I would like to develop an App that lets my Google Apps domain users update their phone numbers for their domain Profiles. My problem is that only a domain admin can access the Profiles API. The flow would go something like: user signs in by GAE Apps domain user service. On load RPC transfers user name to servlet which uses Profiles API and hard coded domain admin account to pull user phone numbers.
It does not do much so there is not alot of risk except the domain admin account credentials stored on the server side. That should not be accessible but I am concerned. Any ideas on a better way to do this or maybe there is no reason for concern? -- You received this message because you are subscribed to the Google Groups "Google App Engine for Java" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine-java?hl=en.
