[sims] Sims 8 new version?

[matt40k]

I know it's probably not been thought about yet... But will School's have access to the API? Or will this be another Capita Partner only feature?

 

I'm sure they'd thought about it. All schools have access to the current API (technically), its just the level of entry is pretty high. A school wouldn't be able to afford a development team, so if they do any sort of development corners will be cut - such as single point of failure (ie you leave and no-one can pick it up without recruiting someone on mega bucks), not having someone with the correct skills - I'm shocked by how few professionals don't use version control but i digress.

 

If you look at the way Microsoft has gone with PowerBI - the custom visuals - the framework, code examples are all completely free. Anyone can build something, but if you want to promote it production in the gallery, you code has to be validated. Now Microsoft don't charge, but they have only a handful submissions, have more money and developer resource. So I suspect Capita will charge to get something out of sandbox, which they kinda already do.

 

I know some of you folks will argue, but lets face it, some idiot committed his private key for Amazon and we all laughed as "hackers" spun up thousands of vps and run up a a massive bill, but what happens if that happens to say GroupCall (unlikely as it is) or the DfE? You can bet folks will be blaming Capita for giving them access as hackers suck out all the data. So yer, I think Capita will need to vet them and they'll most likely charge - plus its Capita. They'll charge.

[SteveM555]

I'm sure they'd thought about it. All schools have access to the current API (technically), its just the level of entry is pretty high. A school wouldn't be able to afford a development team, so if they do any sort of development corners will be cut - such as single point of failure (ie you leave and no-one can pick it up without recruiting someone on mega bucks), not having someone with the correct skills - I'm shocked by how few professionals don't use version control but i digress.

 

If you look at the way Microsoft has gone with PowerBI - the custom visuals - the framework, code examples are all completely free. Anyone can build something, but if you want to promote it production in the gallery, you code has to be validated. Now Microsoft don't charge, but they have only a handful submissions, have more money and developer resource. So I suspect Capita will charge to get something out of sandbox, which they kinda already do.

 

I know some of you folks will argue, but lets face it, some idiot committed his private key for Amazon and we all laughed as "hackers" spun up thousands of vps and run up a a massive bill, but what happens if that happens to say GroupCall (unlikely as it is) or the DfE? You can bet folks will be blaming Capita for giving them access as hackers suck out all the data. So yer, I think Capita will need to vet them and they'll most likely charge - plus its Capita. They'll charge.

 

I completely agree that any code would need vetting, I mean, if done incorrectly and the API gets spammed with large requests it could be detrimental to the service. I would just like some sort of access for Schools, even if it is basic (like CommandReporter currently)

 

Regarding the security you mentioned, it shouldn't really make any difference. I mean, it's probably more likely someone's password gets stolen that has a greater access than a read only API with a key. Maybe limitations could be put in place to accept requests from authorised IPs only?

 

The skills needed could be an issue, like you mentioned. But then again, I wouldn't expect anyone to just develop applications off their own back (without School/SLT approval anyway).

 

All I ask is that Schools are not automatically excluded from any sort of API access, even if it was on a basic level it would be great. I am not talking about developing commercial applications, just for in-house use.

 

Looking forward to see what comes in 2017! Can we expect to see this in action at BETT 2017??

[PhilNeal]

School access to APIs is planned - the trick we have to pull off is being sure that access is secure and legal.

 

GDPR makes us a Data Processor (as well as the school) which will have to be factored into how we approve access to the database. For example if a school grants access to a TP are we jointly responsible if data leaks out? Can a school legally write extensions to SIMS and use it's own data in a test environment?

 

We're talking to the ICO to establish what the new law will mean in practice.