I’m trying to determine the level of risk associated with using Glide for storing confidential documents (to be accessible through a Glide-based client portal). I understand that there are steps that need to be taken when building the app to ensure that users are limited to seeing their own informat…

Check this out [image] Security Center • Glide Learn more about Glide's approach to security and compliance, including details on organizational and technical controls

As I understand it, files uploaded through Glide are technically public. You can share the url outside of the app and it will still be accessible. The url is not easily guessable, but I wouldn’t consider it secure in the sense that you are asking. As for expiration, the url will remain static and…

Thanks for sharing. I’ve gone through these documents, but they don’t address the attachments issue directly.

As Jeff said, if someone knows the URL for a file, it’s accessible. However, if the row where you have a file is owned by a user, I think in that case the file it’s not publicly accessible? @Mark ?

Thanks Jeff. Do you recall where you found this information? I just tried uploading a document using Glide, then deleting the document from Glide Tables (by deleting the entire row containing the relevant attachment field). The url appears to remain accessible even after the row containing the file…

[image] AIBL: Do you recall where you found this information? I’m only basing this on personal experience, lots of reading, and my own understanding of how glide works [image] AIBL: anything that you upload using Glide will remain accessible via that static link forever??? Like I ment…

The file would be accessible but the URL of the file would not. So what @Jeff_Hager has said is correct. It would be a lot harder to get the URL but if it was obtained the file would be accessible.

I can confirm what Jeff has said.

Thanks George. So just to confirm: The urls do not expire, as long as they are still being used in any Glide Table. The url would stay the same, and would never update. If you delete the item from Glide Tables, Glide will eventually delete the URL. Assuming the above is correct, can you confirm t…

This was the announcement from Airtable for context: On November 8, 2022, Airtable will improve the security of our attachment URLs by incorporating an expiring links functionality. Once this change takes place: Any attachment URLs obtained via the public API and the CSV export functionality wil…

Attachment Security

Ask for Help

Darren_Murphy May 5, 2022, 2:09am 13

Topic		Replies	Views
Limiting access tu public URL for uploaded Files Ask for Help	7	113	November 29, 2024
Incoming Airtable API Changes - Will this impact Glide users? Ask for Help	2	355	October 25, 2022
File Storage Security Ask for Help security	6	592	January 9, 2024
Private Storage Option Feature Requests	29	2713	December 30, 2024
Add ability to expire CSV download URLs Feature Requests	0	111	September 30, 2023

Attachment Security

Related topics