Currently I'm generating a Google Documents file through the Drive API using the Java client. This works fine, and as credentials we're using a service account. After the document is created, the account shares it with the e-mail of the logged in user. So far, so good.
The second part was to generate headers and other content for this new empty document. We discovered that scripts can be deployed as API executables + triggered via the "scripts execution API", but bumping into:
Exception in thread "main" com.google.api.client.googleapis.json.GoogleJsonResponseException: 403 Forbidden
"The caller does not have permission"
From other threads & topics that I've found, it ranges from "it won't work with service accounts to associating the project correctly", what I've tried:
-> Created a bound script to a document, deployed as API, changed the project number to the one for which the service account is also owner
-> Enabled the Drive API's + Script API
-> Provided the following scopes:
DriveScopes.DRIVE_FILE, ScriptScopes.DRIVE, "https://www.googleapis.com/auth/documents"
(The last scope was one visible in the Project properties of the script.
I've tried this process for bound scripts & standalone ones, each time associating them with the project, everytime I get the same error.
It's pretty vital that this works server to server, so I cannot have any user interaction, as it has to generate reports & fill them with some standard structure + having an "easy...." way to validate the structure afterwards.
