How to trust developer? Safety measures?

Question

Brachi OP

Created Mar ’20

Replies 2

Boosts 0

Participants 3

Hello,

If an organization adds a new app developer who is working remotely to their Apple Developer/App Store Connect account and you only assign the role "developer" to that person, can that person do any bad things to the organization? Do you simply have to trust the person?

What can be done to make sure the person is trustworthy?

Are there any precautions or additional safety measures that an organization could implement to make sure that a new team member (who is working remotely only) can't abuse the rights that the "developer" role in the Apple Developer/App Store Connect account offers?

What would be the worst thing that a person could do if he has access to the organization's Apple Developer/App Store Connect account with "developer" role?

Thank you so much, kind regards and stay safe these days!

Boost

Answer 1

Claude31 OP

Mar ’20

You'll get a lot of information here:

https://developer.apple.com/support/roles/

Seems there is little a developer can do that could cause serious harm (except spoiling the code itself !)

You should forbid access to certificates (if I remember, done in Roles).

Could call support to get further advice:

https://developer.apple.com/contact/#!/topic/select

0

Answer 2

KMT OP

Mar ’20

Your 'safetly measures' comfort should principally lie in the contract/legal agreement between you and other individuals based on what they have been hired to do.

Once that document is in place, you can then look at the mechanics involved in each role, keeping in mind the difference between Account/Member Center roles and App Store Connect roles - 'Developer' is basically an ASC role, with certain abilities in the Member Center.

See...

- ASC User Roles:

Learn more about App Store Connect roles

Role Permissions - what each role can do is broken down here by topic...

- Program/Member Center Roles

https://developer.apple.com/support/roles/

- Search Ad account roles:

Invite users

0