feat: FileBone(public=True) for public files (#1241)

This PR adds public files. Public files are stored in an extra bucket
that follows this name: public-dot-{__PROJECT_ID}
The bucket must be created with ACL rights.

With getUploadUrl, the parameter public is used to decide whether it is
a public file or not. FileBone(public=True) can only refer to a public file

Public files again can deliver a servingurl, and this PR adds facilities to route these trought the ViUR system.

---------

Co-authored-by: Andreas H. Kelch <>
Co-authored-by: Jan Max Meyer <[email protected]>
Co-authored-by: agudermann <[email protected]>
Co-authored-by: Sven Eberth <[email protected]>

Author: 4 people

src/viur/core/bones/file.py

@@ -128,6 +128,7 @@ class FileBone(TreeLeafBone):
 
     kind = "file"
     """The kind of this bone is 'file'"""
+
     type = "relational.tree.leaf.file"
     """The type of this bone is 'relational.tree.leaf.file'."""
 
@@ -137,7 +138,16 @@ def __init__(
         derive: None | dict[str, t.Any] = None,
         maxFileSize: None | int = None,
         validMimeTypes: None | list[str] = None,
-        refKeys: t.Optional[t.Iterable[str]] = ("name", "mimetype", "size", "width", "height", "derived"),
+        refKeys: t.Optional[t.Iterable[str]] = (
+            "name",
+            "mimetype",
+            "size",
+            "width",
+            "height",
+            "derived",
+            "public",
+        ),
+        public: bool = False,
         **kwargs
     ):
         r"""
@@ -170,6 +180,7 @@ def __init__(
 
         self.refKeys.add("dlkey")
         self.derive = derive
+        self.public = public
         self.validMimeTypes = validMimeTypes
         self.maxFileSize = maxFileSize
 
@@ -191,6 +202,10 @@ def isInvalid(self, value):
         if self.maxFileSize:
             if value["dest"]["size"] > self.maxFileSize:
                 return "File too large."
+
+        if value["dest"]["public"] != self.public:
+            return f"Only files marked public={self.public!r} are allowed."
+
         return None
 
     def postSavedHandler(self, skel, boneName, key):
@@ -298,5 +313,6 @@ def recreateFileEntryIfNeeded(val):
 
     def structure(self) -> dict:
         return super().structure() | {
-            "valid_mime_types": self.validMimeTypes
+            "valid_mime_types": self.validMimeTypes,
+            "public": self.public,
         }