| *** jamesmcarthur has joined #storyboard | 00:14 | |
| *** jamesmcarthur has quit IRC | 00:18 | |
| *** jamesmcarthur has joined #storyboard | 01:15 | |
| *** jamesmcarthur has quit IRC | 01:20 | |
| *** jamesmcarthur has joined #storyboard | 01:47 | |
| *** jamesmcarthur has quit IRC | 01:52 | |
| *** jamesmcarthur has joined #storyboard | 01:52 | |
| *** jamesmcarthur has quit IRC | 01:55 | |
| *** jamesmcarthur has joined #storyboard | 02:38 | |
| *** jamesmcarthur has quit IRC | 02:56 | |
| *** jamesmcarthur has joined #storyboard | 03:04 | |
| *** jamesmcarthur has quit IRC | 03:18 | |
| *** jtomasek has quit IRC | 04:45 | |
| *** jamesmcarthur has joined #storyboard | 05:18 | |
| *** jamesmcarthur has quit IRC | 05:22 | |
| *** jamesmcarthur has joined #storyboard | 11:19 | |
| *** jamesmcarthur has quit IRC | 11:24 | |
| SotK | So, it strikes me that attachments on private stories will be pretty trivial to find if the container is public (which it needs to be for download links to work without generating a tempurl each time aiui) | 12:44 |
|---|---|---|
| SotK | Did we already consider this in our earlier discussions about it? | 12:44 |
| clarkb | I thought we would tempurl all of the ? | 12:51 |
| SotK | that was my understanding at one point but the spec suggests that we decided that we just needed to store a public url | 12:58 |
| SotK | but it also assumes that the object storage isn't indexed | 13:01 |
| clarkb | could it be aurl in storyboard that gets 302'd to tempurl? | 13:03 |
| clarkb | that makes it stable but you can check authentication and authorization first | 13:04 |
| SotK | yeah, that can probably work | 13:09 |
| fungi | does swift automatically index object urls on public containers? | 15:24 |
| fungi | the point was more about using some storage mechanism where you need to know the url to the object, and using complex enough object names so as to make brute-force guessing them unfeasible | 15:25 |
| fungi | if tempurls are the only solution in swift that matches it, then i guess that's it | 15:25 |
| fungi | mainly curious what about public swift containers makes an arbitrary object "pretty trivial to find" | 15:26 |
| fungi | i had assumed swift allowed you to divorce object listing permission from object fetching permission, but perhaps that was me imagining things again | 15:28 |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a way to add attachments to a story https://review.openstack.org/633840 | 15:36 |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a directive for uploading files https://review.openstack.org/634602 | 15:37 |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a service to handle uploading files to Swift https://review.openstack.org/634603 | 15:37 |
| SotK | hmm, maybe I need to read more about swift ACLs | 15:38 |
| fungi | i got the impression they were fairly fine-grained, but will admit it's been a while since i configured any | 15:39 |
| SotK | yeah, it turns out I failed to read properly and you can indeed have different list permission from fetch permission | 15:42 |
| fungi | cool, just wanted to make sure we didn't end up with unnecessary complexity on the initial implementation. we can always get fancy later if someone wants to work on that | 16:07 |
| fungi | i think it ought to be sufficiently secure for now to clearly document that deployments should secure their swift containers with appropriate urls to prevent listing objects if they want to support "private attachments" | 16:09 |
| *** jamesmcarthur has joined #storyboard | 18:46 | |
| *** jamesmcarthur has quit IRC | 18:50 | |
| *** jamesmcarthur has joined #storyboard | 19:04 | |
| *** jamesmcarthur has quit IRC | 19:06 | |
| *** jamesmcarthur has joined #storyboard | 19:15 | |
| *** jamesmcarthur has quit IRC | 19:24 | |
| *** jamesmcarthur has joined #storyboard | 19:25 | |
| *** jamesmcarthur has quit IRC | 19:27 | |
| *** jamesmcarthur has joined #storyboard | 19:28 | |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a directive for uploading files https://review.openstack.org/634602 | 19:28 |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a service to handle uploading files to Swift https://review.openstack.org/634603 | 19:28 |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a way to add attachments to a story https://review.openstack.org/633840 | 19:28 |
| *** jamesmcarthur has quit IRC | 19:29 | |
| *** jamesmcarthur has joined #storyboard | 19:31 | |
| *** jamesmcarthur has quit IRC | 19:33 | |
| *** jamesmcarthur has joined #storyboard | 19:36 | |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a directive for uploading files https://review.openstack.org/634602 | 19:37 |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a service to handle uploading files to Swift https://review.openstack.org/634603 | 19:37 |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a way to add attachments to a story https://review.openstack.org/633840 | 19:37 |
| *** jamesmcarthur has quit IRC | 19:38 | |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Rebuild node-sass bindings when running the webclient dev server https://review.openstack.org/634615 | 19:42 |
| *** jamesmcarthur has joined #storyboard | 19:50 | |
| *** jamesmcarthur has quit IRC | 19:53 | |
| SotK | https://github.com/ColdrickSotK/storyboard-environment might be useful for folk wanting to test the attachments patches | 19:57 |
| SotK | I think they're a working MVP of attachments now, so it'd be good to get thoughts from interested people as and when you have time :) | 19:58 |
| *** jamesmcarthur has joined #storyboard | 20:01 | |
| *** jamesmcarthur has quit IRC | 20:04 | |
| *** jamesmcarthur has joined #storyboard | 20:04 | |
| *** jamesmcarthur has quit IRC | 20:06 | |
| *** jamesmcarthur has joined #storyboard | 20:10 | |
| *** jamesmcarthur has quit IRC | 20:13 | |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a directive for uploading files https://review.openstack.org/634602 | 20:15 |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a service to handle uploading files to Swift https://review.openstack.org/634603 | 20:15 |
| openstackgerrit | Adam Coldrick proposed openstack-infra/storyboard-webclient master: Add a way to add attachments to a story https://review.openstack.org/633840 | 20:15 |
| *** jamesmcarthur has joined #storyboard | 20:34 | |
| *** jamesmcarthur has quit IRC | 20:51 | |
| *** jamesmcarthur has joined #storyboard | 21:11 | |
| *** jamesmcarthur has quit IRC | 21:16 | |
| *** jamesmcarthur has joined #storyboard | 21:33 | |
| *** jamesmcarthur has quit IRC | 21:37 | |
| *** jamesmcarthur has joined #storyboard | 21:48 | |
| *** jamesmcarthur has quit IRC | 21:51 | |
| *** jamesmcarthur has joined #storyboard | 22:12 | |
| *** jamesmcarthur has quit IRC | 22:16 | |
| *** jamesmcarthur has joined #storyboard | 22:33 | |
| *** jamesmcarthur has quit IRC | 22:37 | |
| *** jamesmcarthur has joined #storyboard | 22:37 | |
| *** jamesmcarthur has quit IRC | 22:41 | |
| *** jamesmcarthur has joined #storyboard | 22:45 | |
| *** jamesmcarthur has quit IRC | 22:49 | |
| *** jamesmcarthur has joined #storyboard | 23:06 | |
| *** jamesmcarthur has quit IRC | 23:10 | |
| *** jamesmcarthur has joined #storyboard | 23:27 | |
| *** jamesmcarthur has quit IRC | 23:31 | |
| *** jamesmcarthur has joined #storyboard | 23:48 | |
| *** jamesmcarthur has quit IRC | 23:52 | |
Generated by irclog2html.py 2.15.3 by Marius Gedminas - find it at mg.pov.lt!