Difference between revisions of "Gsutil acl ch"

From wikieduonline
Jump to navigation Jump to search
 
(19 intermediate revisions by 3 users not shown)
Line 1: Line 1:
 
{{lc}}
 
{{lc}}
<ref>https://cloud.google.com/storage/docs/gsutil/commands/acl</ref>
+
<code>[[gsutil acl]] ch</code>
[[gsutil acl]] ch
+
* https://cloud.google.com/storage/docs/gsutil/commands/acl
  
=== Ch Examples ===
+
 
 +
== Entities ==
 +
There are four different entity types: <code>[[Users]] (-u), [[Groups]] (-g), [[All Authenticated Users]] (AllAuthenticatedUsers or allauth)</code>, and <code>[[All Users]] (AllUsers or all)</code>.
 +
 
 +
Notes:
 +
* [[Google Cloud Service account|Service Accounts]] are considered to be users
 +
* Permissions: <code>R, W, O</code>
 +
 
 +
Options:
 +
* <code>-R, -r</code> Performs "acl set" request recursively, to all objects under the specified URL.
 +
* <code>-d, -f, -g, -p, -u </code>
 +
 
 +
== Examples ==
 
* <code>gsutil acl ch -u AllUsers:R gs://example-bucket/example-object</code>
 
* <code>gsutil acl ch -u AllUsers:R gs://example-bucket/example-object</code>
  
Line 28: Line 40:
 
=== Ch Roles ===
 
=== Ch Roles ===
  
You may specify the following roles with either their shorthand or their full name:
 
 
*<code>R: READ</code>
 
*<code>R: READ</code>
 
*<code>W: WRITE</code>
 
*<code>W: WRITE</code>
 
*<code>O: OWNER</code>
 
*<code>O: OWNER</code>
 
=== Ch Entities ===
 
 
There are four different entity types: Users, Groups, All Authenticated Users, and All Users.
 
 
Users are added with -u and a plain ID or email address, as in "-u [email protected]:r". Note: Service Accounts are considered to be users.
 
 
Groups are like users, but specified with the -g flag, as in "-g [email protected]:O". Groups may also be specified as a full domain, as in "-g my-company.com:r".
 
 
AllAuthenticatedUsers and AllUsers are specified directly, as in "-g AllUsers:R" or "-g AllAuthenticatedUsers:O". These are case insensitive, and may be shortened to "all" and "allauth", respectively.
 
 
Removing roles is specified with the -d flag and an ID, email address, domain, or one of AllUsers or AllAuthenticatedUsers.
 
 
Many entities' roles can be specified on the same command line, allowing bundled changes to be executed in a single run. This will reduce the number of requests made to the server.
 
 
=== Ch Options ===
 
 
* <code>-d</code>
 
 
* <code>-f</code>
 
 
*<code>-g</code>
 
 
*<code>-p</code>
 
 
*<code>-R, -r</code>
 
 
*<code>-u </code>
 
  
 
== See also ==
 
== See also ==

Latest revision as of 07:10, 19 September 2022

gsutil acl ch


Entities[edit]

There are four different entity types: Users (-u), Groups (-g), All Authenticated Users (AllAuthenticatedUsers or allauth), and All Users (AllUsers or all).

Notes:

Options:

  • -R, -r Performs "acl set" request recursively, to all objects under the specified URL.
  • -d, -f, -g, -p, -u

Examples[edit]

  • gsutil acl ch -u AllUsers:R gs://example-bucket/example-object

Grant anyone on the internet WRITE access to the bucket example-bucket:

Grant the group OWNER access to all jpg files in example-bucket:

Remove access to the bucket example-bucket for the viewers of project number 12345:

  • gsutil acl ch -d viewers-12345 gs://example-bucket

Grant all users from the G Suite domain my-domain.org READ access to the bucket gcs.my-domain.org:

  • gsutil acl ch -g my-domain.org:R gs://gcs.my-domain.org

Remove any current access by [email protected] from the bucket example-bucket:

Ch Roles[edit]

  • R: READ
  • W: WRITE
  • O: OWNER

See also[edit]

Advertising: