Read access control is not yet enforced by Storage Providers, but this functionality is planned soon!
Today anyone can fetch any piece, and encryption is what keeps data private by controlling who can read the data.
Soon, Access Control will decide who can fetch it.
Access will be authorized with an Authorization header using exactly the same keyspaces, scopes and piece identifiers as encryption grants. This ensures that read ACL and encryption key access stay in sync, enabling applications fine-grained control over what is shared, with whom, without adding another layer of complexity. Bear this in mind if you are currently developing an application and trying to decide on how to design your protection and sharing scheme.
