使用应用程序机器标签对照片进行分组与安全性
我想知道如何在 Flick 中对照片进行分组,以便稍后能够通过 API 读取并将它们分配给某个事件。因此,一个活动应该分配 X 张照片。
最初以为我会在画廊中组织,但照片数量有限。接下来是按集合进行组织,但我无法确定集合是否有限制。
然后我阅读了 namespace:predicate=value 功能。这可能会派上用场,因为我可以为每个事件定义唯一的值。
但我有一个与安全相关的问题? 1. 我可以为每个用户/应用程序定义一个唯一的标签吗?我们可以为每个应用程序订阅一个唯一的标签吗?
2. 用户可以公开查看我的标签吗?
3. 将来其他人可以将我的特定标签附加到不同的照片上,然后通过 API 读取我的照片库吗?
4. 我可以从标记机制中排除一些第三方照片吗?
I am wondering how should I group my photos inside Flick to be able to read later by API and assign them to a event. So an event should have X photos assigned.
Initially thought that I will organize in Galleries but that has a limit of photos. Next was to organize in Sets, but I couldn't locate if a Set has a limit.
Then I've read about namespace:predicate=value functionality. This is something which could come handy as I can define unique value for each event.
But I have a questions relative to security?
1. Can I define a unique tag per user/application? Can we subscribe to a unique tag per app?
2. Are my tags publicly viewable by the user?
3. Can in the future someone else attach my specific tags to different photos and so SPAM my photo gallery read out by API?
4. Can I exclude some 3rd party photos from the tagging mechanism?
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(1)
是的,最简单的方法是使用应用程序名称作为命名空间,例如 app1:predicate=value, app2:predicate=value
任何人都可以将特定标签应用于他们的照片。但是,您可以限制对具有特定标签的所有照片的 API 查询,以便仅返回给定用户的照片,这将阻止人们向您的图库发送垃圾邮件。
如果您想从标记机制中排除其他用户的照片,您可以只向给定用户请求带有给定标记的照片(这可以通过 API 调用实现),也可以对每张照片进行审核,以便仅在您检查后才会显示在您的图库中(例如,保留一个数据库表,其中包含照片 ID 和每张照片的批准标志)。
Yes, the easiest way to do this would be the use the app name as the namespace, e.g. app1:predicate=value, app2:predicate=value
Yes, if the photo is public then you can also see the machine tags associated with it.
Anyone can apply a particular tag to their photos. However, you can restrict the API query for all photos with a particular tag so that only photos by a given user are returned, which would stop people spamming your gallery.
If you want to exclude photos from other users from the tagging mechanism, you can either only request photos with a given tag from a given user (this is possible with the API call), or you could moderate each photo so that it only shows up in your gallery once you've checked it (e.g. keep a database table with the photo ID and an approved flag for each photo).