edits a script project in the new integrated development environment (IDE).

• For container-bound scripts: If someone outside the container owner’s organization creates or edits a container-bound script project, the container owner receives an email notification.

• For standalone scripts: If someone outside the script project owner's organization edits a standalone script project, the script project owner receives an email notification.

 Hope this helps

Martin

[Emerson Maia]

Good morning, a simple way is for you to create libraries from your code and call them in your project.

--

[CBMServices Web]

That would not work because he would have to give library access to all his editors to allow them to be able to run the code.

I liked Martin's suggestion of Obfuscation. Its a good way to make code unreadable and hopefully nobody plays with it.

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-script-community/CADH-QrDha7qv0ST33zvo%2BugwK42mKdERe3nk_PTLNP%3DMFBwCKA%40mail.gmail.com.

[Ashish Chauhan]

Thanks Martin. That will work for me.

Regards,

Ashish

To view this discussion on the web visit https://groups.google.com/d/msgid/google-apps-script-community/3f7da623-51cb-4199-b7ee-408e97162c48n%40googlegroups.com.