fix(uploadfs): set S3 bucketObjectsACL to private by default

Author: Ihor Masechko

website/modules/@apostrophecms/uploadfs/index.js

@@ -9,7 +9,6 @@ const uploadfsOptions = {
   storage: 's3',
   bucket: getEnv('APOS_S3_BUCKET'),
   region: getEnv('APOS_S3_REGION'),
-  acl: 'private',
   cdn: {
     enabled: true,
     url: getEnv('APOS_CDN_URL'),
@@ -33,6 +32,11 @@ if (aposS3Secret) {
   uploadfsOptions.key = getEnv('APOS_S3_KEY');
 }
 
+const aposS3BucketObjectsAcl =
+  process.env.APOS_S3_ACL || 'private';
+uploadfsOptions.bucketObjectsACL = aposS3BucketObjectsAcl;
+uploadfsOptions.disabledBucketObjectsACL = aposS3BucketObjectsAcl;
+
 const res = {
   options: {
     uploadfs: uploadfsOptions,