Download an object as a role

Database id

Branch id

Bucket name

Object name (may contain /)

The role to act as: row level security on storage.buckets and storage.objects decides what it sees and may do. Absent, owner or the owner's name: owner mode, for an Admin of the database only, which sees and writes past every policy (write-once buckets still hold) and writes objects with no owner (owner null).

The JWT claims to run with: a JSON object (at most 4 KiB), {} when absent. Acting as authenticated with {"sub": "<user id>"} shows what that app user sees.

The Postgres database; the branch's main database when absent. It must be served by the data API.

Upload: replace an existing object.

Download as an attachment; the value is the file name (empty: the object's own).