<html><head><style type="text/css"><!-- DIV {margin:0px;} --></style></head><body><div style="font-family:times new roman, new york, times, serif;font-size:12pt"><div>I have asked this on <a href="https://answers.launchpad.net/swift/+question/154305">launchpad</a>, but since there was no answer I repost my question here.</div><div><br></div><div><span class="Apple-style-span" style="color: rgb(51, 51, 51); font-family: 'UbuntuBeta Regular', Ubuntu, 'Bitstream Vera Sans', 'DejaVu Sans', Tahoma, sans-serif; font-size: 12px; line-height: 18px; "><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.8em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; width: auto; max-width: 45em; ">Once reseller admin knows the URL of storage account, he gets total control over the files of that account (read files, delete files, etc.)</p><p style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.8em; margin-left:
0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; width: auto; max-width: 45em; ">At the very least this violates privacy of the users who store their files in swift. </p><p id="yui_3_3_0_1_130470540425231" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.8em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; width: auto; max-width: 45em; ">Of course, sensitive information might have been encrypted before adding to swift, but I still wonder whether there was any reason to give such huge permissions for reseller admins?</p><p id="yui_3_3_0_1_130470540425231" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.8em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; width: auto; max-width: 45em; ">By the way, the documentation does not mention the fact that reseller admins have such broad permissions. It is
only stated that "Admin users can do anything within the account." However, Reseller Admins can do anything within ANY account</p><p id="yui_3_3_0_1_130470540425231" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.8em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; width: auto; max-width: 45em; "><br></p><p id="yui_3_3_0_1_130470540425231" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.8em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; width: auto; max-width: 45em; ">Sincerely,</p><p id="yui_3_3_0_1_130470540425231" style="margin-top: 0px; margin-right: 0px; margin-bottom: 0.8em; margin-left: 0px; padding-top: 0px; padding-right: 0px; padding-bottom: 0px; padding-left: 0px; width: auto; max-width: 45em; ">Rostyslav</p></span></div><div style="position:fixed"></div>
</div></body></html>