{"action":"created","issue":{"url":"https://api.github.com/repos/tomitrescak/meteor-uploads/issues/125","labels_url":"https://api.github.com/repos/tomitrescak/meteor-uploads/issues/125/labels{/name}","comments_url":"https://api.github.com/repos/tomitrescak/meteor-uploads/issues/125/comments","events_url":"https://api.github.com/repos/tomitrescak/meteor-uploads/issues/125/events","html_url":"https://github.com/tomitrescak/meteor-uploads/issues/125","id":98477255,"number":125,"title":"controlling download access to uploaded files.","user":{"login":"wesyah234","id":66566,"avatar_url":"https://avatars.githubusercontent.com/u/66566?v=3","gravatar_id":"","url":"https://api.github.com/users/wesyah234","html_url":"https://github.com/wesyah234","followers_url":"https://api.github.com/users/wesyah234/followers","following_url":"https://api.github.com/users/wesyah234/following{/other_user}","gists_url":"https://api.github.com/users/wesyah234/gists{/gist_id}","starred_url":"https://api.github.com/users/wesyah234/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wesyah234/subscriptions","organizations_url":"https://api.github.com/users/wesyah234/orgs","repos_url":"https://api.github.com/users/wesyah234/repos","events_url":"https://api.github.com/users/wesyah234/events{/privacy}","received_events_url":"https://api.github.com/users/wesyah234/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/tomitrescak/meteor-uploads/labels/enhancement","name":"enhancement","color":"84b6eb"},{"url":"https://api.github.com/repos/tomitrescak/meteor-uploads/labels/help%20wanted","name":"help wanted","color":"159818"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":10,"created_at":"2015-07-31T21:47:42Z","updated_at":"2015-08-28T01:14:58Z","closed_at":null,"body":"I am loving this uploader tool so far, but I've come to a snag, which was discussed on issue 58: #58 \r\n\r\nI have previously tried doing file uploads with CollectionFS, but was looking for something better.  Specifically I liked the idea that I could choose my own collection in which to store my file metadata, which didn't seem to be possible with the CollectionFS way of doing uploads.\r\n\r\nSo I put together a demo (https://github.com/wesyah234/fileUploadDemo2) using this package, and soon came to realize that controlling access to the uploaded files did not seem to be possible, at least in the easy way it was with CollectionFS.  See https://github.com/CollectionFS/Meteor-CollectionFS#security for how they are doing it, via allow/deny rules.\r\n\r\nI was able to prevent a view of a file depending on whether the user was logged in, because it hooked into the Meteor.Accounts system.\r\n\r\nThe solution in issue #58 does not seem like it will tie into the Meteor.accounts system or anything like that.  Are there any other ideas for this issue?\r\n\r\nIn my work with Java and PHP, typically you would stream the document through PHP or Java, and before streaming it through, you would get to check certain permissions.  Is there a possible solution like that here with Meteor?  IE. stream it through a route in Meteor?\r\n"},"comment":{"url":"https://api.github.com/repos/tomitrescak/meteor-uploads/issues/comments/135596655","html_url":"https://github.com/tomitrescak/meteor-uploads/issues/125#issuecomment-135596655","issue_url":"https://api.github.com/repos/tomitrescak/meteor-uploads/issues/125","id":135596655,"user":{"login":"wesyah234","id":66566,"avatar_url":"https://avatars.githubusercontent.com/u/66566?v=3","gravatar_id":"","url":"https://api.github.com/users/wesyah234","html_url":"https://github.com/wesyah234","followers_url":"https://api.github.com/users/wesyah234/followers","following_url":"https://api.github.com/users/wesyah234/following{/other_user}","gists_url":"https://api.github.com/users/wesyah234/gists{/gist_id}","starred_url":"https://api.github.com/users/wesyah234/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wesyah234/subscriptions","organizations_url":"https://api.github.com/users/wesyah234/orgs","repos_url":"https://api.github.com/users/wesyah234/repos","events_url":"https://api.github.com/users/wesyah234/events{/privacy}","received_events_url":"https://api.github.com/users/wesyah234/received_events","type":"User","site_admin":false},"created_at":"2015-08-28T01:14:58Z","updated_at":"2015-08-28T01:14:58Z","body":"The server side will then check the token on the database, and verity the time has not expired, and allow or not allow the download."}}