Closed Bug 848869 Opened 11 years ago Closed 11 years ago

Limit the API submission per day

Categories

(Marketplace Graveyard :: API, defect, P4)

defect

Tracking

(Not tracked)

RESOLVED FIXED
2013-04-11

People

(Reporter: eviljeff, Assigned: chuck)

References

Details

(Whiteboard: p=2)

Currently anyone with an API key can submit any number of apps via it - i.e. thousands a day!  Even when we have the capacity to review that many (which we don't currently) it would still be sensible to be able to limit the number an individual user can submit.

The capability to set a limit is important right now (once its in place then changing it from 10 to 1000 or visa versa shouldn't be a big problem)
We should do this either per person or per tier. So that the average developer can be limited to 10 submissions per day and partners (or some other blessed status) can do a few thousand.

Ideally we need to rate limit all the API, not just the submission.
(In reply to Andy McKay [:andym] from comment #1)
> We should do this either per person or per tier. So that the average
> developer can be limited to 10 submissions per day and partners (or some
> other blessed status) can do a few thousand.

yeah, agreed.  We could manually add those with a blessed status to a group and either give them a significantly higher limit or have a limit free group for phonegap type partners.
An Apps:APINoLimit permission or similar.
Priority: -- → P4
Whiteboard: p=2
Assignee: nobody → charmston
Status: NEW → ASSIGNED
Depends on: 858287
Landed:
https://github.com/mozilla/zamboni/compare/2835697c1cff...f74f1a8b5e65

Two major changes here:
1) Users with the Apps:APIUnthrottled permission will never be throttled on API requests
2) The app creation endpoint is now throttled at 10 requests/day.

Let me know how this works out for you!
Status: ASSIGNED → RESOLVED
Closed: 11 years ago
Resolution: --- → FIXED
Target Milestone: --- → 2013-04-11
You need to log in before you can comment on or make changes to this bug.