谷歌教室API补丁

Question

在谷歌教室API中执行课程.courseWork.studentSubmissions.patch方法时，当我尝试更新学生提交的内容时，返回403错误。下面是我的代码。

from googleapiclient.discovery import build
from oauth2client import client
import simplejson as json

class Google:
    SCOPE = {
        "profile": {"scope": "profile email", "access_type": "offline"},
        "classroom": {"scope": 'https://www.googleapis.com/auth/classroom.courses.readonly '
                               'https://www.googleapis.com/auth/classroom.rosters.readonly '
                                'https://www.googleapis.com/auth/classroom.profile.emails '
                                'https://www.googleapis.com/auth/classroom.profile.photos ',
                    "access_type": "offline"},
        "classwork":{
            "scope": "https://www.googleapis.com/auth/classroom.coursework.students https://www.googleapis.com/auth/classroom.coursework.me",
            "access_type":"offline"
        },
        "submission":{
            "scope": "https://www.googleapis.com/auth/classroom.coursework.me https://www.googleapis.com/auth/classroom.coursework.students profile email",
            "access_type":"offline"
        }
    }
    ERRORS = {
                "invalid_request":{"code":"invalid_request","msg":"Invalid request. Please Try with login again."},
                "account_used":{"code":"account_used","msg":"Google account is already configured with different PracTutor Account."},
                "assignment_permission_denied":{"code":"assignment_permission_denied","msg":"permission denied"},
                "unknown_error":{"code":"unknown_error","msg":"something went wrong."}
              }

    def __init__(self, code = "", genFor = "profile"):
        if code:
            genFor = genFor if genFor else "profile"
            self.credentials = client.credentials_from_clientsecrets_and_code(pConfig['googleOauthSecretFile'],self.SCOPE[genFor]["scope"], code)
            self.http_auth = self.credentials.authorize(httplib2.Http())
            cred_json = self.credentials.to_json()
            idinfo = json.loads(cred_json)["id_token"]
        else:
            raise ValueError(Google.ERRORS["invalid_request"])

    def getUserInfo(self):
        service = build(serviceName='oauth2', version='v2', http=self.http_auth)
        idinfo = service.userinfo().get().execute()
        return idinfo

    def getClasses(self):
        courses = []
        page_token = None
        service = build('classroom', 'v1', http=self.http_auth)
        while True:
            response = service.courses().list(teacherId="me",pageToken=page_token,
                                              pageSize=100).execute()
            courses.extend(response.get('courses', []))
            page_token = response.get('nextPageToken', None)
            if not page_token:
                break
        return courses

    def getStudent(self,course_id):
        students = []
        page_token = None
        service = build('classroom', 'v1', http=self.http_auth)
        while True:
            response = service.courses().students().list(courseId=course_id, pageToken=page_token,
                                              pageSize=100).execute()
            students.extend(response.get('students', []))
            page_token = response.get('nextPageToken', None)
            if not page_token:
                break
        return students

    def createAssignment(self,course_id,**kwargs):
        service = build('classroom', 'v1', http=self.http_auth)
        date, time = kwargs["dueDate"].split(" ")
        yy,mm,dd = date.split("-")
        h,m,s = time.split(":")
        courseWork = {
            'title': kwargs["title"],
            'description': kwargs["desc"],
            'materials': [
                {'link': { 'url': kwargs["link"] } },
            ],
            'dueDate': {
                "month": mm,
                "year": yy,
                "day": dd
            },
            'dueTime':{
                "hours": h,
                "minutes": m,
                "seconds": s
              },
            'workType': 'ASSIGNMENT',
            'state': 'PUBLISHED',
        }
        courseWork = service.courses().courseWork().create(courseId=course_id, body=courseWork).execute()
        return courseWork

    def submitAssignment(self,**kwargs):
        service = build('classroom', 'v1', http=self.http_auth)
        course_id = kwargs["courseId"]
        courseWorkId = kwargs["courseWorkId"]
        score = kwargs["score"]
        studentSubmission = {
            'assignedGrade': score,
            'draftGrade': score,
            'assignmentSubmission': {
                'attachments': [
                    {
                        'link': {
                            "url": "demo.com",
                            "title": "Assignment1",
                            "thumbnailUrl": "demo.com",
                        }
                    }
                ],
            },
            'state': 'TURNED_IN',
        }
        gCredentials = json.loads(self.credentials.to_json())
        userGId = gCredentials["id_token"]["sub"]
        studentSubmissionsData = service.courses().courseWork().studentSubmissions().list(
            courseId=course_id,
            courseWorkId=courseWorkId,
            userId=userGId).execute()
        studentSubmissionId = studentSubmissionsData["studentSubmissions"][0]["id"]
        courseWorkRes = service.courses().courseWork().studentSubmissions().patch(
                    courseId=course_id,
                    courseWorkId=courseWorkId,
                    id=studentSubmissionId,
                    updateMask='assignedGrade,draftGrade',
                    body=studentSubmission).execute()
        return courseWorkRes


Method Calling     
g = Google()
kwargs = {"courseId":courseId,"courseWorkId":courseWorkId,"score":80}
courseworkResponse = g.submitAssignment(**kwargs)

错误：

https://classroom.googleapis.com/v1/courses/{courses_id}/courseWork/{courseWork_id}/studentSubmissions/{studentSubmissions_id}？alt=json

学生提交的内容包含以下字段assignedGrade、draftGrade、附件（链接资源）和state。

电话是从一个经过认证的学生账户打来的。开发人员控制台项目启用了Google Classroom API，对Google Classroom API的其他调用工作正常，例如courses.courseWork.createcourses.courseWork.studentSubmissions.list.此外，我正在从相同的开发人员控制台项目提出请求，从课程工作项被关联/创建。

当我从谷歌API浏览器尝试时，返回了相同的错误403错误和不同的消息。

{
  "error": {
    "code": 403,
    "message": "@ProjectPermissionDenied The Developer Console project is not permitted to make this request.",
    "status": "PERMISSION_DENIED"
  }
}

任何帮助都将不胜感激谢谢

Answer 1

这个错误消息基本上意味着你没有权限去做你想做的事情。权限与您对用户进行身份验证的作用域有关。下面是作用域的完整列表

方法：courses.courseWork.studentSubmis.patch需要以下范围。

授权

需要以下OAuth作用域之一：

https://www.googleapis.com/auth/classroom.coursework.students
https://www.googleapis.com/auth/classroom.coursework.me

在补丁之前使用列表和获取

使用list和get-before-patch确保您拥有corect ID。

如果您让用户先执行一个列表，然后找到您要的列表，然后执行一个get，那么您可以在get中对对象进行更改，然后对该对象运行更新。这样做可以确保您传递的所有ID都是正确的，并且用户实际上可以访问他们试图更新的内容。