And that means that the admins of the application that is sold as "close source" can also see the code if they know the format of the URL. These non-developer admins only should be able to manipulate the datastore.
2010/7/29 Andi Albrecht <[email protected]>: > On Thu, Jul 29, 2010 at 1:38 PM, bFlood <[email protected]> wrote: >> I'm pretty sure only admins can see appstats but if that's not enough, > > That's right. According to the appstats docs only admins should be > able to see the appstats web interface and the source code of your > files: > http://code.google.com/appengine/docs/python/tools/appstats.html#Setting_Up_the_Administrative_Interface > >> you can alter the main appstats handler to only accept a specific user >> (I did this for our app). Drilling into the source is sometimes pretty >> helpful >> >> I do agree that somewhere in the appstats docs they should mention >> leaking source code. >> >> cheers >> brian >> >> On Jul 29, 4:07 am, Albert <[email protected]> wrote: >>> Hi! >>> >>> I just wanted to bring it up again. >>> >>> I can see some of my source code files with Appstats. >>> >>> Most of which are the python files in my application. >>> >>> Is this expected functionality? >>> >>> Thanks! >>> >>> On Jul 23, 9:13 am, Albert <[email protected]> wrote: >>> >>> >>> >>> > I can see some of my source code files with Appstats. >>> >>> > Most of which are the python files in my application. >>> >>> > Is this expected functionality? >> >> -- >> You received this message because you are subscribed to the Google Groups >> "Google App Engine" group. >> To post to this group, send email to [email protected]. >> To unsubscribe from this group, send email to >> [email protected]. >> For more options, visit this group at >> http://groups.google.com/group/google-appengine?hl=en. >> >> > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]. > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. > > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
