Jelena, that's a good summary of what is going on.  This is intended
behavior.

~Arne

On Thu, Mar 6, 2008 at 3:00 PM, Jelena Kolokotronis <[EMAIL PROTECTED]>
wrote:

>   I am a friend to the owner, but don't have the app installed
>
> {"response":{"Error":"unauthorized"},"key":"viewer"}
>
> The way I understand it, guess security is related to the rights of your
> app to grab the data, not the rights of the viewer to access owner info or
> vice versa. If he installed, you can get the object if he didn't you cannot.
>
>
> Jelena
>
>
> Jerome wrote:
>
> Hi Anthony and Jelena,
>
> If the viewer is a friend of the profile owner, the viewer object
> should be available even if the viewer doesn't have the app, right?
>
> I think the security constraint shows up when we have a viewer which
> is foreign to the app or the profile owner.
>
> Does this sound correct to you (I have been pulling some of my hair
> over stuff like that a few weeks ago)?
>
> Jerome
>
> On Mar 6, 2:23 pm, Jelena Kolokotronis <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>
> wrote:
>
>
>  Yes, I think you can't get viewer object unless he has the app
> installed. Security constraints.
>
> Jelena
>
>
> johnson.psgtech wrote:
>
>
>  Hi,
>
>
>  I found this wierd behaviour today.
>
>
>  I wrote one application X which will greet
> visitors by their name whenever they start using it
> on my profile. I thought it would greet..but bad app..It dint.
> it greets with their username only if they also
> have my application X installed in their profile..
>
>
>  Im using ,
>
>
>   var opt_params = { };
>
>
>  opt_params[opensocial.DataRequest.PeopleRequestFields.PROFILE_DETAILS]
> = [
>         opensocial.Person.Field.PROFILE_URL
>         ];
>
>
>  req.add(req.newFetchPersonRequest(opensocial.DataRequest.PersonId.VIEWER,
> opt_params), "viewer");
>
>
>  to get the profile viewer's user name.
>
>
>  I tried this both in IE and Firefox.
>
>
>  Is  it like... An application will get the user_name of VIEWER only
> if he/she also has the same application installed in his/her profile??
>
>
>  --Antony- Hide quoted text -
>
>
>  - Show quoted text -
>
>
>
> >
>

--~--~---------~--~----~------------~-------~--~----~
You received this message because you are subscribed to the Google Groups 
"Orkut Developer Forum" group.
To post to this group, send email to [email protected]
To unsubscribe from this group, send email to [EMAIL PROTECTED]
For more options, visit this group at 
http://groups.google.com/group/opensocial-orkut?hl=en
-~----------~----~----~----~------~----~------~--~---

Reply via email to