Prevent Container Delete Access

I have an application Im writing that will store all of the files for it in the azure storage account. I would like to be able to create an account access code, that gives Read, Write, and List permissions to a container, but no delete permissions, is this
possible?
I have thought about possibly generating a Shared Access Signature, for say 200 years in the future with Read, Write, and List permissions, but I think by doing this I wouldnt be able to leverage the .NET Azure SDK.
I have also thought about a Storage Access Policy that doesnt allow deletes, only Read, Write and List, but if Im using the main account key and send a delete over, I would think that overrides the Storage Access Policy and the container and blobs would
be gone.
The reason for this is containers are extremely easy to delete and with the files only being stored on a company account, not a personal account, if the container is deleted and we lose all of those files, we are boned; so that is not an option.

I have tried doing that but running into some trouble. I want to use the my account name and key to generate a Shared Access Signature to a container that allows read, list, update/create permissions. I then want to be able to use the SDK with this Shared
Access Signatures to generate new Shared Access Signature to blobs within the container it has permissions to. My tests with the client using the first Shared Access Signature allowed me to upload files to the container, but would fail when creating new Shared
Access Signature to objects within the container "Error - "Cannot create Shared Access Signature unless Account Key credentials are used."
Im really just looking for a way to now allow a user or similar term to delete objects from the azure storage account. The ease at which you can delete a container and all of the blobs within it it far too scary. Plus I have no seen any azure options for
backing up entire containers and being able to restore them. If you know of a way to back up objects in azure that would allow me to restore them if a developer accidentally deleted a blob or entire container, please share. Amazons S3 service looks like you
are not allowed to delete a bucket/container if it has objects/blobs within it, which would be awesome for Azure, but I dont see that option.
The best option would be if I have the ability to create a "user" with an account key that would do all of the uploading, reading and listing for my application, and then if I ever have to delete something, I would use the main account to handle
that (this would be a rare occasion).

Similar Messages

  • Recently downloaded Guitar Tuner app, didn't like it..deleted app..everytime I open apps icon it's banner is still there preventing me from accessing any other apps..how do I clear it away completely?

    Recently downloaded Guitar Tuner app, didn't like it..deleted app..everytime I open apps icon it's banner is still there preventing me from accessing any other apps..how do I clear it away completely? Has anyone else had this experience..any help in clearing this hiddering problem would very much appreciated

      I spotted this sollution from another user in relation to a similar problem:
    Quit the app then reset the iPad.
    Double click the Home button to show the screen with running and recently used apps. Each app icon will have a sample page above it. Flick up on the page (not the app icon) and the page will fly away and the app icon will disappear. This quits that app. Then reset your device. Press and hold the Home and Sleep buttons simultaneously until the Apple logo appears. Let go of the buttons and let the device restart. See if that fixes your problem.
    this work a treat..thanks to whoever it waas who originally posted this!

  • How can I call Adobe Reader from inside my Application and prevent operator to access Open/save opt

    Can Anyone help to find a way?
    http://answers.acrobatusers.com/How-call-Adobe-Reader-inside-application-avoid-operator-op en-save-doc-q13487.aspx
    From inside my application that run on an Automation PC, under Windows O.S, I want to call Adobe Reader using a shell command to open up an PDF Document containing some informations.
    Shell command like these
    "C:\Program Files\Adobe\Reader 10.0\Reader\AcroRd32.exe" /A "<options>" "C:\mydoc.pdf"
    or
    cmd  /c "C:\mydoc.pdf"
    Operator is using a touchscreen.
    I want to prevent user to access any option that can give him acces to filesystem (Open/save/save as).
    I want also to prevent any change/add information to PDF document
    Thank you in advance for the time you will spend for me.

    You can use the Installation Tuner for Reader to customize the UI elements provided to the user.  Details on the Adobe web site.

  • Prevent file deletion on server but allow read/write permissions

    So, I have several iMacs that are basically public computers.  They will all access a shared server.  The machines need to possess all of the user permissions of a "read/write" user with the EXCEPTION of being allowed to delete.  As it is now, a random user could delete our entire server in two clicks.  So, I need to somehow secure our data while still allowing the "reading" and "editing" of files.
    Here's what I need to do:
    •  Somehow disable the delete file function altogether (while still maintaining read/edit permissions) or
    •  Find some 3rd party app or workaround that prompts the user with a password dialogue box in order to execute the "delete" function or
    •  Somehow apply permissions to a specific folder on the server that enables read/edit, but disables file deleting by users
    I set the permissions of my trash folder to "read only" however, this only prevents deleting local files and doesn't prohibit deleting files from the shared drive.
    Thoughts?

    I'd rethink the requirements.
    The literal answer is that yes, you can mark the files as being undeletable.
    The access control list setting via the command line chmod command is something akin to the following:
    chmod +a "groupname deny delete"
    In practice, these same requirements do allow the shared files to be effectively deleted; via overwrite.  (This is why the Unix-layer file protections don't bother to differentiate write from delete access.)  These requirements also allow partial file corruptions, a situation which tends to be far more pernicious.

  • Whenever I try to open Firefox it says cannot establish connection, maybe your firewall is preventing us from accessing the web.

    Whenever I try to open Firefox it says cannot establish connection, maybe your firewall is preventing us from accessing the web. Even though I've let Firefox through my firewall, this message still appears. And whenever I try to redownload it, it just says installation failed. It does this with all installations... Is there something wrong with my computer? How do I fix it?

    Sometimes you only disable the user interface of security software, but the firewall or anti-virus services are still running in the background.
    It is possible that your security software (firewall, anti-virus) blocks or restricts Firefox or the plugin-container process without informing you, possibly after detecting changes (update) to the Firefox program.
    Remove all rules for Firefox and the plugin-container from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox and the plugin-container process and the updater process.
    See:
    *https://support.mozilla.org/kb/Server+not+found
    *https://support.mozilla.org/kb/Firewalls
    *https://support.mozilla.org/kb/fix-problems-connecting-websites-after-updating

  • I need help in resolving a problem that prevents me from accessing the iTunes store.  Message reads " iTunes cannot contact the iTunes store" and also says that my laptop is no longer authorized to access my account.  Help!

    I need help in resolving a problem that prevents me from accessing the iTunes store.  Message reads " iTunes cannot contact the iTunes store" and also says that my laptop is no longer authorized to access my account.  Help!

    Go up to the top of your screen on iTunes and click on 'Store'.  Then go down to 'Authorize This Computer'.  That should cover part of it unless you've already authorized a bunch of other computers to use your account.  If that's the case, you'll have to go to one of those computers and click the button just below it to 'deauthorize your account' from that computer.  If you're not able to access the store, check your internet connection to make sure you are connected.  Hope this helps.. good luck!     

  • Query to find out the list of user who have delete access

    Hi,
    I need a query to find out the list of users who have delete access on perticular folder/universe/ reports  in infoview.
    Please advice.
    Regards,
    Neo.

    orton607 wrote:
    thanks for replying guys. But the thing is i am using dynamic sql execute immediate in my package, so i want those tables also and the schema name.
    thanks,
    ortonThis is not possible. The best you could do is to have a good guess.
    Or how would you parse some dynamic statement as this:
       v_suffix := 'loyees';
       v_sql := 'Select count(*) from (select ''nonsense'' col1 from emp'||v_suffix||') where col1 = ''Y'''';
       execute_immediate(v_sql);
    ...What is the table name? How do you want to parse that?
    Better rewrite all dynamic SQL statements into non dynamic ones. Or do the source control logic for those dynamic parts in an extra module. For example implement your own dependency table and force every developer to add there all dynamic parts.

  • Preventing the deletion of a PO with IR but no GR

    Hello guys,
    I am facing a requirement to prevent the deletion of non-GR related Purchase Orders. The POs are still marked as complete since an invoice has been released.
    When trying to delete complete GR related POs, we are getting the following message: "Quantity delivered differes from qty invoiced (Function not possible)"
    However, when there's no GR linked to the PO, the deletion is going through.
    How can I prevent this?
    Thanks

    Hello guys,
    I am facing a requirement to prevent the deletion of non-GR related Purchase Orders. The POs are still marked as complete since an invoice has been released.
    When trying to delete complete GR related POs, we are getting the following message: "Quantity delivered differes from qty invoiced (Function not possible)"
    However, when there's no GR linked to the PO, the deletion is going through.
    How can I prevent this?
    Thanks

  • Delete access for the Infocube data

    hi,
    If you want to remove the delete access from the infocube , which change should be done to the security role. Please advise.
    Thanks in advance...

    Hi,
    May be you can try this......
    S_RS_ICUBE  
              Activity                      - 03 (display), 23 (maintain), 63 (activate), 66 (refresh). Uncheck 06 (delete)
              Infocube subobject   -  Choose as required....including DATA
              InfoArea & InfoCube - Choose as required.
    Regards,
    Murali.

  • Restrict Delete Access in FBV0 for Parked documents

    We are havng an issue for restricting users from deleting Parked Documents of other users in FBV0. Is there a way to restrict Delete access to only documents a user created themselves?
    Thanks
    Chaz

    Hi Chaz
    I don't think that will be possible unless you implement a validation using user exit
    Write a validation in OB28 using RGGBR000 user exit to validate the USNAM field
    Br. Ajay M

  • Prevent remote database access

    we cannot change easily our passwords and we must prevent remote access to SYS and SYSTEM accounts.
    Is there a way to prevent remote database access on SYSTEM account without changing password ?

    Hi,
    Look for this tip in http://www.oracle.com/technology/oramag/code/tips2004/061404.html
    I hope this helps
    Cheers

  • Delete Access Issue for a Provisioned Resource in OIM..

    Thank you for the help provided for revoking the resource.I am able to revoke the resource from the User profile details.
    But I have to revoke the resource from the delete access in the same way as I have done for add access for provisioning a resource(means I have to follow the proper flow from approval work flow ,the flow must go to provisioning work flow and from there GIA analyst group should be able to revoke the resource
    (GIA analyst should be able to revoke the resource which has been provisioned and which is provided in the open task ).
    Plz provide the way to overcome the revoking issue.

    Thank you for the information you provided.I have done changes in the rule designer as per the way you told, but still I am not able to revoke the resource.Its completing the approval flow in approval details but Resource is not getting de-provisioned.Please suggest me what needs to be done.
    Plz give me the clear view how to revoke the resource through delete access flow .

  • Preventing the deletion of the workspace(Directory) while it is in use

    Hello,
    I have application which allows user to create the workspace.I want to avoid deletion of the workspace from backend while java application is using it.
    Eclipse has the this feature ,when i create the workspace("ABCWorkSpace") and start the Eclipse and now from the windows explorer if i try to delete the workspace("ABCWorkspace") ,it won't allow me to delete it.This might be because of the .lock file created in .metadata folder.
    I want the similar feature .Could anyone please sugest the way to handle this requirment.
    Appreciate your time.

    Thanks for your quick reply.
    I may be little wrong in explaining the problem .I will explain it again
    --I have application which allows user to create the workspace.I want to avoid deletion of the workspace from backend (i.e avoid manual deletion of the workspace from windows explorer)while java application is using it.
    -- The one way might be i open one of the file present in the workspace using the fileInputStream from the workspace
    like
    final currentWorkSpace ="C:\\MyWorkSpace\\config.txt"
    FileInputStream fis =new FileInputStream(currentWorkSpace);
    --Now if i tried to delete the workspace manually from the windows explorer it wont't allow deletion saying
    "Cannot delete config.txt.It is being used by another programm or person ....."
    --Using above approch i can prevent manual deletion of the workspace named "MyWorkSpace" and the file "config.txt " but it allows deletion of the other files present in "MyWorkSpace".
    Appreciate your time .

  • How to prevent Node deletion

    Hi,
    Is it possible in DRM to have a validation for not deleting of node having some particular mapping conditions or properties assigned.
    Can we prevent node deletion with validation rules.

    Yes, you can use a validation with Class = PropRemove and Level = Remove, then specify a combination of up to three property values to trigger validation failure.  Easiest is to create a derived property which evaluates your conditions and results in a True/False condition to be used for the validation.  In our implementation we use a property that is only accessible to system admins which specifies whether deletion is allowed and defaults to False, so a node cannot be deleted without an admin override.

  • N91 - Deleted Access Points still visible to appli...

    I created and later deleted a number of Access Points in Menu > Tools > Settings > Connection > Access Points.
    Although they appeared to be deleted (not listed anymore in the N91 menu system), applications such as Fring and Nimbuzz include/show all the deleted Access Points together with the current access points when listing available access points for selection. 
    Is there a known OS bug with access point deletion?
    I'm using the latest Nokia software V2.20.008.

    Avoid 5.X firmware.

Maybe you are looking for

  • Delete records in itab1 where key fields does not exit in itab2 w/o Loop

    Hi, I am trying to find the most efficient way to compare two internal tables and filter out (delete) the entries in Internal Table 1 (ITAB1) where the key fields does not exist in internal table 2 (ITAB2). Here is the codes using the Loop. Loop at i

  • Can't scan in Windows 7 using the HP 3055 All in one

    I upgraded to Windows 7 and downloaded the driver for printing only which works fine. I was told that I need to use Windows Fax and Scan for scanning. When I try to scan it starts to scan page 1 and then gets hung up. I then need to cancel the job fr

  • Glitches in Adobe Acrobat DC

    I have a document that I created in InDesign. This document contains buttons. I've exported this file as an Interactive PDF so my clients can view/navigate through the document with ease. I've recently upgraded to Adobe Acrobat DC. Since my upgrade,

  • I cannot bring up the Java console from IE in WindowsXp

    Hi Team, My System contains Windows Xp as a operating System. My IE is unable to dispaly the applet's.Although my IE tells me that I have JRE running (under IE / Tools / Internet Options / Advanced), I cannot bring up the Java console also. I Checked

  • Escape character xml

    Dear all, I wrote some VIs to deal with xml files. In particular I have one VI to write the xml and another one to read it back, after validating it. Unfortunately got translated like this which creates of course errors while parsing the xml file. It