Policy enforcement in file and blob creation

zachmullen commented 3 years ago

Policies we to enforce around uploading:

[ ] The size of the blob that is attached to a file matches the declared size of the file.
[x] File size values are immutable, at least via REST.
[x] The blob field of a file is immutable. It can be changed from no file to having a file, but not from one file to another.
[ ] Blobs can only be uploaded if they correspond to a pre-initialized file. This will need changes in both S3FF and this repository. See https://github.com/girder/django-s3-file-field/issues/204

mgrauer commented 3 years ago

Security focused follow up to #124.

zachmullen commented 3 years ago

Third checkbox here is met by #166

kitware-resonant / dkc-next