just wanted to know if it is a good practice for app development where in build variants can access same set of server environment. For example, with a production build I can access development, staging, and production server just by changing configuration from hidden settings or by appending environment pefix on login screen.
What kind of attacks are possible and what are the factors which supports developers to not to follow such practices. I think it's a big security risk where in internal employee or smart hackers can use such setting to attack secure databases.
If this is a Security risk then how should be organise build variants and their mapping with server environments. For example, develop build should point to develop web servers and test build should point to testing servers and so on.
Further how I can make good use of playstore alpha, beta and prod channels. Should builds released to alpha channel point to production. Or they should point to different environments.
I suppose, that theanswer is build variants and gradle config adding url to BuildConfig file from Gradle