أتمتة مراجعة ملفات Google Drive المفتوحة للعامة

const REPORT_TO = 'security@example.com';
const DRIVE_BASE = 'https://www.googleapis.com/drive/v3';

function weeklyDriveSharingAudit() {
  const token = ScriptApp.getOAuthToken();
  const files = listDriveFiles(token);
  const risky = [];

  files.forEach(file => {
    const permissions = listPermissions(token, file.id);
    permissions.forEach(permission => {
      const publicAccess = permission.type === 'anyone';
      const domainAccess = permission.type === 'domain';
      if (publicAccess || domainAccess) {
        risky.push({
          name: file.name,
          owner: (file.owners || []).map(o => o.emailAddress).join(', '),
          role: permission.role,
          type: permission.type,
          link: file.webViewLink
        });
      }
    });
  });

  const body = risky.length
    ? risky.map(r => `${r.type}/${r.role} | ${r.name} | ${r.owner} | ${r.link}`).join('\n')
    : 'No public or domain-wide files found this week.';

  MailApp.sendEmail({
    to: REPORT_TO,
    subject: `Drive sharing audit: ${risky.length} risky files`,
    body
  });
}

function listDriveFiles(token) {
  const url = DRIVE_BASE + '/files?' + [
    'q=' + encodeURIComponent("trashed=false and mimeType != 'application/vnd.google-apps.folder'"),
    'pageSize=100',
    'fields=' + encodeURIComponent('files(id,name,owners,emailAddress,webViewLink),nextPageToken')
  ].join('&');

  const res = UrlFetchApp.fetch(url, {
    headers: { Authorization: `Bearer ${token}` }
  });
  return JSON.parse(res.getContentText()).files || [];
}

function listPermissions(token, fileId) {
  const url = `${DRIVE_BASE}/files/${fileId}/permissions?fields=permissions(id,type,role,emailAddress,domain)`;
  const res = UrlFetchApp.fetch(url, {
    headers: { Authorization: `Bearer ${token}` },
    muteHttpExceptions: true
  });
  if (res.getResponseCode() >= 300) return [];
  return JSON.parse(res.getContentText()).permissions || [];
}