Make swiftbrowser usable without account ownership

[cschwede]

swiftbrowser is not really usable if a user has no permission on the account level (ie list containers).
A user could manually add a known containername to the URL, but the user has to know this.

Possible workaround: return a useful error message, and display an input field in case the user knows a containername. swiftbrowser could use this container then.

[takotuesday]

@cschwede any updates on this issue? Thanks!

[cschwede]

Hello @takotuesday,

I committed a small change that prevents a redirect to the login in case the account listing fails: f8a7e175

However, up- and download using the formpost/tempurl middleware currently also requires the account-temp-url-key; thus some larger changes are required to make this fully work.

Possible changes are:

• using a container-based temp-url-key (added to Swift with commit openstack/swift@489dd5f); but this allows automatically writes too for read ACLs)
• using some Javascript workarounds to directly PUT/GET objects with the auth token

I'm currently favoring adding option 2, but need to have a closer look at the required Javascript code.