> > :s3_permissions => :public > > in your has_attached_file call. > > But if you pass :private instead, then the file can only be accessed > through your S3 credentials. Okay, now only your app can read it. But > that's what the expiring_url method is for. That gins up a one-time > token that expires in N minutes, and allows one download during that > window, after which it simply won't work at all. Your keys are used to > create this token, but it's a one-way hash so you don't have any leakage > possible of your actual credentials. > > Walter
I think the only problem I have left is that I was hoping to not use S3 and be able to store the files on my own server. -- Posted via http://www.ruby-forum.com/. -- You received this message because you are subscribed to the Google Groups "Ruby on Rails: Talk" group. To post to this group, send email to [email protected]. To unsubscribe from this group, send email to [email protected]. For more options, visit this group at http://groups.google.com/group/rubyonrails-talk?hl=en.

