There was an image in the storage bucket that was pushed to production as a link like this https://ENDPOINT_URL/v1/storage/buckets/BUCKET_ID/files/FILE_ID/view?project=PROJECT_ID does it mean that project was compromised and in theory anybody can access to it with sdk?
Hi 👋 View, preview and download endpoints for files all respect permissions. You can open Appwrite Console and check settings of your bucket. Whoever has read permissions was possibly allowed to see the file.
If you have file security enabled, also please view details of a file in Appwrite Console and check permissions there. Those with read permissions on file could aslo possibly read the file
Recommended threads
- Query Appwrite
Hello, I have a question regarding Queries in Appwrite. If I have a string "YYYY-MM", how can I query the $createdAt column to match this filter?
- Different appwrite IDs are getting expos...
File_URL_FORMAT= https://cloud.appwrite.io/v1/storage/buckets/[BUCKET_ID]/files/[FILE_ID]/preview?project=[PROJECT_ID] I'm trying to access files in my web app...
- Invalid document structure: missing requ...
I just pick up my code that's working a week ago, and now I got this error: ``` code: 400, type: 'document_invalid_structure', response: { message: 'Inv...