The v1 and v2 API needs to be able to check a policy when serving image data - probably called 'image_download' defaulting to allow.
The v1 and v2 API needs to be able to check a policy when serving image data - probably called 'image_download' defaulting to allow.