通过Python API实现Google Drive文件夹的组织级共享

from apiclient import discovery
import httplib2 # 确保已安装 httplib2 库

# 假设 get_google_drive_credentials() 函数已正确实现，
# 用于获取并授权Google Drive API的凭据。
# 例如：
# from google.oauth2.credentials import Credentials
# from google_auth_oauthlib.flow import InstalledAppFlow
# from google.auth.transport.requests import Request
# import os
# import pickle
#
# SCOPES = ['https://www.googleapis.com/auth/drive']
#
# def get_google_drive_credentials():
#     creds = None
#     if os.path.exists('token.pickle'):
#         with open('token.pickle', 'rb') as token:
#             creds = pickle.load(token)
#     if not creds or not creds.valid:
#         if creds and creds.expired and creds.refresh_token:
#             creds.refresh(Request())
#         else:
#             flow = InstalledAppFlow.from_client_secrets_file(
#                 'credentials.json', SCOPES)
#             creds = flow.run_local_server(port=0)
#         with open('token.pickle', 'wb') as token:
#             pickle.dump(creds, token)
#     return creds

credentials = get_google_drive_credentials()
http = credentials.authorize(httplib2.Http())
drive_service = discovery.build('drive', 'v3', http=http)

# 定义文件夹体
folder_body = {
    'name': '我的组织共享文件夹',  # 文件夹名称
    'mimeType': "application/vnd.google-apps.folder", # 指定MIME类型为文件夹
}

# 创建文件夹，并指定支持共享云端硬盘
new_folder = drive_service.files().create(body=folder_body, supportsAllDrives=True).execute()
print(f"文件夹 '{new_folder['name']}' 创建成功，ID: {new_folder['id']}")

# new_folder 变量来自上一步骤的执行结果

# 定义权限体
permission_body = {
    "role": "writer",  # 授予的权限角色，例如 "reader", "writer", "commenter"
    "type": "domain",  # 权限类型，指定为 "domain" 表示整个域
    "allowFileDiscovery": True, # 允许域内用户通过搜索发现此文件/文件夹
    "domain": "your-domain.com" # 替换为你的实际Google Workspace域名，例如 "example.com"
}

# 为新建文件夹创建权限
# fileId 参数指向要设置权限的文件夹ID
# supportsAllDrives=True 同样适用于权限设置，如果文件夹在共享云端硬盘中
res = drive_service.permissions().create(
    body=permission_body,
    fileId=new_folder["id"],
    supportsAllDrives=True,
    fields='*' # 请求返回所有字段以便查看结果
).execute()

print("域级权限设置结果:")
print(res)

from apiclient import discovery
import httplib2
import os
import pickle
from google.oauth2.credentials import Credentials
from google_auth_oauthlib.flow import InstalledAppFlow
from google.auth.transport.requests import Request

# Google Drive API 授权范围
SCOPES = ['https://www.googleapis.com/auth/drive']

def get_google_drive_credentials():
    """
    获取并授权Google Drive API的凭据。
    此函数会尝试从 'token.pickle' 加载凭据，如果不存在或过期，
    则会通过 'credentials.json' 文件进行授权流程，并保存凭据。
    """
    creds = None
    if os.path.exists('token.pickle'):
        with open('token.pickle', 'rb') as token:
            creds = pickle.load(token)
    if not creds or not creds.valid:
        if creds and creds.expired and creds.refresh_token:
            creds.refresh(Request())
        else:
            flow = InstalledAppFlow.from_client_secrets_file(
                'credentials.json', SCOPES)
            creds = flow.run_local_server(port=0)
        with open('token.pickle', 'wb') as token:
            pickle.dump(creds, token)
    return creds

def create_and_share_folder_with_domain(folder_name, domain_name, role="writer"):
    """
    创建一个Google Drive文件夹并将其共享给整个域。

    Args:
        folder_name (str): 要创建的文件夹的名称。
        domain_name (str): 你的Google Workspace域名（例如 'example.com'）。
        role (str): 授予域的权限角色（例如 'reader', 'writer'）。
    """
    credentials = get_google_drive_credentials()
    http = credentials.authorize(httplib2.Http())
    drive_service = discovery.build('drive', 'v3', http=http)

    # 1. 创建文件夹
    folder_body = {
        'name': folder_name,
        'mimeType': "application/vnd.google-apps.folder",
    }
    try:
        new_folder = drive_service.files().create(body=folder_body, supportsAllDrives=True).execute()
        print(f"文件夹 '{new_folder['name']}' (ID: {new_folder['id']}) 创建成功。")
    except Exception as e:
        print(f"创建文件夹失败: {e}")
        return

    # 2. 创建域级权限
    permission_body = {
        "role": role,
        "type": "domain",
        "allowFileDiscovery": True,
        "domain": domain_name
    }
    try:
        res = drive_service.permissions().create(
            body=permission_body,
            fileId=new_folder["id"],
            supportsAllDrives=True,
            fields='*'
        ).execute()
        print(f"成功为域 '{domain_name}' 设置 '{role}' 权限。")
        print("权限设置详情:", res)
    except Exception as e:
        print(f"设置域级权限失败: {e}")

if __name__ == '__main__':
    # 请替换为你的实际文件夹名称和域名
    my_folder_name = "我的团队共享资料"
    my_domain = "your-domain.com" # !!! 替换为你的真实域名 !!!

    create_and_share_folder_with_domain(my_folder_name, my_domain, role="writer")