Abstract: Techniques are described to provide revocable object access. In an implementation, a user may provide content and an object (e.g., a picture) to be published with the content. The object is uploaded to a storage location, and a uniform resource locator (URL) that includes a token is generated for the object. The token is registered in an access control list (ACL), and token permission settings in the ACL are utilized to control access to the object. The URL may be embedded in the content. When a viewer requests the content, the object may be retrieved from the storage location using the URL. The user may revoke access to the object by changing the token permission settings in the ACL.

Abstract: Techniques for sharing of items from online storage (e.g., cloud storage) are described herein. In some embodiments, sharing links can be configured as group opt-in links designed to provide recipients with an option to join a group having permissions on a corresponding shared item. A sharing link to an item may be generated and provided to a user for distribution to recipients in various ways. When selected by recipients, the sharing link causes an option to be exposed to the recipients to opt-in to a group having permissions on a corresponding item. Group membership is determined by recipients that exercise the option and recipients that opt-in are granted permissions on the item established for the group. Subsequently, an owner of the item/group may view a list of recipients who have opted-in as members and manage corresponding permissions on an individual basis.

Abstract: Techniques are described to provide revocable object access. In an implementation, a user may provide content and an object (e.g., a picture) to be published with the content. The object is uploaded to a storage location, and a uniform resource locator (URL) that includes a token is generated for the object. The token is registered in an access control list (ACL), and token permission settings in the ACL are utilized to control access to the object. The URL may be embedded in the content. When a viewer requests the content, the object may be retrieved from the storage location using the URL. The user may revoke access to the object by changing the token permission settings in the ACL.