Does google app engine provide an access control solution?

Question

Is there any access control solution available for apps running in google app engine? I am specifically interested in IP white listing.

Answer 1

There are three roles available with regard to the administration console.

Viewer, Developer and Owner.

https://developers.google.com/appengine/docs/adminconsole/roles

In addition, you can restrict access to users on a specific domain.

But you probably want this:

https://developers.google.com/appengine/docs/python/gettingstarted/usingusers

You can then force users to sign in via google (or a few other choices) and you get to see their unique ID. You can then use that unique ID to grant or deny access to various parts of your site.

https://developers.google.com/appengine/docs/python/tools/webapp/utilmodule

Google App Engine provides several useful services based on Google infrastructure, accessible by applications using libraries included with the SDK. One such service is the Users service, which lets your application integrate with Google user accounts. With the Users service, your users can use the Google accounts they already have to sign in to your application. Blockquote