Private by default
Every file lives under its owner's organization, and all access goes through short-lived, permission-checked links.
Gebruikers uploaden rechtstreeks naar private opslag. Alleen hun eigen bedrijf kan erbij.
Gebruikers uploaden rechtstreeks naar private opslag. Alleen hun eigen bedrijf kan erbij.
Productvoorbeeld
Dit is hetzelfde visuele component als in de ingelogde applicatie, met voorspelbare voorbeelddata.
Inspect tenant-scoped metadata, classification, download, and durable deletion controls.
Inerte voorbeelddata · geen netwerktoegang
Voorbeeld gereed
Kernpunten
Every file lives under its owner's organization, and all access goes through short-lived, permission-checked links.
After upload, the server compares the stored file's size and fingerprint to what was declared. Mismatches get quarantined.
Deleting runs as a retried background job. If the provider keeps refusing, the file is flagged as failed instead of quietly lingering.
Zonder een gedeelde basis bouwt elk team deze randgevallen opnieuw — en anders.
Streaming big files through your app server burns memory until requests time out. But letting browsers write straight to a bucket usually skips your permission checks. Here you get both: direct upload, server-approved first.
An upload gets cut off halfway, or someone swaps the bytes after declaring them. Without a settlement step, that broken file goes live. Here a mismatch means quarantine, never availability.
A fire-and-forget delete fails silently. Months later you're paying to store files nobody can see. Worse: files marked deleted still exist, which is a compliance problem. Failed deletes here surface for an operator.
Het mechanisme van begin tot eind, zoals het in de repository is geïmplementeerd.
Ask for an upload link
The server checks the user's role plus the file's name, type, size, and fingerprint, then returns a signed link that works for 10 minutes.
The browser uploads directly
The file goes straight from the browser to the storage provider, with progress reporting. Your server never touches the bytes.
The server double-checks
After upload, the server asks the provider for the file's real size and fingerprint. A match makes it available; a mismatch gets quarantined.
Deletes are jobs, not wishes
Delete hides the file immediately, then a background job removes the bytes with retries. Stubborn failures get flagged so an operator can act.
Technische garanties
Achter de schermen houden autorisatie, tenantgrenzen en foutafhandeling één duidelijke eigenaar. Zo blijft de snelle ervaring voor gebruikers gekoppeld aan veilig herstel als het misgaat.
De grens hierboven is geen claim maar code. Deze bestanden dragen het contract:
src/features/storage/server.tssrc/features/storage/jobs.tssrc/features/storage/browser-upload.ts.resource-certifications/storage.jsonDeze functies delen contracten en grenzen met deze pagina.
De documentatie beschrijft dezelfde contracten die deze pagina demonstreert.