About the image URL attached to the email body

[イルカのえっちゃん]

The following text has been translated from Japanese to English using a translation tool.
Please forgive me if some parts are difficult to read.

### Background ###
1. there is a table with the following column settings.

2. The security settings are as follows.

3. there is a bot for "sending mail" as follows.

4. when I run the bot in 3, I, the app owner, will receive the following email. 

5. when I click on the [Image] URL, the following image is displayed in my browser.

### Question ###
The Image URL in 5 above will show the image even if an account that has not shared the app accesses it.

By the way, that Image URL is here.
https://lh3.googleusercontent.com/RpcZWldzRZR7ivDOcSwA4lzFIy1INe1moP2zfg2R_gohBvmkyqR7STwv2nM0iw=w60...

The image will be displayed no matter who accesses it.
I have the security settings for 2. Is this an unavoidable behavior?

I think for many developers this is not the behavior they expect for their users.
I am also concerned that this spec will lead to major security issues in the future.

[Aurelien]

Hi @イルカのえっちゃん 

There is a change coming on the way the images are treated at the moment:

[Action required] Drive download URLs for embedda... - Google Cloud Community

One thing that intrigues me is that you have a url in your email content rather than the image itself. What is the primary data stored: url to the image, or relative path to the image from your default app folder?

Also, from my understanding, I suspect the documents are stored in a Drive folder made publicly available. 

Is it so?

[イルカのえっちゃん]

There is a change coming on the way the images are treated at the moment:

[Action required] Drive download URLs for embedda... - Google Cloud Community

No.

I am aware of the above news, but it has nothing to do with this matter.

One thing that intrigues me is that you have a url in your email content rather than the image itself. What is the primary data stored: url to the image, or relative path to the image from your default app folder?

The image is an Image type column called [Image].
It is stored in Google Sheets relative to the path to the image file.
(e.g. Data_Images/d622032e.Image.113326.jpg)

The <<[image]>> is simply written in the body of the email.
Intuitively, you would think that the image is embedded in the body of the email, but this is not the case,
In fact, there is a URL in the body of the received e-mail, and the image is displayed when you access it.

For details, please refer to ####Background### 1-5 at the beginning of the body of the email.

Also, from my understanding, I suspect the documents are stored in a Drive folder made publicly available. 

Is it so?

No, the image files are not available to the public.
It is true that a folder called "Data_Images" is created in the Drive folder, which contains the saved image files, but those image files and folders are not available to the public.

If it is possible, I would appreciate it if you could actually try steps 1-5 of my original text to get a better idea of what is going on.

[Aurelien · Accepted solution]

Hi @イルカのえっちゃん 

Thank you for confirming the current settings of your drive folder.

I agree the image should be displayed "as is" in the email you got.

1) testing the exact same settings as yours, I got the same result.

2)  using a Docs template, I get the image in the email. Though, I still get the image accessible using private mode.

You are correct, this is something to address.

You may want to consider filling a ticket here:Contact Us - AppSheet Help

[イルカのえっちゃん]

Thank you for taking the trouble to verify this.
Yes, sir.
We will be issuing a ticket.