Profile images are going to be a thing

[ckarlof]

mozilla/fxa-content-server#1327

@ckolos, we should start thinking about we're going to store and serve these in prod.

[seanmonstar]

This is the first scope that will be giving write access. We don't yet have an agreed way to display write. We could have profile:avatar:write, and have that imply profile:avatar (read). There's also the profile bucket, and a full write perhaps could be profile:write?

[ckarlof]

Good question @seanmonstar. I don't anticipate handing out write access for core profile info to anything other than our own UI.

How about we continue with:

• profile - read access on profile
• profile:avatar - read access on avatar
• profile:write - write access to profile

We have a little parsing awkwardness here, but I'm not sure that going with write:profile makes it any better.

[ckarlof]

My proposed timeline for FxA Profile images:

https://bugzilla.mozilla.org/show_bug.cgi?id=1050820#c1