Security settings in slingshot package

[shaxxo]

I would like upload a file using sling shot. However, I would like to have restricted access to the files. The list of users that will have access to the file will change.

I know that the filepicker has a feature where you you create policies and sign policies and thereby I can get a download link that is valid for only few minutes. Anyway I can do this with slingshot ?

I read this section of the documents (https://github.com/CulturalMe/meteor-slingshot#security) . Can anyone elaborate on it?

[ffxsam]

Restricting download access to the files would be done entirely via your choice of cloud storage service. Slingshot only handles uploading files.

If you’re using AWS S3, you should check the documentation on creating file links that expire.

[shaxxo]

So I found your other post.

Securing S3 Downloads with Query String Request Authentication Alternative

Yes, I believe you are on the right track. Here is an SO answer describing the flow so the client can download from s3 using a signed URL : This is the package I’m using to create the signed URL for downloads ( can also be used for uploads ) https://github.com/arbitrarytech/s3policy

AMAZING!!! THANKS!