search

IFRCGo / go-api

MIT License
14 stars 6 forks source link

Document access control #1479

Closed tovari closed 3 weeks ago

tovari commented 2 years ago

Currently, uploaded pdf documents are stored on a blob storage, which is publicly accessible. We store here even those documents that should have limited visibility. In case the document url gets shared somehow, the document visibility cannot be applied anymore. Eg, this pdf is only available for the Movement on GO, but anyone can open the link: https://prddsgofilestorage.blob.core.windows.net/api/sitreps/5854/Multisectoral_Needs_Analysis_Report_Hungary-_June_2022.pdf

tovari commented 2 years ago

@batpad suggests: [08/07 13:50] sanjaybhangar (Guest)

I think we'd need to use this Shared Access Signature thing for Azure Blob Storage: https://stackoverflow.com/questions/55233010/azure-blob-storage-pre-signed-url-features

And then make the storage private, and the application would need to generate a temporary signed URL that the user can use to download the resource.

nanometrenat commented 9 months ago

Xref historic issue https://github.com/IFRCGo/go-frontend/issues/926

szabozoltan69 commented 3 weeks ago

Closed due to duplication.