[SPIKE] Reseach possible design about how to deal with access to attachments

[marrouchi]

The main mission of this SPIKE is to research about the possibility to secure attachments.
Make the access flexible between users, and subscribers.

Every attachment can be owned by a subscriber or/and a user.
We will investigate the possibility to associate to the subscriber the registered role.

Features :

• The attachments will be protected.
• The attachment saved row can include metadata (context of the upload profile for example).
• An attachment is owner by a single subscriber or user.
• We will offer the possibility to access/download attachments by anonymous visitors.

Questions :

• How we can deal with deleted subscribers ?
• Is a admin can access attachments of the users ?
• Is a admin can access attachments of another admins/managers/users ?
• How we can migrate old attachments.

Prospectives :

• We can crop/compress/resize images.
• We can cache images based on stats (The public images the most used will be candidate to be cached).
• Protect attachments with pin/OTP code.