Can one application access other applications data querying the key in Google App Engine?

Question

It would be an enormous security flaw if it does.

Proposed method:

entity = db.get(key)

source: http://code.google.com/appengine/docs/python/datastore/creatinggettinganddeletingdata.html#Getting%5Fan%5FEntity%5FUsing%5Fa%5FKey

Answer 1

No you cannot, unless there is a particular bug you have discovered. Is there any particular reason you think it is possible? This seems fairly easy to test, if you are worried about it. Just create two apps and try to access data from app A from app B.

Answer 2

No. But you could do it using remote_api (and with the permission of the other app's owner).