Hi, we would like to start running external tests for our game, but for us to do this effectively we want to disable users from getting past the log in step on our game. What would be the best way to block users from signing in to the game? currently we are thinking of manually changing the attached steam application ID to something incorrect. Is there a better way of doing this?
Thanks
What specifically is your concern? Is the game being openly distributed, but you only want some people to be able to play, or is it that you're concerned about people sending their friends copies of the executable? Or something else? What DRM are you using? Are you distributing or selling Steam keys for the game?
The login API calls that you leave open (you can block any Client API calls using the API permissions policy) is available for a client to call. The only way you could block a player from logging in using an available API would be to ban the account.
We will be distributing steam keys to a small number of people who we want to use to test our backend implementation and game systems. We want to be able to disallow people from starting the game for periods of time and that includes logging in with playfab as we wont have anti cheat up and running for these initial tests so it would be great if they couldn't get past that step. If i disable the log in with steam client api call will a call tot hat just return an Error from playfab?
Also is there a UI for setting API permissions or can it only be done through the Admin API. If its the latter, whats your recommendation for calling admin api scripts? Where is it best done from.
Thanks!
Any Client API call you set to disabled using the API permissions will return an error for all attempts to call it, regardless of the source. Here's the tutorial on how to use those permissions: https://api.playfab.com/docs/tutorials/title-management/api-policy.
But to isolate your tests to only specific users, you'll really want to use something that insures that only those players have access. Any login API you leave enabled can be used by all users. So you should either use the existing Steam Key system, or an "entitlement" type system, where you have an inventory item the players must possess for them to be able to play (blocked from joining sessions, for example). That way, you could send Coupon Codes our for those item to the players who you want to let in.
2 People are following this question.
