Google Sheet App Script 保护范围并允许基于电子邮件的编辑，但从编辑权限中排除少数列

Question

I am using below script to protect data upto last row on opening the sheet. The script will add protection on the range and will allow the sheet owner and email id specified in the code to edit the protected range. The script performs its work, however, I want to update below in the script.

Eg There are 5 columns in the sheet and data upto row no. 100, so on opening the sheet the script will protect all the columns upto row no. 100, only the sheet owner and the specified email id will be allowed to edit this protected range. I want a permanent protection on Col A & Col D so in this case the specific email id covered in the script will get access to protected range but excluding column A & col D.

function installedOnOpen(e) {
const editors = ["###"]; // Added: Please set the email addresses you want to give 
the permission as the editor.

const sheetNames = ["Sheet1"]; // Please set the sheet names you want to protect.
const sheets = e.source.getSheets().filter(s => 
sheetNames.includes(s.getSheetName()));
if (sheets.length == 0) return;
sheets.forEach(s => {
const p = s.getProtections(SpreadsheetApp.ProtectionType.RANGE);
if (p.length > 0) {
  p.forEach(pp => pp.remove());
}
const lastRow = s.getLastRow();
if (lastRow != 0) {
  const newProtect = s.getRange(1, 1, lastRow, s.getMaxColumns()).protect();
  newProtect.removeEditors(newProtect.getEditors());
  newProtect.addEditors(editors); // Added
  if (newProtect.canDomainEdit()) newProtect.setDomainEdit(false);
}
});
}

Any help on above will be greatly appreciated.

Answer 1

I believe your goal is as follows.

• You want to protect the rows from 1st row to the last row. In this case, you want to give the edit permission to the specific user. And, for the specific columns, you don't want to make all users edit.
• Added: I want these columns to be protected in full ie entire column should be protected.

In this case, how about the following modified script?

Modified script 1:

Please install OnOpen trigger to the function. When you reopen the Spreadsheet, the script is automatically run.

function installedOnOpen(e) {
  const editors = ["###"]; // Added: Please set the email addresses you want to give the permission as the editor.
  const permanentProtectedColumns = [1, 4]; // Added: Please set the permanent protected columns.

  const sheetNames = ["Sheet1"]; // Please set the sheet names you want to protect.
  const sheets = e.source.getSheets().filter(s => sheetNames.includes(s.getSheetName()));
  if (sheets.length == 0) return;
  sheets.forEach(s => {
    const p = s.getProtections(SpreadsheetApp.ProtectionType.RANGE);
    if (p.length > 0) {
      p.forEach(pp => pp.remove());
    }
    const lastRow = s.getLastRow();
    if (lastRow != 0) {
      const newProtect = s.getRange(1, 1, lastRow, s.getMaxColumns()).protect();
      newProtect.removeEditors(newProtect.getEditors());
      newProtect.addEditors(editors);
      if (newProtect.canDomainEdit()) newProtect.setDomainEdit(false);

      // I added below script.
      const maxRow = s.getMaxRows();
      permanentProtectedColumns.forEach(r => {
        const pp = s.getRange(1, r, maxRow).protect();
        pp.removeEditors(pp.getEditors());
        if (pp.canDomainEdit()) pp.setDomainEdit(false);
      });
    }
  });
}

• When this script is run, the 1st row to the last row is protected. In this case, the owner and specific users can edit the protected ranges. But, the columns of const permanentProtectedColumns = [1, 4];(in this case, columns "A" and "D") can be edited by only the owner.

Modified script 2:

I think that the above modified script can be used. But, in your situation, the process cost might be high a little. So, if you want to reduce the process cost, how about using Sheets API as follows?

In this case, please enable Sheets API at Advanced Google services .

function installedOnOpen(e) {
  const editors = ["###"]; // Added: Please set the email addresses you want to give the permission as the editor.
  const permanentProtectedColumns = [1, 4]; // Added: Please set the permanent protected columns.
  const sheetNames = ["Sheet1"]; // Please set the sheet names you want to protect.

  const sheets = e.source.getSheets().filter(s => sheetNames.includes(s.getSheetName()));
  if (sheets.length == 0) return;
  const id = e.source.getId();
  const obj = Sheets.Spreadsheets.get(id, { ranges: sheets.map(s => s.getSheetName()), fields: "sheets(protectedRanges)" }).sheets;
  const protectedIds = obj.flatMap(({ protectedRanges }) => protectedRanges ? protectedRanges.map(({ protectedRangeId }) => protectedRangeId) : []);
  const requests1 = [];
  if (protectedIds.length > 0) {
    protectedIds.forEach(s => requests1.push({ deleteProtectedRange: { protectedRangeId: s } }));
  }
  const owner = Session.getEffectiveUser().getEmail();
  const requests2 = sheets.map(s => {
    const sheetId = s.getSheetId();
    const lastRow = s.getLastRow();
    const maxCol = s.getMaxColumns();
    return { addProtectedRange: { protectedRange: { range: { sheetId, startRowIndex: 0, endRowIndex: lastRow, startColumnIndex: 0, endColumnIndex: maxCol }, editors: { domainUsersCanEdit: false, users: [owner, ...editors] } } } };
  });
  const requests3 = sheets.flatMap(s => {
    const sheetId = s.getSheetId();
    const maxRow = s.getMaxRows();
    return permanentProtectedColumns.map(t => ({ addProtectedRange: { protectedRange: { range: { sheetId, startRowIndex: 0, endRowIndex: maxRow, startColumnIndex: t - 1, endColumnIndex: t }, editors: { domainUsersCanEdit: false, users: [owner] } } } }));
  });
  Sheets.Spreadsheets.batchUpdate({ requests: [...requests1, ...requests2, ...requests3] }, id);
}

• In this sample script, the same result with the above script is obtained.