On Thursday, January 27, 2011 2:52:48 AM UTC-5, tobik wrote:
>
> Thank you! That's what I wanted to know. 
>
> So basically passing Keys in urls is not a good idea, but using pure 
> IDs and Model.get_by_id() should be secure enough. Or am I wrong? I 
> tried to get access to data across namespaces but it ended up with 
> request error. So it worked as expected. 
>
>
Yes; IDs are only unique within a namespace, entity group, and kind, so 
passing an ID from one namespace to an instance using a different namespace 
will either get you a different entity from the calling instance's namespace 
or nothing, never the entity in the original namespace.

-- 
You received this message because you are subscribed to the Google Groups 
"Google App Engine" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-appengine?hl=en.

Reply via email to