使用Azure Blob存储，我们需要应用程序的用户特定文件访问权限，有什么方法可以实现？

Question

We are try to using blob storage to save our application's files and documents on Azure's blob storage and we have requirement user specific files access. At this point any one can see any of the files.I don't want to do that. User should access their own files only if the other files they are trying to see or access then that should be redirected to the login page and should shows them you don't have access permission.

How can I achieve this with Azure's blob storage? I have tried to find some solution around this but I can't if any one can help then that would be very help full.

Answer 1

You should be able to use Shared Access Signatures, in combination with your existing application's user store, authentication and authorization mechanisms, to control Azure blob access:

http://www.dotnetcurry.com/windows-azure/901/protect-azure-blob-storage-shared-access-signature

You can adjust the timeouts, store the access keys, etc. as your application requires.

Answer 2

Here's how we did it in our application. Please see if this approach can be used in your application.

In our application, every user is assigned a unique id (a GUID). When the user signs up, we create a blob container and the name of this blob container is set as the id of the user. All the files for that user are kept in that blob container. When the user needs to access those files, we simply create a Shared Access Signature (SAS) for that blob container with appropriate permissions and share that SAS with that user (as mentioned by Henry in his answer).

Depending on the number of users, you may also want to consider load balancing these containers across multiple storage accounts. They way we have accomplished this is when a user signs up, we randomly assign a storage account from a pool of storage accounts and the blob container for that user is created in that storage account.