From Dev.to
Tenant Export Safety — Startup Avatar Storage, Derivatives, and Lifecycle Cleanup
Startup app avatar image storage becomes an access-control system as soon as one tenant can export data that another tenant owns. Short answer: use private object storage for original avatar images an...
