Hi! Is there something to do to distribute Graphco...
# prisma-whats-news
sdubois
04/10/2017, 6:52 PMHi! Is there something to do to distribute Graphcool files through CDN or is it built-in? I have users in us-west, us-east, europe, and all the way to australia...
sdubois
04/11/2017, 5:46 AM@artyom would you have info to share about this? Thanks 😊
sdubois
04/11/2017, 7:45 AMAlso whatever the answer is, I think it needs to be clearer in documentation. Googling "Graphcool CDN" and looking at the "file management" documentation didn't help much.
sdubois
04/11/2017, 7:46 AM1 more question is, how do you plan to fix the public access to the files? Your documentation states: "Currently, uploading and downloading files is allowed to everyone. The file itself is publicly available at the url of the file node, so everyone who knows the file secret and your project id has access to your file! "
n
nilan
04/11/2017, 8:15 AMhey, files are hosted using Cloudfront CDN
nilan
04/11/2017, 8:16 AMregarding your second question, could you go more into detail what kind of access protection you would need?
s
sdubois
04/11/2017, 8:42 AMHey thanks @nilan! I'd just expect to have permissions like for other elements? This is actually quite critical if I'm going to use Graphcool. I currently have a rails app with audio/video content hosted on AWS, and I was thinking that migrating that content to Graphcool would be a great first step to migrate. But I'd expect that a logged-out user, or a user without an active subscription to our product shouldn't be able to access the data.
n
nilan
04/11/2017, 8:50 AMPermissions for files makes a lot of sense, thanks for the suggestion! How do you currently handle that topic? I guess another approach is encrypting the files but that's pretty involved
s
sdubois
04/11/2017, 9:05 AMThat's also why I want to migrate 😄 current situation with AWS is similar to what you described in case of Graphcool. I created https://github.com/graphcool/feature-requests/issues/166
sdubois
04/11/2017, 9:06 AMDo you think it would be difficult to implement? What kind of priority could it have?
I could maybe start with Graphcool's current situation but would need some confidence that it would be fixed rather soon, otherwise our content will start leaking as the platform grows
n
nilan
04/11/2017, 4:46 PMWe're planning different improvements to our File API, this being one of them. However, it's hard to give a precise ETA for that.
The file URLs are not guessable, this should usually be enough. If you don't encrypt the files itself, you can't stop people from sharing them.
s
sdubois
04/11/2017, 5:44 PMOk i understand. The only other way around that would be to convert files to data URIs I guess but maybe not very practical...
2 Views