The hour fix is not link expiry | Rapid course Security architecture and engineering

Open, free learning for anyone who wants to protect people and technology. No account is required to read this text or its worked answers.

Lesson map

Lesson 09. Map, example, EX055.

flowchart TD
  A["Public sharing closed within the hour"] --> B["Before export: public_links off"]
  B --> C{"Does that hour also set expiry?"}
  C -->|No| D["Expiry is the separate None token"]
  C -->|Yes| E["The before line would not show None"]

Two link settings. The hour addressed one of them.

Logical drawing

stop-condition finding
    folder viewable by anyone with the link
    vendor changes that setting within the hour
    logs: no access by unknown parties
before export, already
    public_links passes
    upload_link_expiry_days=None fails
after export
    expiry value 14, which meets the rule of 14 days or fewer

Learning outcomes

After this chapter, you should be able to:

Keep the within-the-hour change on the public-sharing setting.
Leave upload_link_expiry_days=None as the before fail.
Read 14 as the after value that meets the rule, not as a failure.

9.1 Public sharing and expiry are different settings.

During the review, uploads sat in a folder anyone with the link could open. Leah stopped. The vendor changed that sharing setting within the hour. The before loan export already has public links off, so that check passes. The same export fails upload_link_expiry_days=None. Leah's notes say the earlier fix closed public access and did not set expiry. A classmate writes that the hour also created the 14-day expiry. The after export is the run that shows 14, and 14 meets the rule of 14 days or fewer. Leah does not move 14 onto the before line. She does not edit lab_baseline.py.

9.2 Worked example

Lesson table; scroll horizontally to read all columns →

Statement	Setting it belongs to	Decision
"The vendor changed sharing within the hour."	Public link access	May stay
"public_links passes on the before export."	The first loan run	May stay
"The hour set expiry."	Contradicts the None token	Refuse
"14 failed the rule."	14 meets a limit of 14	Refuse

Synthetic case. No member file is opened. The two settings stay distinct.

Errors and limits

Passing public links on the first export does not prove who could open an older link before that hour. Expiry is a later check.

Apply

EX055 — Which fix was the hour? The vendor closed public sharing within the hour. The before export fails upload_link_expiry_days=None and passes public links. The after value is 14. Did the hour set expiry, and does 14 fail?
Show marking criteria
Rubric: 3 = the hour is the public-sharing change; None stays the before expiry fail; 14 is the after value and it meets the rule; do not edit the script;; 2 = the hour is not expiry;; 1 = one of those;; 0 = none.