From 0096e53c38db0b61a1c961cc26d68e7c104de1d9 Mon Sep 17 00:00:00 2001 From: Cecil Worsley Date: Wed, 25 Mar 2015 15:49:15 -0400 Subject: [PATCH] removing the acl public-read permission header. we should not assume that the uploading user has permission to set acl. It is a separate permission all together from PUT and GET. It should be user defined on a by case bases --- index.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/index.js b/index.js index d2b537f..a0956b5 100644 --- a/index.js +++ b/index.js @@ -23,7 +23,7 @@ module.exports = function (aws, options) { var uploadPath = file.path.replace(file.base, options.uploadPath || ''); uploadPath = uploadPath.replace(new RegExp('\\\\', 'g'), '/'); - var headers = { 'x-amz-acl': 'public-read' }; + var headers = {}; if (options.headers) { for (var key in options.headers) { headers[key] = options.headers[key];