How permissions work by default.¶ ↑ By default paperclip sets permissions for all AS3 uploads as :public_read ('public-read' in v5.0+). This means your files are totally wide open (i.e. they can be accessed by anyone simply by pasting the AS3 url into the browser). What if you need to restrict access?¶ ↑ Restricting access can be a bit tricky. It's easy enough to have Paperclip mark your file as p