Skip to content

Conversation

@iago1501
Copy link
Contributor

@iago1501 iago1501 commented Jun 24, 2025

Description
This PR introduces bucket restriction functionality to the VTEX File Manager GraphQL wrapper. With these updates, you can now control access and define allowed operations for specific buckets, enhancing file security and management within the platform.

Key Changes

  • Added logic for bucket restrictions.
  • Updated resolvers to support new access control rules.

Motivation

The goal of this change is to ensure that only authorized users or services can access or manipulate files in specific buckets, preventing unauthorized access and potential data leaks.

How to Test

Testing Workspace

Perform upload, download, and listing operations on 'logo' bucket with and without this resource

image

For testing purposes, and, to do it in an easier way, you can change the logo bucket to 'images' and test it directly into media gallery: admin/new-cms/media-gallery

This is the expected error message

image

@iago1501 iago1501 self-assigned this Jun 24, 2025
@vtex-io-docs-bot
Copy link

vtex-io-docs-bot bot commented Jun 24, 2025

Beep boop 🤖

I noticed you didn't make any changes at the docs/ folder

  • There's nothing new to document 🤔
  • I'll do it later 😞

In order to keep track, I'll create an issue if you decide now is not a good time

  • I just updated 🎉🎉

@vtex-io-ci-cd
Copy link

vtex-io-ci-cd bot commented Jun 24, 2025

Hi! I'm VTEX IO CI/CD Bot and I'll be helping you to publish your app! 🤖

Please select which version do you want to release:

  • Patch (backwards-compatible bug fixes)

  • Minor (backwards-compatible functionality)

  • Major (incompatible API changes)

And then you just need to merge your PR when you are ready! There is no need to create a release commit/tag.

  • No thanks, I would rather do it manually 😞

@iago1501 iago1501 changed the title Bucket Restrictions [STR-600] Bucket Restrictions Jun 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants