How to Build Auditable User Document Storage with Python — Access Control
A receipt system in healthtech has two jobs that pull in different directions: make a document easy for the application to deliver, and make the original file defensible during an audit. The design should keep those jobs separate. Store the original in private object storage, issue short-lived access only after an authorization check, and record an immutable metadata trail around every read and…
We haven't written up this one. Dev.to has the full story — the link below goes straight to it.