Guild icon
S3Drive
Community / support / Write-only bucket / Multiple users on access ID
Avatar
I've kind of tested this and it seems to work but checking its 'permitted'. If I want to issue access to multiple parties with write only access to files to take photos/vid - would this be acceptable use? this would be incredibly useful for the use purpose i'm thinking of.. ie, upload of photo confirmation directly to a company file for verification purposes.
Avatar
We haven't tested write-only or read-only buckets and as such S3Drive requires both write and read permissions to function properly. However if app works with limited sets of permission for your use case, there is no harm using it like this. Even though we're designing app so it requires minimum set of permissions or operations for its functions it may happen that some feature might not work properly in the future. E.g. if you upload a file, the existing file would be overwritten, if versioning is enabled the previous version would remain restorable however if versioning isn't enabled the existing file version is lost. In the future we might actually perform read first in order to display prompt to the user to ask if they actually wan't to ovewrite the file. Such read would've failed if there is no read permission to the bucket, so we would have to fail gracefully in order to not break things in your case. Our aim is to not break workflows, but if by any chance it's not easy/possible to implement such graceful failure handling we may be required to prioritize features based on app standard usage.
6:27 PM
As such there is no issue with having multiple users on one access ID. It's not a best security practice, but no technical issue from S3 or S3Drive perspective.
Avatar
great, the read write thing might not be an issue in reality, but just a bit of a light bulb moment for its use case
Tom changed the channel name: Write-only bucket / Multiple users on access ID 9/7/2023 7:38 AM
Exported 5 message(s)
Timezone: UTC+0