On Fri, Dec 5, 2008 at 12:11 PM, Citron, David <[EMAIL PROTECTED]> wrote:
> Question: there appears to be nothing in "newUpdatePersonAppDataRequest" > to scope the request to the current gadget (only to, say, the viewer). The Javascript API only supports getting/updating data for the current appId, so doesn't support including an arbitrary appId. The REST/JSON spec offers support for getting/updating data for any appId. > > And the default Shindig AppDataService doesn't seem to. AppDataService.updatePersonData() has a String appId parameter. An implementation would, most likely, compare the appId here against SecurityToken.getAppId(), and only permit updating if the two match, but that's a container policy decision. -- Adam > > > > However, the iGoogle developer sandbox definitely seems to have > persistent data isolation from gadget to gadget. > > > > How is this done? And can a gadget assume that its persistent data is > visible only to itself or does it need to include some hopefully-unique > gadget-specific substring in the data key? > > > > Thanks so much! > > Dave > > > >
