Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
It didn't make it. We'll try to get it out ASAP. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Sun, Oct 17, 2010 at 6:05 AM, Alexandre Vivien alx.viv...@gmail.comwrote: Hello Ikai, What about this fix that was listed in the prerelease notes? - Fixed an issue with OpenId over SSL. http://code.google.com/p/googleappengine/issues/detail?id=3393 Regards, Alexandre On Oct 6, 2:28 am, Ikai Lan (Google) ikai.l+gro...@google.comikai.l%2bgro...@google.com wrote: Hey everyone, Prerelease SDK 1.3.8 is out for early evaluation. Note that many features that require server side changes will not be available in production, so for all intents and purposes these new features will only work locally. You can download the SDKs here: http://code.google.com/p/googleappengine/downloads/list 1.3.8 Release Notes Python --- - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. You can use this to download both Python and Java application code. - Builtin app.yaml handlers are available for common application functions, such as appstats. - The Admin Console now provides tools to delete all entities in the datastore or all entities of a given type. This is available only if enabled using the datastore_admin builtin. Deleting entities will count against application quota. - You can run task queue tasks immediately from the Admin Console. - You can now specify the quality of JPEG images via the Image API's execute_transforms function. Available in production only. - Support for login of multiple Google accounts within an app, and longer login sessions. For more information see: http://www.google.com/support/accounts/bin/answer.py?answer=181599 - In queue.yaml, the maximum allowed bucket size is now 100. - Precompilation is now enabled by default. To disable, use the --no_precompilation flag when updating your app. - BlobInfo now has an open() method that returns a BlobReader. - BlobReader now accepts a BlobInfo. - Removed limits on zigzag merge-join queries. Therefore the error The built-in indices are not efficient enough for this query and your data. Please add a composite index for this query. will no longer be thrown in many cases, enabling more types of exploratory queries without indexes. - Fixed an issue with task queue tasks not running on the dev_appserver when using Python 2.6. - Fixed an issue on the dev_appserver where auto task running wasn't working for BulkAdd. - Fixed an issue reserving App Ids by owners of similarly-named mails accounts containing periods, multiple cases, and googlemail.com address. http://code.google.com/p/googleappengine/issues/detail?id=1196 - Fixed an issue with OpenId over SSL. http://code.google.com/p/googleappengine/issues/detail?id=3393 - Fixed an issue on the development server where PNGs were being returned as JPEGs. http://code.google.com/p/googleappengine/issues/detail?id=3661 Java - You can run task queue tasks immediately from the admin console. - Added an OutputSettings class to the Images API to specify the JPEG encoding quality when running in production. - Support for login of multiple Google accounts within an app, and longer login sessions. For more information see: http://www.google.com/support/accounts/bin/answer.py?answer=181599 - In queue.xml, the maximum allowed bucket size is now 100. - Removed limits on zigzag merge-join queries. Therefore the error The built-in indices are not efficient enough for this query and your data. Please add a composite index for this query. will no longer be thrown in many cases, enabling more types of exploratory queries without indexes. - The whitelist has been updated to include java.net.InetAddress and some interfaces and abstract classes in javax.xml.soap, including javax.xml.soap.SOAPMessage. - Fixed an issue reserving App Ids by owners of emails containing periods, multiple cases, and googlemail.com address. http://code.google.com/p/googleappengine/issues/detail?id=1196 - Fixed an issue where TaskOptions had no public getters, making testing impossible. http://code.google.com/p/googleappengine/issues/detail?id=3243 - Fixed an issue with OpenId over SSL. http://code.google.com/p/googleappengine/issues/detail?id=3393 - Fixed an issue on the development server where PNGs were being returned as JPEGs. http://code.google.com/p/googleappengine/issues/detail?id=3661 -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger:http://googleappengine.blogspot.com
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
+1 On Monday 11 October 2010 10:17 AM, Edel SM wrote: +1 for optional download. On Wed, Oct 6, 2010 at 5:48 PM, Gregg.fawc...@gmail.com wrote: On Oct 6, 1:28 pm, Ikai Lan (Google)ikai.l+gro...@google.com wrote: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. I'm not at all happy about this. I know how frequent plaintive I lost my code how can I get it back? messages are in this group, but the write-only nature of appengine gave me a lot of confidence that our source code is safe. Now a single password is all that stands between our competitors and our IP. Why expose ALL users to risk (and open Google to lawsuits) for the sake of a few inexperienced developers? Star this post if you agree. I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. Greg. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
+1 for optional download. On Wed, Oct 6, 2010 at 5:48 PM, Greg g.fawc...@gmail.com wrote: On Oct 6, 1:28 pm, Ikai Lan (Google) ikai.l+gro...@google.com wrote: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. I'm not at all happy about this. I know how frequent plaintive I lost my code how can I get it back? messages are in this group, but the write-only nature of appengine gave me a lot of confidence that our source code is safe. Now a single password is all that stands between our competitors and our IP. Why expose ALL users to risk (and open Google to lawsuits) for the sake of a few inexperienced developers? Star this post if you agree. I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. Greg. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- edel -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
There is an even worse problem with a password compromise: 1) Malicious user gets your pw 2) Malicious user downloads your existing codebase 3) Malicious user makes subtle change - say, funneling sensitive data to external site 4) Malicious user uploads this over running version This would be almost impossible to detect. At least with the source code separate, a malicious hacker has to either 1) re-implement enough of the site to make it convincing, or 2) figure out the actual code repository and credentials separately. Honestly, I think this code download idea is unwise. Yes, it will quiet down all the clueless folks that didn't back up their code, but let's be realistic - these are not people who are serious about software development and they are unlikely to be the ones building apps that will ultimately generate revenue for appengine. GAE is not google sites, you don't need to cater to the idiot 20%. Jeff On Thu, Oct 7, 2010 at 6:43 AM, Nacho Coloma icol...@gmail.com wrote: If you have unscrupulous competitors with your Google Account password, I'd think the fact that they might download your source is the least of your problems. They could just deploy malicious code to your site instead. That can be fixed, but you can't do anything about the fact that they have your source code and can develop competing products. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
AppEngine is a hosting platform, _not source control_. You should learn about mercurial, git, or subversion. http://bitbucket.org/ http://github.com/ Robert On Thu, Oct 7, 2010 at 06:25, pdknsk pdk...@googlemail.com wrote: Thank you for adding the download feature. I develop on two machines, Linux and Windows, and syncing from within the SDK will be very convenient. It makes no difference for me, but I also support the suggestion to make it optional. I have noticed a slight problem. ./appcfg.py download_app --application id dir/ appcfg.py: error: Cannot download to path dir/: directory already exists and it isn't empty. ./appcfg.py --force download_app --application id dir/ appcfg.py: error: no such option: --force -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
You should *not* use this feature to sync versions between your computers. I cannot emphasize this strongly enough. Please use source control. We value feedback, and this is precisely the point of the prerelease SDK - it's much easier to postpone a release early on rather than try to change directions mid-flight. We're still working on the details of whether this will be postponed or not (signs seem to point to yes, at least until it is user configurable). I'll update the thread when things are finalized. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Thu, Oct 7, 2010 at 9:51 AM, Robert Kluin robert.kl...@gmail.com wrote: AppEngine is a hosting platform, _not source control_. You should learn about mercurial, git, or subversion. http://bitbucket.org/ http://github.com/ Robert On Thu, Oct 7, 2010 at 06:25, pdknsk pdk...@googlemail.com wrote: Thank you for adding the download feature. I develop on two machines, Linux and Windows, and syncing from within the SDK will be very convenient. It makes no difference for me, but I also support the suggestion to make it optional. I have noticed a slight problem. ./appcfg.py download_app --application id dir/ appcfg.py: error: Cannot download to path dir/: directory already exists and it isn't empty. ./appcfg.py --force download_app --application id dir/ appcfg.py: error: no such option: --force -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
By user-configurable I mean opt-in, not opt-out. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Thu, Oct 7, 2010 at 10:04 AM, Ikai Lan (Google) ikai.l+gro...@google.comikai.l%2bgro...@google.com wrote: You should *not* use this feature to sync versions between your computers. I cannot emphasize this strongly enough. Please use source control. We value feedback, and this is precisely the point of the prerelease SDK - it's much easier to postpone a release early on rather than try to change directions mid-flight. We're still working on the details of whether this will be postponed or not (signs seem to point to yes, at least until it is user configurable). I'll update the thread when things are finalized. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Thu, Oct 7, 2010 at 9:51 AM, Robert Kluin robert.kl...@gmail.comwrote: AppEngine is a hosting platform, _not source control_. You should learn about mercurial, git, or subversion. http://bitbucket.org/ http://github.com/ Robert On Thu, Oct 7, 2010 at 06:25, pdknsk pdk...@googlemail.com wrote: Thank you for adding the download feature. I develop on two machines, Linux and Windows, and syncing from within the SDK will be very convenient. It makes no difference for me, but I also support the suggestion to make it optional. I have noticed a slight problem. ./appcfg.py download_app --application id dir/ appcfg.py: error: Cannot download to path dir/: directory already exists and it isn't empty. ./appcfg.py --force download_app --application id dir/ appcfg.py: error: no such option: --force -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
Get github, google code or something similar... Even at $7 a month for closed archives GitHub is a steal. Just the peace of mind makes it a bargain. On Thu, Oct 7, 2010 at 1:04 PM, Ikai Lan (Google) ikai.l+gro...@google.comikai.l%2bgro...@google.com wrote: By user-configurable I mean opt-in, not opt-out. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Thu, Oct 7, 2010 at 10:04 AM, Ikai Lan (Google) ikai.l+gro...@google.com ikai.l%2bgro...@google.com wrote: You should *not* use this feature to sync versions between your computers. I cannot emphasize this strongly enough. Please use source control. We value feedback, and this is precisely the point of the prerelease SDK - it's much easier to postpone a release early on rather than try to change directions mid-flight. We're still working on the details of whether this will be postponed or not (signs seem to point to yes, at least until it is user configurable). I'll update the thread when things are finalized. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Thu, Oct 7, 2010 at 9:51 AM, Robert Kluin robert.kl...@gmail.comwrote: AppEngine is a hosting platform, _not source control_. You should learn about mercurial, git, or subversion. http://bitbucket.org/ http://github.com/ Robert On Thu, Oct 7, 2010 at 06:25, pdknsk pdk...@googlemail.com wrote: Thank you for adding the download feature. I develop on two machines, Linux and Windows, and syncing from within the SDK will be very convenient. It makes no difference for me, but I also support the suggestion to make it optional. I have noticed a slight problem. ./appcfg.py download_app --application id dir/ appcfg.py: error: Cannot download to path dir/: directory already exists and it isn't empty. ./appcfg.py --force download_app --application id dir/ appcfg.py: error: no such option: --force -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appengine@googlegroups.com . To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- Jeff -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
File my message under Everyone's Got an Opinion I see that everyone went and got their dog.. and came out with their dog to +1 either disabling code download or making it opt-in.. Sadly.. it seems that the code download option will only be beneficial to clueless people who don't use version control.. and clueless people who don't use version control probably won't know to enable this code download option.. (since.. if they had any sense and knew that having an offsite copy of their code was important, they would probably be using free version control somewhere) The ultimate benefit of this is probably being able to tell the clueless non-version control using people that the option of code download was there.. and they could have enabled it.. and they have nothing to complain about. And, they can enable it for their next project.. or just be smart and use Github or Google Code or Bitbucket or something.. Anyway... everyone's got an opinion.. On Thu, Oct 7, 2010 at 1:04 PM, Ikai Lan (Google) ikai.l+gro...@google.comikai.l%2bgro...@google.com wrote: By user-configurable I mean opt-in, not opt-out. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Thu, Oct 7, 2010 at 10:04 AM, Ikai Lan (Google) ikai.l+gro...@google.com ikai.l%2bgro...@google.com wrote: You should *not* use this feature to sync versions between your computers. I cannot emphasize this strongly enough. Please use source control. We value feedback, and this is precisely the point of the prerelease SDK - it's much easier to postpone a release early on rather than try to change directions mid-flight. We're still working on the details of whether this will be postponed or not (signs seem to point to yes, at least until it is user configurable). I'll update the thread when things are finalized. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Thu, Oct 7, 2010 at 9:51 AM, Robert Kluin robert.kl...@gmail.comwrote: AppEngine is a hosting platform, _not source control_. You should learn about mercurial, git, or subversion. http://bitbucket.org/ http://github.com/ Robert On Thu, Oct 7, 2010 at 06:25, pdknsk pdk...@googlemail.com wrote: Thank you for adding the download feature. I develop on two machines, Linux and Windows, and syncing from within the SDK will be very convenient. It makes no difference for me, but I also support the suggestion to make it optional. I have noticed a slight problem. ./appcfg.py download_app --application id dir/ appcfg.py: error: Cannot download to path dir/: directory already exists and it isn't empty. ./appcfg.py --force download_app --application id dir/ appcfg.py: error: no such option: --force -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appengine@googlegroups.com . To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
Well, the thought is that you wouldn't be able to download code from BEFORE the feature launched. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Thu, Oct 7, 2010 at 1:06 PM, Remigius remigius.stal...@gmail.com wrote: Does it really help to make it configurable? Once the account is compromised, an attacker could easily opt-in and steal the code. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
+1 On Wed, Oct 6, 2010 at 12:54, Stefano Ciccarelli stef...@indacosoftware.itwrote: +1 On Oct 6, 11:48 am, Greg g.fawc...@gmail.com wrote: On Oct 6, 1:28 pm, Ikai Lan (Google) ikai.l+gro...@google.comikai.l%2bgro...@google.com wrote: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. I'm not at all happy about this. I know how frequent plaintive I lost my code how can I get it back? messages are in this group, but the write-only nature of appengine gave me a lot of confidence that our source code is safe. Now a single password is all that stands between our competitors and our IP. Why expose ALL users to risk (and open Google to lawsuits) for the sake of a few inexperienced developers? Star this post if you agree. I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. Greg. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
+1 2010/10/6 Greg g.fawc...@gmail.com: On Oct 6, 1:28 pm, Ikai Lan (Google) ikai.l+gro...@google.com wrote: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. I'm not at all happy about this. I know how frequent plaintive I lost my code how can I get it back? messages are in this group, but the write-only nature of appengine gave me a lot of confidence that our source code is safe. Now a single password is all that stands between our competitors and our IP. Why expose ALL users to risk (and open Google to lawsuits) for the sake of a few inexperienced developers? Star this post if you agree. I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. Greg. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
+1 2010/10/6 Greg g.fawc...@gmail.com On Oct 6, 1:28 pm, Ikai Lan (Google) ikai.l+gro...@google.comikai.l%2bgro...@google.com wrote: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. I'm not at all happy about this. I know how frequent plaintive I lost my code how can I get it back? messages are in this group, but the write-only nature of appengine gave me a lot of confidence that our source code is safe. Now a single password is all that stands between our competitors and our IP. Why expose ALL users to risk (and open Google to lawsuits) for the sake of a few inexperienced developers? Star this post if you agree. I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. Greg. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
+1 Indeed, quite disconcerting. On Wed, Oct 6, 2010 at 8:01 AM, Tom Wu service.g2...@gmail.com wrote: +1 2010/10/6 Greg g.fawc...@gmail.com On Oct 6, 1:28 pm, Ikai Lan (Google) ikai.l+gro...@google.comikai.l%2bgro...@google.com wrote: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. I'm not at all happy about this. I know how frequent plaintive I lost my code how can I get it back? messages are in this group, but the write-only nature of appengine gave me a lot of confidence that our source code is safe. Now a single password is all that stands between our competitors and our IP. Why expose ALL users to risk (and open Google to lawsuits) for the sake of a few inexperienced developers? Star this post if you agree. I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. Greg. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- Jeff -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
+1 On Wed, Oct 6, 2010 at 12:12 PM, Mike Wesner mike.wes...@webfilings.com wrote: +1 On Oct 6, 9:59 am, mscwd01 mscw...@gmail.com wrote: +1 On Oct 6, 10:48 am, Greg g.fawc...@gmail.com wrote: On Oct 6, 1:28 pm, Ikai Lan (Google) ikai.l+gro...@google.com wrote: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. I'm not at all happy about this. I know how frequent plaintive I lost my code how can I get it back? messages are in this group, but the write-only nature of appengine gave me a lot of confidence that our source code is safe. Now a single password is all that stands between our competitors and our IP. Why expose ALL users to risk (and open Google to lawsuits) for the sake of a few inexperienced developers? Star this post if you agree. I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. Greg. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
+1000 The download feature should be optional, and off by default. On Wed, Oct 6, 2010 at 12:48 PM, Greg g.fawc...@gmail.com wrote: On Oct 6, 1:28 pm, Ikai Lan (Google) ikai.l+gro...@google.comikai.l%2bgro...@google.com wrote: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. I'm not at all happy about this. I know how frequent plaintive I lost my code how can I get it back? messages are in this group, but the write-only nature of appengine gave me a lot of confidence that our source code is safe. Now a single password is all that stands between our competitors and our IP. Why expose ALL users to risk (and open Google to lawsuits) for the sake of a few inexperienced developers? Star this post if you agree. I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. Greg. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
+1. Make it optional - default to on is ok. As long as it can be disabled. On 6 October 2010 16:29, Rodrigo Moraes rodrigo.mor...@gmail.com wrote: On Oct 6, 6:48 am, Greg wrote: I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. +1 I always considered not being able to download the code a feature. Making it optional would probably be ideal. -- rodrigo -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
Thanks for the feedback. We'll discuss the code download feature in more detail. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Wed, Oct 6, 2010 at 5:04 AM, tcg tomgu...@gmail.com wrote: +1 On Oct 6, 5:48 am, Greg g.fawc...@gmail.com wrote: On Oct 6, 1:28 pm, Ikai Lan (Google) ikai.l+gro...@google.comikai.l%2bgro...@google.com wrote: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. I'm not at all happy about this. I know how frequent plaintive I lost my code how can I get it back? messages are in this group, but the write-only nature of appengine gave me a lot of confidence that our source code is safe. Now a single password is all that stands between our competitors and our IP. Why expose ALL users to risk (and open Google to lawsuits) for the sake of a few inexperienced developers? Star this post if you agree. I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. Greg. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
+1 No download was a feature. AND it helped people with poor practices learn the value of version control. :) On Wed, Oct 6, 2010 at 08:04, tcg tomgu...@gmail.com wrote: +1 On Oct 6, 5:48 am, Greg g.fawc...@gmail.com wrote: On Oct 6, 1:28 pm, Ikai Lan (Google) ikai.l+gro...@google.com wrote: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. I'm not at all happy about this. I know how frequent plaintive I lost my code how can I get it back? messages are in this group, but the write-only nature of appengine gave me a lot of confidence that our source code is safe. Now a single password is all that stands between our competitors and our IP. Why expose ALL users to risk (and open Google to lawsuits) for the sake of a few inexperienced developers? Star this post if you agree. I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. Greg. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
Thanks Tim, of course I'm talking about Python2.5-compatible code only. There are tools which can help you keep compatibility with 2.5 even if actually using a newer version - e.g. Eclipse PyDev has a grammar checker with configurable target version. Common sense also helps. Having this in mind, dev_appserver compatibility with later Python versions can certainly be useful. On Wed, Oct 6, 2010 at 9:54 AM, Tim Hoffman zutes...@gmail.com wrote: You will need to watch that libraries/modules or code that uses things like with (context managers ...) include the from __future__ import with_statement otherwise these will blow up when you run in production. Also 2.6 has advanced string formatting .format method of str and unicode which isn't present in 2.5 2.6 has a future feature of using print as a function. Here is a complete list http://docs.python.org/whatsnew/2.6.html So the bottom line is you whilst 2.6 will work in dev, you could end up with code that will not run in production. Chances are you are unlikely to use these features in your own code but a thirdparty library could. So user beware and test in live appengine (get your self a test instance) before you unleash you new code on the masses ;-) Personally I wouldn't bother using 2.6 until it is officially supported by google in production. The little extra pain you might have in dev setting it up will be a lot less than the production pain if you miss something and have to go and install 2.5 anyway ;-) Rgds Tim On Oct 6, 11:17 am, Peter Petrov onest...@gmail.com wrote: On Wed, Oct 6, 2010 at 3:28 AM, Ikai Lan (Google) ikai.l+gro...@google.com ikai.l%2bgro...@google.com ikai.l%2bgro...@google.com ikai.l%252bgro...@google.com wrote: - Fixed an issue with task queue tasks not running on the dev_appserver when using Python 2.6. Does this mean that Python 2.6 is now (more or less) supported for the dev_appserver? Are there any significant issues remaining when not using Python 2.5? I'm asking because it's quite a pain having to setup an old Python version on modern Linux distros. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
Not a good choice because the one that pays the bill is not the one that writes the source code. I'm not paying for the storage requirement and bandwidth of my client who has bought a use right of my software. I'm an advocate of NO Download allowed. But in case it will be allowed make it OFF by default. You MUST turn it ON in your app.yaml. This way the behavior is compatible with previous versions. And there is no action needed by the people who don't want it. There is always a gap between the time you roll it out and you announce the availability of a new release on the production servers. During this time it would be possible to download the source code if you tried regularly. And I could be away at the moment of the announcement and leave a door wide open for quite some time. 2010/10/6 alf alberto@gmail.com: +1 only can download code administrator who pay bill -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
One issue with the download code option is how it works in the context of an app store. If I license an application thru a store, can I then download the code, modify it, and redeploy? Also - if I have sensitive information (like Authorize.net keys) coded into my application, the information was basically inaccessible prior to this feature. On Wed, Oct 6, 2010 at 2:48 PM, djidjadji djidja...@gmail.com wrote: Not a good choice because the one that pays the bill is not the one that writes the source code. I'm not paying for the storage requirement and bandwidth of my client who has bought a use right of my software. I'm an advocate of NO Download allowed. But in case it will be allowed make it OFF by default. You MUST turn it ON in your app.yaml. This way the behavior is compatible with previous versions. And there is no action needed by the people who don't want it. There is always a gap between the time you roll it out and you announce the availability of a new release on the production servers. During this time it would be possible to download the source code if you tried regularly. And I could be away at the moment of the announcement and leave a door wide open for quite some time. 2010/10/6 alf alberto@gmail.com: +1 only can download code administrator who pay bill -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
Well, there were always workarounds to download the code. That being said, I'm glad we discussed this during the prerelease SDK stage, especially since many of the voices in this thread are the most active and knowledgeable members of the community speaking up. We're looking at alternatives, but what will likely happen is that we will delay this feature for an upcoming release when we've implemented something that takes everyone's feedback into account. Stay tuned - I'll update this thread with more details. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Wed, Oct 6, 2010 at 3:27 PM, andy stevko andy.ste...@gmail.com wrote: One issue with the download code option is how it works in the context of an app store. If I license an application thru a store, can I then download the code, modify it, and redeploy? Also - if I have sensitive information (like Authorize.net keys) coded into my application, the information was basically inaccessible prior to this feature. On Wed, Oct 6, 2010 at 2:48 PM, djidjadji djidja...@gmail.com wrote: Not a good choice because the one that pays the bill is not the one that writes the source code. I'm not paying for the storage requirement and bandwidth of my client who has bought a use right of my software. I'm an advocate of NO Download allowed. But in case it will be allowed make it OFF by default. You MUST turn it ON in your app.yaml. This way the behavior is compatible with previous versions. And there is no action needed by the people who don't want it. There is always a gap between the time you roll it out and you announce the availability of a new release on the production servers. During this time it would be possible to download the source code if you tried regularly. And I could be away at the moment of the announcement and leave a door wide open for quite some time. 2010/10/6 alf alberto@gmail.com: +1 only can download code administrator who pay bill -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
Thank you, Ikai. On Wed, Oct 6, 2010 at 7:04 PM, Ikai Lan (Google) ikai.l+gro...@google.comikai.l%2bgro...@google.com wrote: Well, there were always workarounds to download the code. That being said, I'm glad we discussed this during the prerelease SDK stage, especially since many of the voices in this thread are the most active and knowledgeable members of the community speaking up. We're looking at alternatives, but what will likely happen is that we will delay this feature for an upcoming release when we've implemented something that takes everyone's feedback into account. Stay tuned - I'll update this thread with more details. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Wed, Oct 6, 2010 at 3:27 PM, andy stevko andy.ste...@gmail.com wrote: One issue with the download code option is how it works in the context of an app store. If I license an application thru a store, can I then download the code, modify it, and redeploy? Also - if I have sensitive information (like Authorize.net keys) coded into my application, the information was basically inaccessible prior to this feature. On Wed, Oct 6, 2010 at 2:48 PM, djidjadji djidja...@gmail.com wrote: Not a good choice because the one that pays the bill is not the one that writes the source code. I'm not paying for the storage requirement and bandwidth of my client who has bought a use right of my software. I'm an advocate of NO Download allowed. But in case it will be allowed make it OFF by default. You MUST turn it ON in your app.yaml. This way the behavior is compatible with previous versions. And there is no action needed by the people who don't want it. There is always a gap between the time you roll it out and you announce the availability of a new release on the production servers. During this time it would be possible to download the source code if you tried regularly. And I could be away at the moment of the announcement and leave a door wide open for quite some time. 2010/10/6 alf alberto@gmail.com: +1 only can download code administrator who pay bill -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- Jeff -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
This is Python only. If you download a Java app you will download the JAR files. -- Ikai Lan Developer Programs Engineer, Google App Engine Blogger: http://googleappengine.blogspot.com Reddit: http://www.reddit.com/r/appengine Twitter: http://twitter.com/app_engine On Wed, Oct 6, 2010 at 12:28 PM, Remigius remigius.stal...@gmail.comwrote: what Robert Kluin said. version control is a must. sources shouldn't even have to be uploaded in the first place (or is this py only?). On 6 Okt., 19:28, Robert Kluin robert.kl...@gmail.com wrote: +1 No download was a feature. AND it helped people with poor practices learn the value of version control. :) On Wed, Oct 6, 2010 at 08:04, tcg tomgu...@gmail.com wrote: +1 On Oct 6, 5:48 am, Greg g.fawc...@gmail.com wrote: On Oct 6, 1:28 pm, Ikai Lan (Google) ikai.l+gro...@google.comikai.l%2bgro...@google.com wrote: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. I'm not at all happy about this. I know how frequent plaintive I lost my code how can I get it back? messages are in this group, but the write-only nature of appengine gave me a lot of confidence that our source code is safe. Now a single password is all that stands between our competitors and our IP. Why expose ALL users to risk (and open Google to lawsuits) for the sake of a few inexperienced developers? Star this post if you agree. I guess one solution would be to make downloading optional. A setting to disable source downloading in app.yaml would be safe, because uploading a new version would destroy the existing code. Greg. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appengine@googlegroups.com . To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group athttp:// groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.comgoogle-appengine%2bunsubscr...@googlegroups.com . For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
Re: [google-appengine] Re: Prerelease SDK 1.3.8 is out!
According to the release notes mail: - The developer who uploaded an app version can download that version's code using the appcfg.py download_app command. You can use this to download both Python and Java application code. I agree with Geoffrey, the balance is right if you have to have this feature. But, personally I would just prefer either not having this option OR just make it something that must be enabled. For me this feature creates questions that do not exist now. And, yes I know that if Appstats enabled you can sit there and browse through the code. Not being able to _easily_ download the code is like a door-lock, it keeps the honest people honest. Robert On Wed, Oct 6, 2010 at 22:59, Tim Hoffman zutes...@gmail.com wrote: Geoffry Are you certain it's limited to the developer who uploaded or all developers ? Rgds T On Oct 7, 10:37 am, Geoffrey Spear geoffsp...@gmail.com wrote: On Oct 6, 6:27 pm, andy stevko andy.ste...@gmail.com wrote: One issue with the download code option is how it works in the context of an app store. If I license an application thru a store, can I then download the code, modify it, and redeploy? Also - if I have sensitive information (like Authorize.net keys) coded into my application, the information was basically inaccessible prior to this feature. The item in the release notes says that it would be downloadable by the developer who uploaded the version. If you are that developer, you already have (or had) the source code. If you're not, you wouldn't be able to get it, even if you're an administrator of the app. To me it looks like the App Engine team got the balance right, and I'm wondering if all of the +1 people piling on really get what's being described. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en. -- You received this message because you are subscribed to the Google Groups Google App Engine group. To post to this group, send email to google-appeng...@googlegroups.com. To unsubscribe from this group, send email to google-appengine+unsubscr...@googlegroups.com. For more options, visit this group at http://groups.google.com/group/google-appengine?hl=en.
