bemoody

A couple of things to add concerning policy restrictions. **If you specify an invalid principal in `"Principal"` or `"NotPrincipal"`, S3 will reject the bucket policy update.** This is a serious...

**The limit appears to be 20480 bytes**, and appears to apply to the JSON policy passed to `put_bucket_policy`, after removing unnecessary whitespace. In contrast, the policy returned by `get_bucket_policy` may...

I recall reading somewhere, but I don't remember where, that if your bucket policy lists an IAM user: - When calling `put_bucket_policy`, you can specify either the ARN (`arn:aws:iam::111111111111:user/somebody`) or...

Further notes: - get_bucket_policy **does not** return the list of principals in the same order that they were specified in put_bucket_policy. (I think this was documented somewhere but it's worth...

Confirmed that my assumptions in https://github.com/MIT-LCP/physionet-build/issues/2094#issuecomment-2096610857 are true: 1. Create a user through AWS console 2. Create a bucket policy listing this user in Principal 3. Retrieve the bucket policy;...

> I recall reading somewhere, but I don't remember where, ... I was probably thinking of https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-bucket-user-policy-specifying-principal-intro.html#s3-aws-user-permissions > Note > > If an IAM identity is deleted after you update...

## Xapian (https://xapian.org/) Implementation language: C++ Latest release: 2023-11-06 - **Free and open-source software**: Yes - **Reasonable security support**: probably - **Django integration**: Yes (xapian-haystack) - **Language support**: Armenian, Basque,...

## Whoosh (https://pypi.org/project/Whoosh/) Implementation language: Python Latest release: 2016-04-04 - **Free and open-source software**: Yes - **Reasonable security support**: doubtful - **Django integration**: Yes (django-haystack) - **Language support**: Danish, Dutch,...

## Solr (https://solr.apache.org/) Implementation language: Java Latest release: 2023-10-15 - **Free and open-source software**: Yes - **Reasonable security support**: Yes - **Django integration**: Yes (django-haystack) - **Language support**: Arabic, Bulgarian,...

Anyway, it would probably be useful to have an option to allow new uploads of *training applications* without allowing changes to *project files*.