Files
phabricator/src/applications/files
epriestley ab20f243b3 Improve consistency of file access policies, particularly for LFS
Summary:
Ref T7789. Currently, we use different viewers if you have `security.alternate-file-domain` configured vs if you do not.

This is largely residual from the days of one-time-tokens, and can cause messy configuration-dependent bugs like the one in T7789#172057.

Instead, always use the omnipotent viewer. Knowledge of the secret key alone is sufficient to access a file.

Test Plan:
  - Disabled `security.alternate-file-domain`.
  - Reproduced an issue similar to the one described on T7789.
  - Applied change.
  - Clean LFS interaction.

Reviewers: chad

Reviewed By: chad

Maniphest Tasks: T7789

Differential Revision: https://secure.phabricator.com/D15784
2016-04-22 08:12:08 -07:00
..
2016-01-28 08:48:45 -08:00
2016-01-28 08:48:45 -08:00
2015-01-03 10:58:20 +11:00
2016-01-10 07:55:27 -08:00
2015-12-24 09:06:35 -08:00
2015-05-22 21:16:39 +10:00
2016-01-10 07:55:27 -08:00
2015-05-22 21:16:39 +10:00