fix(medusa, medusa-file-*): Protected uploads for file services (#2433)

packages/medusa-file-spaces/src/services/digital-ocean.js

@@ -20,12 +20,22 @@ class DigitalOceanService extends AbstractFileService {
   upload(file) {
     this.updateAwsConfig()
 
+    return this.uploadFile(file)
+  }
+
+  uploadProtected(file) {
+    this.updateAwsConfig()
+
+    return this.uploadFile(file, { acl: "private" })
+  }
+
+  uploadFile(file, options = { isProtected: false, acl: undefined }) {
     const parsedFilename = parse(file.originalname)
     const fileKey = `${parsedFilename.name}-${Date.now()}${parsedFilename.ext}`
 
     const s3 = new aws.S3()
     const params = {
-      ACL: "public-read",
+      ACL: options.acl ?? (options.isProtected ? "private" : "public-read"),
       Bucket: this.bucket_,
       Body: fs.createReadStream(file.path),
       Key: fileKey,