Hi Adam I figured the problem had to be something like that, however there current docs don't even mention *download_data* at all, and the error you get from appcfg if you haven't logged in with gcloud suggests you need to set GOOGLE_APPLICATION_CREDENTIALS and refer to the docs for setting up an default application service account. That section does talk about gcloud as one of 5 options. Though reading through this the application service account seems on the face of the most appropriate choice.
Historically any account with developer status could download the data using appcfg (in because it only required admin access and in the early days you even had your own handler), and as you said the owner could only download the app. Somewhat misleading ';-) Cheers Tim On Monday, January 4, 2016 at 3:24:15 AM UTC+8, Adam (Cloud Platform Support) wrote: > > The permissions for download_app and download_data are restricted to the > uploader of the application and the project owners. This is mentioned in > the Python docs > <https://cloud.google.com/appengine/docs/python/tools/uploadinganapp?hl=en> > but not the Java docs. Also in order to use a service account with with > gcloud > auth activate-service-account > <https://cloud.google.com/sdk/gcloud/reference/auth/activate-service-account>, > > you need to export the key file, but you can only export key files for > service accounts you create and not the application's default credentials. > These service accounts can only have view or edit permissions, but not > owner. > > On Sunday, January 3, 2016 at 4:47:27 AM UTC-5, timh wrote: >> >> Hi >> >> I haven't had to use the remote_api for some time, and now need to use >> the bulkloader and remote_api_shell. (Appengine app was first deployed in >> 2012) >> >> However utilising the current SDK 1.9.30 and after creating service >> accounts, it seems that there is an ongoing problem with authentication .' >> >> I get the following when trying use download_data >> >> [DEBUG ] [WorkerThread-0] WorkerThread: started >> 2016-01-03 15:01:19,810 INFO client.py:539 Attempting refresh to obtain >> initial access_token >> 2016-01-03 15:01:20,118 INFO client.py:797 Refreshing access_token >> 2016-01-03 15:01:21,733 INFO client.py:571 Refreshing due to a 401 >> (attempt 1/2) >> 2016-01-03 15:01:22,040 INFO client.py:797 Refreshing access_token >> 2016-01-03 15:01:23,101 INFO client.py:571 Refreshing due to a 401 >> (attempt 2/2) >> 2016-01-03 15:01:23,415 INFO client.py:797 Refreshing access_token >> >> repeated infinitely. >> >> I have tried multiple variations and using the remote_api_shell, which >> eventually times out with to many failed attempts. >> >> Following the docs on the Creating an Application Default Credentials and >> the only type of account that has a correctly formatted json credential >> file is a "Application Service Account" >> >> The permissions are "Edit" for the Service Account. >> >> (Note the docs are incorrect as far the cloud console sections, for >> instance it refers to "APIs & Auth" however that section is called "API >> Manager" >> >> I am only using the "builtin" remote api definition. >> >> Has anyone been able to use the remote_api_shell with recent SDK's ? >> >> Any thoughts. >> >> >> Cheers >> >> Tim >> > -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to google-appengine+unsubscr...@googlegroups.com. To post to this group, send email to google-appengine@googlegroups.com. Visit this group at https://groups.google.com/group/google-appengine. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/5cbd9cad-bc88-4007-b30d-fea367bf1419%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
