always upload private files to s3

[dongennl]

hi, thanks for this, it has helped me a lot

question about s3 security; I want all uploaded files to be secure (i.e. not publicly accessible). I have a helper to generate the secure URLs

I think it is related to this line in the code:

{'acl': '#{options[:acl]}'},

Is there a value I can set this to permanently that will upload all files as private? I tried 'private' but got an error from s3:

AccessDeniedInvalid according to Policy: Policy Condition failed: ["eq", "$acl", "private"]

guess i don't fully understand acl...

many thanks for any input.

[ncri]

Hi there, normally "private" should work. Anyway, I don't support this code anymore. Have you tried the s3_direct_upload gem? It's much easier to use then this. github.com/waynehoover/s3_direct_upload. If setting the acl doesn't work there, you can submit an issue there.

[dongennl]

thanks!