New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Add perms to assets in GCS #10773

Open

6 tasks

mattkrick opened this issue Jan 31, 2025 · 0 comments

Assignees

Labels

Member

mattkrick commented Jan 31, 2025 •

edited

Loading

AC

Accessing GCS bucket assets should require a presigned key or something similar
user avatar should be open to everyone
org avatar open to everyone
assets should be open to the Organization? (this'll be kinda tricky since we store assets on the User, maybe we move it to /Organization?) or we could make a query that finds if 2 users are in the same org. tbd
SAML config locked to the org
?? audit the rest of anything else we have in there

https://parabol.slack.com/archives/C836NA350/p1738279429094589?thread_ts=1738256782.141939&cid=C836NA350

mattkrick added the security label

mattkrick self-assigned this

mattkrick added this to Product

github-project-automation bot moved this to To triage in Product

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment