Google Calendar read only access

Configuration
1

Hello.

I’ve just tried to add Google Calendar to my Home Assistant instance, and the docs state that HA should only request “read-only” access (https://www.home-assistant.io/integrations/calendar.google/). However, when I go to authenticate through HA, it is requesting the ability to “See, edit, share, and permanently delete all the calendars you can access using Google Calendar”. Is there any way to downgrade this or is this an error in the docs?

Thanks,
Dave

1 Like
2

I noticed the same thing. Not really keen to give read/write access to my calendars.

Anyone know how to lock it down to just read only access?

1 Like
3

Documentation here suggests that we we should be hitting
https://www.googleapis.com/auth/calendar.readonly
but looking at the source, we might actually be hitting
https://www.googleapis.com/auth/calendar

See line 70 here: https://github.com/home-assistant/core/blob/b4bac0f7a0a881ece3b3bd06dbe8531a67f8c923/homeassistant/components/google/init.py

Any way I can easily test this?

1 Like
4

I’ve just hit this as well, and I’m equally nervous to give read/write (and delete!) access when it really doesn’t seem necessary. Hope you don’t mind, but I’ve submitted a bug for this. It’s my first one, so I hope I did it correctly!

1 Like
5

Don’t really like resurecting old threads, but wanted people to know that with the latest HA release (2021.8), it is now possible to restrict access down to read only. See the docs for more info.

1 Like
6

That’s excellent news. Thanks very much for the update.

7

Sorry to revive the thread, but unfortunately in 2022.9.0 they removed

google:
  client_id: [your client id]
  client_secret: [your client secret]
  calendar_access: read_only

from configuration.yaml and it’s not possible to initially request read-only access to your calendar.

So if you add your Application Credentials for Google Calendar, then add the code above to your configuration.yaml, restart HA, then Add Integration (despite initial system notification for deprecation) Google Calendar you will get read-only access. After you complete the procedure you can remove the code from configuration.yaml and restart HA again.

Hope this helps.

8

Sadly in 2023.10.0 You cannot even restart HA with this in your configuration.yaml as it’s blocked as invalid. Would definitely be nice to have RO access to the calendar as an option.

Having said that, in the configure for google calendar you can change it to Read-only!

9

Yes, you can hit the Configure button on the integration to change this option from the UI. It is an option.