If you know of a better title, please feel free to edit the title.
I'm making a simple google Web App so colleagues at my workplace can view details about a QA that they received. The issue is only certain individuals have Google Apps accounts, so the Web App cannot be restricted to users on our domain.
I was considering generating a random number for each QA response, then using the QA details and that number to generate a hash that is essentially a unique url. ie
https://script.google.com/a/macros/MyDomain/MyApp/?code=UniqueCode. visiting that URL with the unique code will show you the details on the QA.
The unique code would be retrieved via GET.
Is this secure? Can this be easily cracked to view very basic info on employees?