Buckets - Pawabase

A Bucket is the same as Storage → New bucket in Studio.

from pawabase_iac import Bucket, P

avatars = Bucket(
    "avatars",
    public=True,
    write_policy=P.object.segments[0] == P.auth.user_id,
    accepts=["image/*"],
    max_bytes=2 * 1024 * 1024,
)

documents = Bucket(
    "documents",
    read_policy=P.authenticated(),
    write_policy=P.authenticated(),
    signed_downloads=True,
    max_bytes=25 * 1024 * 1024,
)

Argument	Meaning	Default
`name`	2 to 63 characters: lowercase letters, digits, dashes	required
`description`	A note	`""`
`public`	Anyone with a file’s address may read it	`False`
`read_policy`	Who may read	signed-in users (everyone if `public`)
`write_policy`	Who may upload new files	signed-in users
`list_policy`	Who may list	follows read
`update_policy`	Who may replace	follows write
`delete_policy`	Who may delete	follows write
`accepts`	Accepted MIME patterns, such as `image/*`. Empty accepts any	`[]`
`max_bytes`	Largest file. `0` uses the environment’s limit	`0`
`signed_uploads`	Allow signed upload links	`True`
`signed_downloads`	Allow signed download links	`False`
`transforms`	Image transformation settings (a dict)	`{}`
`cache_max_age`	Seconds a browser may cache files	`0`

Each matches a setting in Studio’s Bucket settings. Rules can read the file’s key: P.object.key and P.object.segments[n] (Rules on storage).

Storage

Use buckets from your app.

Policies

Write the rules.