Thanks!

I agree with you, Brian. It should be mentioned in the Appstats
documentation that it would possibly leak some source code.

If you want to sell applications as "close source", I think you just
have to remove Appstats. Or maybe Appstats can have an optional
configuration to not display source code.

Thanks for the replies!


Albert

On Jul 29, 11:14 pm, djidjadji <[email protected]> wrote:
> And that means that the admins of the application that is sold as
> "close source" can also see the code if they know the format of the
> URL.
> These non-developer admins only should be able to manipulate the datastore.
>
> 2010/7/29 Andi Albrecht <[email protected]>:
>
>
>
> > On Thu, Jul 29, 2010 at 1:38 PM, bFlood <[email protected]> wrote:
> >> I'm pretty sure only admins can see appstats but if that's not enough,
>
> > That's right. According to the appstats docs only admins should be
> > able to see the appstats web interface and the source code of your
> > files:http://code.google.com/appengine/docs/python/tools/appstats.html#Sett...
>
> >> you can alter the main appstats handler to only accept a specific user
> >> (I did this for our app). Drilling into the source is sometimes pretty
> >> helpful
>
> >> I do agree that somewhere in the appstats docs they should mention
> >> leaking source code.
>
> >> cheers
> >> brian
>
> >> On Jul 29, 4:07 am, Albert <[email protected]> wrote:
> >>> Hi!
>
> >>> I just wanted to bring it up again.
>
> >>> I can see some of my source code files with Appstats.
>
> >>> Most of which are the python files in my application.
>
> >>> Is this expected functionality?
>
> >>> Thanks!
>
> >>> On Jul 23, 9:13 am, Albert <[email protected]> wrote:
>
> >>> > I can see some of my source code files with Appstats.
>
> >>> > Most of which are the python files in my application.
>
> >>> > Is this expected functionality?
>
> >> --
> >> You received this message because you are subscribed to the Google Groups 
> >> "Google App Engine" group.
> >> To post to this group, send email to [email protected].
> >> To unsubscribe from this group, send email to 
> >> [email protected].
> >> For more options, visit this group 
> >> athttp://groups.google.com/group/google-appengine?hl=en.
>
> > --
> > You received this message because you are subscribed to the Google Groups 
> > "Google App Engine" group.
> > To post to this group, send email to [email protected].
> > To unsubscribe from this group, send email to 
> > [email protected].
> > For more options, visit this group 
> > athttp://groups.google.com/group/google-appengine?hl=en.

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to