Matt Palmer a98d2a8086 FEATURE: allow S3 ACLs to be disabled (#21769) ... AWS recommends running buckets without ACLs, and to use resource policies to manage access control instead. This is not a bad idea, because S3 ACLs are whack, and while resource policies are also whack, they're a more constrained form of whack. Further, some compliance regimes get antsy if you don't go with the vendor's recommended settings, and arguing that you need to enable ACLs on a bucket just to store images in there is more hassle than it's worth. The new site setting (s3_use_acls) cannot be disabled when secure uploads is enabled -- the latter relies on private ACLs for security at this point in time. We may want to reexamine this in future.		2023-06-06 15:47:40 +10:00
..
base_store_spec.rb	DEV: Add both safe and unsafe Discourse.store.download methods (#21498)	2023-05-11 17:27:27 +08:00
local_store_spec.rb	DEV: Apply syntax_tree formatting to spec/*	2023-01-09 11:49:28 +00:00
s3_store_spec.rb	FEATURE: allow S3 ACLs to be disabled (#21769)	2023-06-06 15:47:40 +10:00