Answered by:
User authorization to access storage blob

Question
-
Let's say I have sets of pictures (galleries) and I want to set some rules regarding which user groups can access these sets (or even particular pics). Since the pic is just a url (like http://azure-storage/container/...jpg) this means the user should be redirected to login page if he tries to access it. Can this be done in case of a particular blob? How?
Thanks!
Friday, August 8, 2014 8:35 AM
Answers
-
Hello Alex,
Thanks for posting here!
- You can set a container's permissions to permit anonymous read access to the container and its blobs. This is not allowed for tables or queues.
- You can expose a resource via a shared access signature, which enables you to delegate restricted access to a container, blob, table or queue resource by specifying the interval for which the resources are available and the permissions that a client will have to it.
- You can use a stored access policy to manage shared access signatures for a container or its blobs, for a queue, or for a table. The stored access policy gives you an additional measure of control over your shared access signatures and also provides a straightforward means to revoke them.
You may also refer the links marked below:
http://msdn.microsoft.com/en-us/library/azure/dd179354.aspx
http://msdn.microsoft.com/en-us/library/azure/dd179428.aspx
Hope that helps!
Let me know if you have any queries.
Best Regards,
Sadiqh Ahmed
- Proposed as answer by SadiqhAhmed-MSFTMicrosoft employee Tuesday, August 12, 2014 11:44 AM
- Marked as answer by Jambor yaoMicrosoft employee Wednesday, August 13, 2014 2:22 AM
Friday, August 8, 2014 10:01 AM
All replies
-
Hello Alex,
Thanks for posting here!
- You can set a container's permissions to permit anonymous read access to the container and its blobs. This is not allowed for tables or queues.
- You can expose a resource via a shared access signature, which enables you to delegate restricted access to a container, blob, table or queue resource by specifying the interval for which the resources are available and the permissions that a client will have to it.
- You can use a stored access policy to manage shared access signatures for a container or its blobs, for a queue, or for a table. The stored access policy gives you an additional measure of control over your shared access signatures and also provides a straightforward means to revoke them.
You may also refer the links marked below:
http://msdn.microsoft.com/en-us/library/azure/dd179354.aspx
http://msdn.microsoft.com/en-us/library/azure/dd179428.aspx
Hope that helps!
Let me know if you have any queries.
Best Regards,
Sadiqh Ahmed
- Proposed as answer by SadiqhAhmed-MSFTMicrosoft employee Tuesday, August 12, 2014 11:44 AM
- Marked as answer by Jambor yaoMicrosoft employee Wednesday, August 13, 2014 2:22 AM
Friday, August 8, 2014 10:01 AM -
Hi Sadiq,
I had uploaded an image in a container and had set the permission level to public.
The image could be accessed by anyone who had the link. Is there any way I can restrict it to specific users. If yes, can u suggest some references.
Thanks
Malcolm
Monday, November 17, 2014 6:32 PM