Hi, What Tim says is only true if you're serving images using get_serving_url. If you're serving blobs using the standard method, which has your handler instruct the infrastructure to return a blob, there are no restrictions on what sort of access control you can impose.
The blobstore should work just fine for the sort of application you're talking about. For an example of serving static content from the blobstore (out of zip files, in this case), see this article on my blog: http://blog.notdot.net/2010/08/Using-BlobReader-wildcard-subdomains-and-webapp2. Saving each static file as a separate blob and serving them directly is also an option, naturally. -Nick Johnson On Tue, Jan 25, 2011 at 3:14 AM, Tim Hoffman <[email protected]> wrote: > Hi > > You may not want to use the BlobStore if any form of access control is > required. > Whilst the url's of the entities in the Blobstore are not guessable, once > someone has the url > you have no way of preventing them or someone else getting the entity in > the future as there is > no form of permission/restriction on accessing the resource. > > The only way of restricting access once someone has the url is by deleting > the entity from the BlobStore. > > Maybe in the future some sort of access control like S3 has might be > introduced. > > Rgds > > Tim > > -- > You received this message because you are subscribed to the Google Groups > "Google App Engine" group. > To post to this group, send email to [email protected]. > To unsubscribe from this group, send email to > [email protected]<google-appengine%[email protected]> > . > For more options, visit this group at > http://groups.google.com/group/google-appengine?hl=en. > -- Nick Johnson, Developer Programs Engineer, App Engine Google Ireland Ltd. :: Registered in Dublin, Ireland, Registration Number: 368047 -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
