- Can image uploading permitted clients only - Authontication delegate to storage providers - Local file storage if authentication skip