[google-appengine] Re: Rest server: user-group access

2009-08-14 Thread Anders Mattson
Hi Jeff, you wouldn't happen to have an example av an ACL implementation by any chance? I've been trying to create a proper ACL on App Engine but I always seem to get stuck on GQL not supporting OR conditional statements. My users can belong to one or more different user groups (many-to- many) an

[google-appengine] Re: Rest server: user-group access

2009-08-11 Thread epb
Hi Jeff, I am no longer using the rest server interface. Instead I have made my own custom interface that handles http get/post. In addition to creating this interface, I followed one of the approaches you described and added a list of users to the entity that I am sharing. This works fine, as th

[google-appengine] Re: Rest server: user-group access

2009-08-10 Thread Jeff S (Google)
Yes, what you are describing sounds like Access Control Lists (ACLs) and it is possible to check within your code to see if the current user has necessary permissions before carrying out an action. I'm not familiar with the rest server module that you are using but there might be something in it al