Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add the ability to upload files to events/timeplaces #719

Open
elisakiv opened this issue Mar 18, 2024 · 1 comment
Open

Add the ability to upload files to events/timeplaces #719

elisakiv opened this issue Mar 18, 2024 · 1 comment
Labels
user-requested Issues containing changes that were requested by MAKE members or other users

Comments

@elisakiv
Copy link
Contributor

Would make it possible to upload powerpoints for the sewing courses or 3D printing courses.

@elisakiv elisakiv added the user-requested Issues containing changes that were requested by MAKE members or other users label Mar 18, 2024
@ddabble
Copy link
Member

ddabble commented Mar 18, 2024

Resource files like PowerPoints, 3D models, etc., are often considerably larger than e.g. the banner images we currently allow members to upload (which are also compressed when uploaded), and so it's reasonable to assume that our server's storage space will be depleted at a much higher rate than it currently is 🤔 It might therefore be better to instead encourage members to upload to our Drive, which has virtually unlimited storage 🙂

Also, from a security perspective, allowing uploading and serving arbitrary file types is a little risky 😅 This is of course almost entirely alleviated by the fact that we would only allow uploads from our own trusted members, but there would still be potential for misuse - e.g. something like a member uploading a file (perhaps for fun) that exploits some (perhaps undiscovered) weakness in either the server software or the software of the users downloading it. It's hard to measure the likelihood and severity of that risk - especially when considering how it may change many years down the line - and so I personally don't think it's worth the risk 🤔 It would help, of course, if we only allowed certain specific file types to be uploaded, though :)

Did the person who requested this provide any additional context or reasoning, or would it mainly be a "nice-to-have" feature?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
user-requested Issues containing changes that were requested by MAKE members or other users
Projects
Status: TODO
Development

No branches or pull requests

2 participants