The permissions for download_app and download_data are restricted to the uploader of the application and the project owners. This is mentioned in the Python docs <https://cloud.google.com/appengine/docs/python/tools/uploadinganapp?hl=en> but not the Java docs. Also in order to use a service account with with gcloud auth activate-service-account <https://cloud.google.com/sdk/gcloud/reference/auth/activate-service-account>, you need to export the key file, but you can only export key files for service accounts you create and not the application's default credentials. These service accounts can only have view or edit permissions, but not owner.
On Sunday, January 3, 2016 at 4:47:27 AM UTC-5, timh wrote: > > Hi > > I haven't had to use the remote_api for some time, and now need to use the > bulkloader and remote_api_shell. (Appengine app was first deployed in 2012) > > However utilising the current SDK 1.9.30 and after creating service > accounts, it seems that there is an ongoing problem with authentication .' > > I get the following when trying use download_data > > [DEBUG ] [WorkerThread-0] WorkerThread: started > 2016-01-03 15:01:19,810 INFO client.py:539 Attempting refresh to obtain > initial access_token > 2016-01-03 15:01:20,118 INFO client.py:797 Refreshing access_token > 2016-01-03 15:01:21,733 INFO client.py:571 Refreshing due to a 401 > (attempt 1/2) > 2016-01-03 15:01:22,040 INFO client.py:797 Refreshing access_token > 2016-01-03 15:01:23,101 INFO client.py:571 Refreshing due to a 401 > (attempt 2/2) > 2016-01-03 15:01:23,415 INFO client.py:797 Refreshing access_token > > repeated infinitely. > > I have tried multiple variations and using the remote_api_shell, which > eventually times out with to many failed attempts. > > Following the docs on the Creating an Application Default Credentials and > the only type of account that has a correctly formatted json credential > file is a "Application Service Account" > > The permissions are "Edit" for the Service Account. > > (Note the docs are incorrect as far the cloud console sections, for > instance it refers to "APIs & Auth" however that section is called "API > Manager" > > I am only using the "builtin" remote api definition. > > Has anyone been able to use the remote_api_shell with recent SDK's ? > > Any thoughts. > > > Cheers > > Tim > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To post to this group, send email to google-appengine@googlegroups.com. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/60e3cbb5-455d-466f-b713-9b3e575a06f9%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
