Is there way for some more advanced permission handling? I would like to allow reading only for users which uploaded specified files
Hello, @jakub.neukirch
Thanks for this question.
Can you please describe your request in more detail? It will be perfect if you will let us know about which exactly files should upload users?
As for reading restriction, allow me to mention that we have some examples of security policies in the plugin’s documentation:
https://docs.zeroqode.com/plugins/aws-file-uploader-plugin#additional-security
Also, following this link you can find more Bucket Policy examples:
https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html
Looking to hear more details from your side.
Best regards,
I would like to have directories per user. Each user has permission to read and write in their directory, but not in other users directory. For example user ‘A’ uploads image, user ‘B’ can’t open this image but user ‘A’ can.
Hello, @jakub.neukirch
I’m afraid that we can’t provide you exact instructions on this matter.
Allow me to note that the setting up of the CORS is not the part that should be covered by the plugin’s functionality.
Each user is free to set up its CORS policies as per his user case/desire and the plugin creator/support is not in charge of providing the guidelines of this process.
Please analyze this documentation to find the most convenient solution for your case:
https://keithweaverca.medium.com/only-allowing-access-to-your-s3-bucket-via-your-website-5ca5c8546152
https://docs.aws.amazon.com/AmazonS3/latest/userguide/example-bucket-policies.html
In case we can help you with advice regarding the functionality of the plugin - let me know.
Sorry for this inconvenience.
Best regards,