I'm currently developing an OpenSocial gadget for iGoogle. I've successfully managed to read and write persistent data using the newFetchPersonAppDataRequest and newUpdatePersonAppDataRequest methods. I would like to make the persistent data available to the VIEWER and VIEWER_FRIENDS only. However, if someone installs the gadget and has the ID of someone else with the gadget installed that is not their friend, it is still possible to read the persistent data of the "non-friend". My gadget will be written only to access the persistent data of friends, but it would still be possible for someone to read data of non-friends with a Greasemonkey script, JavaScript console/debugger, etc. Is there any way to ensure that persistent data can only be read by friends? --~--~---------~--~----~------------~-------~--~----~ You received this message because you are subscribed to the Google Groups "OpenSocial Application Development" group. To post to this group, send email to [email protected] To unsubscribe from this group, send email to [EMAIL PROTECTED] For more options, visit this group at http://groups.google.com/group/opensocial-api?hl=en -~----------~----~----~----~------~----~------~--~---
