I’m trying to understand the implications of the data storage model for developing an app.
Suppose I am trying to build facebook as a blockstack app. I understand that users will store their data (biography, pictures, etc) on their own storage system (google drive, dropbox, their own server) which the page that I serve them will access, using blockstack’s API to do stuff like getFile() and putFile() agnostic of the specific storage system).
In my facebook app, I want Alice to be able to go to Bob’s profile and look at his pictures. Say Bob decided to store his files on google drive. What is the mechanism by which Bob’s google drive account would grant Alice (but not the whole world) access to those pictures? Does this entail a separate API key for each file that Alice stores in her own storage system? What steps are needed when Bob uploads a new photo? What about when Bob deletes a photo?