search

qwerin / fusion-tables

Automatically exported from code.google.com/p/fusion-tables
0 stars 1 forks source link

permission to just INSERT #538

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
At the moment as long as permission to INSERT is the same as permission to edit 
any developer will have to insert into any application enough permission  that 
it can write (and read) the entire table. if an hacker/debbugger gets the 
possibility to send SQL with the same authentication of the application he will 
be able to destroy alter and read all the records in the table.

on the other hand with "INSERT only" permission it would be possible to develop 
much safer code and to allow developers to use GFT to "safely" harvest social 
information from applications.

ciao
Andrea

Original issue reported on code.google.com by andrea.d...@uniroma2.it on 28 May 2011 at 2:41

GoogleCodeExporter commented 9 years ago

Original comment by kbris...@google.com on 22 Jun 2011 at 1:35

GoogleCodeExporter commented 9 years ago 
Issue 564 has been merged into this issue.

Original comment by rshap...@google.com on 23 Jun 2011 at 12:50

GoogleCodeExporter commented 9 years ago 
I wanted to suggest, look at the issue:

   31 - Data entry into fusion tables with google forms

If 31 is fixed, this issue would be fixed. A form would be a way to allow 
someone to only update. But, issue 31 seems to have lots of support and it has 
not been fixed, so.... We will see.

Original comment by kray2097...@gmail.com on 22 Nov 2011 at 4:35