locked
User authorization to access storage blob RRS feed

  • Question

  • Let's say I have sets of pictures (galleries) and I want to set some rules regarding which user groups can access these sets (or even particular pics). Since the pic is just a url (like http://azure-storage/container/...jpg) this means the user should be redirected to login page if he tries to access it. Can this be done in case of a particular blob? How?

    Thanks!

    Friday, August 8, 2014 8:35 AM

Answers

  • Hello Alex,

    Thanks for posting here!

    • You can set a      container's permissions to permit anonymous read access to the container and its blobs. This is not allowed for tables or queues.
    • You can expose a resource via a shared access signature, which enables you to delegate restricted access to a container, blob, table or queue resource by specifying the interval for which the resources are available and the permissions that a client will have to it.
    • You can use a stored access policy to manage shared access signatures for a container or its blobs, for a queue, or for a table. The stored access policy gives you an additional measure of control over your shared access signatures and also provides a straightforward means to revoke them.

    You may also refer the links marked below:

    http://msdn.microsoft.com/en-us/library/azure/dd179354.aspx

    http://msdn.microsoft.com/en-us/library/azure/dd179428.aspx

    Hope that helps!

    Let me know if you have any queries.

    Best Regards,

    Sadiqh Ahmed





    Friday, August 8, 2014 10:01 AM

All replies

  • Hello Alex,

    Thanks for posting here!

    • You can set a      container's permissions to permit anonymous read access to the container and its blobs. This is not allowed for tables or queues.
    • You can expose a resource via a shared access signature, which enables you to delegate restricted access to a container, blob, table or queue resource by specifying the interval for which the resources are available and the permissions that a client will have to it.
    • You can use a stored access policy to manage shared access signatures for a container or its blobs, for a queue, or for a table. The stored access policy gives you an additional measure of control over your shared access signatures and also provides a straightforward means to revoke them.

    You may also refer the links marked below:

    http://msdn.microsoft.com/en-us/library/azure/dd179354.aspx

    http://msdn.microsoft.com/en-us/library/azure/dd179428.aspx

    Hope that helps!

    Let me know if you have any queries.

    Best Regards,

    Sadiqh Ahmed





    Friday, August 8, 2014 10:01 AM
  • Hi Sadiq,

    I had uploaded an image in a container and had set the permission level to public.

    The image could be accessed by anyone who had the link. Is there any way I can restrict it to specific users. If yes, can u suggest some references.

    Thanks

    Malcolm

    Monday, November 17, 2014 6:32 PM