Currently anyone with an API key can submit any number of apps via it - i.e. thousands a day! Even when we have the capacity to review that many (which we don't currently) it would still be sensible to be able to limit the number an individual user can submit. The capability to set a limit is important right now (once its in place then changing it from 10 to 1000 or visa versa shouldn't be a big problem)
We should do this either per person or per tier. So that the average developer can be limited to 10 submissions per day and partners (or some other blessed status) can do a few thousand. Ideally we need to rate limit all the API, not just the submission.
(In reply to Andy McKay [:andym] from comment #1) > We should do this either per person or per tier. So that the average > developer can be limited to 10 submissions per day and partners (or some > other blessed status) can do a few thousand. yeah, agreed. We could manually add those with a blessed status to a group and either give them a significantly higher limit or have a limit free group for phonegap type partners.
An Apps:APINoLimit permission or similar.
Landed: https://github.com/mozilla/zamboni/compare/2835697c1cff...f74f1a8b5e65 Two major changes here: 1) Users with the Apps:APIUnthrottled permission will never be throttled on API requests 2) The app creation endpoint is now throttled at 10 requests/day. Let me know how this works out for you!