[GH-ISSUE #113] some sort of access control #90

Closed
opened 2026-02-25 23:40:39 +03:00 by kerem · 6 comments
Owner

Originally created by @aaronpk on GitHub (Apr 18, 2020).
Original GitHub issue: https://github.com/HaschekSolutions/pictshare/issues/113

Is there any interest in adding some form of access control to limit who can upload files? I'm interested in using this, but I would be the only person I'd want to be able to upload files.

An API key for the upload API would be simple. Some sort of login to limit the web interface would be a bit more work.

Originally created by @aaronpk on GitHub (Apr 18, 2020). Original GitHub issue: https://github.com/HaschekSolutions/pictshare/issues/113 Is there any interest in adding some form of access control to limit who can upload files? I'm interested in using this, but I would be the only person I'd want to be able to upload files. An API key for the upload API would be simple. Some sort of login to limit the web interface would be a bit more work.
kerem closed this issue 2026-02-25 23:40:39 +03:00
Author
Owner

@geek-at commented on GitHub (May 3, 2020):

There's a config setting "UPLOAD_CODE" that requires a code (specified in the config) for each upload. It's not yet implemented but will be soon

<!-- gh-comment-id:623079624 --> @geek-at commented on GitHub (May 3, 2020): There's a config setting ["UPLOAD_CODE"](https://github.com/HaschekSolutions/pictshare/blob/master/rtfm/CONFIG.md) that requires a code (specified in the config) for each upload. It's not yet implemented but will be soon
Author
Owner

@thieman commented on GitHub (May 17, 2020):

Alternatively, for my use case it'd be fine if I could use the secret upload URL and then disable the API upload capability entirely. Unless there's a way to do that now that I'm not seeing?

<!-- gh-comment-id:629727716 --> @thieman commented on GitHub (May 17, 2020): Alternatively, for my use case it'd be fine if I could use the secret upload URL and then disable the API upload capability entirely. Unless there's a way to do that now that I'm not seeing?
Author
Owner

@npalladium commented on GitHub (Jun 4, 2020):

This is something I'm interested in too. (Even disabling the API completely after the upload is done is fine.)

And thanks for the amazing project. Works like a charm with Lemmy.

<!-- gh-comment-id:638547670 --> @npalladium commented on GitHub (Jun 4, 2020): This is something I'm interested in too. (Even disabling the API completely after the upload is done is fine.) And thanks for the amazing project. Works like a charm with Lemmy.
Author
Owner

@geek-at commented on GitHub (Jun 4, 2020):

Since I have discovered that someone has uploaded CSAM (Child sexual abuse material) AGAIN on pictshare.net I'll implement this feature today or in the coming days as I'm sick and tired of sending reports to Interpol

<!-- gh-comment-id:638696380 --> @geek-at commented on GitHub (Jun 4, 2020): Since I have discovered that someone has uploaded CSAM (Child sexual abuse material) [AGAIN](https://www.bbc.co.uk/news/technology-44525358) on pictshare.net I'll implement this feature today or in the coming days as I'm sick and tired of sending reports to Interpol
Author
Owner

@carcinocron commented on GitHub (Oct 8, 2020):

@geek-at were you able to implement it?

<!-- gh-comment-id:705805077 --> @carcinocron commented on GitHub (Oct 8, 2020): @geek-at were you able to implement it?
Author
Owner

@geek-at commented on GitHub (Oct 9, 2020):

Yes at the moment I have implemented the ALLOWED_SUBNET Config field where you can enter a CDIR range for IPs that are allowed to upload. But havent implemented the UPLOAD_CODE config setting yet

<!-- gh-comment-id:706052199 --> @geek-at commented on GitHub (Oct 9, 2020): Yes at the moment I have implemented the `ALLOWED_SUBNET` Config field where you can enter a CDIR range for IPs that are allowed to upload. But havent implemented the UPLOAD_CODE config setting yet
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
starred/pictshare#90
No description provided.