Google Sheets API returns “The caller does not hav

问题:

I've generated a server key in the API Manager and attempted to execute the following on my Mac:

curl 'https://sheets.googleapis.com/v4/spreadsheets/MySheetID?ranges=A1:B5&key=TheServerKeyIGeneratedInAPIManager'

But this is what it returns:

{
 "error": {
    "code": 403,
    "message": "The caller does not have permission",
    "status": "PERMISSION_DENIED"
  }
}

What am I doing wrong here?

回答1:

I know it is a little late to answer but for other people struggling with the same issue.
Just change the permission of the sheet to public on your drive so it can be accessed without authentication via API calls.

To change access:

1. Open sheet in google drive
2. On top right corner, click share
3. On bottom of prompt window, click advanced
4. Change permission to public or people with link (no signin required)

Send API request to fetch data from sheets without authentication.

Note: if the sheet contains sensitive data then it is not safe to make it public and rather do it with Authenticated access.

回答2:

To solve this issue, try to:

1. create a service account: https://console.developers.google.com/iam-admin/serviceaccounts/
2. in options, create a key: this key is your usual client_secret.json - use it the same way
3. add owner permission to this service account (Member name = service account ID = service account email ex: [e-mail]
4. copy the email address of your service account = service account ID
5. simply go in your browser to the Google sheet you want to interact with
6. go to SHARE on the top right of your screen
7. go to advanced settings and share it with email address of your service account ex: [e-mail]

It worked for me :)

回答3:

Make sure to pay attention to @KishanPatel's comment:

Also, you can share this sheet with specific email Ex. your service account (project) email. "client_email": "[e-mail]", This will allow to access sheet by your script.

回答4:

The easiest way is to fix using gcloud cli. More docs here https://cloud.google.com/pubsub/docs/quickstart-cli#before-you-begin

When you be able to use this tool, call

gcloud init

then check your active project and credentials

gcloud config configurations list

If it is not ok, make sure you are authenticated with the correct account:

gcloud auth list
* account 1
  account 2

Change to the project's account if not:

gcloud config set account `ACCOUNT`

Depending on the account, the project list will be different:

gcloud projects list

- project 1
- project 2...

Switch to intended project:

gcloud config set project `PROJECT NAME`

Then Create Application Default Credentials with gcloud auth application-default login, and then google-cloud will automatically detect such credentials.