Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Cannot set both public read access & access policy on the same container #197

Closed
madmox opened this issue May 18, 2018 · 7 comments
Closed
Assignees
Labels
🪲 bug Issue is not intended behavior ⚙️ blobs Related to blob storage ✅ merged A fix for this issue has been merged
Milestone

Comments

@madmox
Copy link

madmox commented May 18, 2018

Storage Explorer Version: 1.1.0
Platform: Windows
Architecture: ia32
Build Number: 20180507.1
Commit: bcc8990d

Steps to Reproduce:

  1. Create an Access Policy on your blob container with full access (rwdl)
  2. Set public access level to "public read access for blobs only" on your blob container

OR

  1. Set public access level to "public read access for blobs only" on your blob container
  2. Create an Access Policy on your blob container with full access (rwdl)

Expected Experience:

You should be able to have both an access policy (to let contributors manage files in your container) and public read access enabled (to let anonymous users be able to access the files) on your container.

Actual Experience:

  • When setting public read access level on the container, all access policies are removed.
  • When creating a new access policy on the container, the public access level is reset to "no public access".
@madmox
Copy link
Author

madmox commented May 18, 2018

Workaround: do not use access policies with public read access, but generate a SAS without using access policies. The solution is less flexible (can't revoke or extend accesses to contributors), but it works.

@craxal
Copy link
Contributor

craxal commented May 23, 2018

Yep, that's a bug! The same REST operation controls both ACLs and the access level, but we don't preserve both pieces of information when setting either of them.

@MRayermannMSFT
Copy link
Member

Fix has been merged into master for 1.3.0.

@MRayermannMSFT MRayermannMSFT added ✅ merged A fix for this issue has been merged and removed pending labels Jun 27, 2018
@v-xuanzh
Copy link

v-xuanzh commented Jul 4, 2018

The changed access level can’t be saved for one blob container, so create the new bug #380 which is related to this issue.

@dagood
Copy link
Member

dagood commented Jul 11, 2018

This is still broken for me after updating to 1.3.0. Specifically, the scenario in #317 Changing container Access Policies sets Public Access Level to "Private" which was closed as a duplicate of this issue. About info:

Version: 1.3.0

Platform: Windows
Architecture: ia32
Build Number: 20180706.3
Commit: 5319bc48

Should I file a new issue, or will this one be reopened?

@MRayermannMSFT
Copy link
Member

I've reopened the issue. Apologies for not actually fixing. We'll be releasing a hotfix ASAP.

@MRayermannMSFT
Copy link
Member

1.3.1 notification was sent out last night. That version contains the full fix for this bug. I am now closing this issue.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
🪲 bug Issue is not intended behavior ⚙️ blobs Related to blob storage ✅ merged A fix for this issue has been merged
Projects
None yet
Development

No branches or pull requests

5 participants