default_object_access_controls

Creates, updates, deletes, gets or lists a default_object_access_controls resource.

Overview

Name	default_object_access_controls
Type	Resource
Id	google.storage.default_object_access_controls

Fields

The following fields are returned by SELECT queries:

get

Successful response

Name	Datatype	Description
id	string	The ID of the access-control entry.
bucket	string	The name of the bucket.
domain	string	The domain associated with the entity, if any.
email	string	The email address associated with the entity, if any.
entity	string	The entity holding the permission, in one of the following forms: - user-userId - user-email - group-groupId - group-email - domain-domain - project-team-projectId - allUsers - allAuthenticatedUsers Examples: - The user liz@example.com would be user-liz@example.com. - The group example@googlegroups.com would be group-example@googlegroups.com. - To refer to all members of the Google Apps for Business domain example.com, the entity would be domain-example.com.
entityId	string	The ID for the entity, if any.
etag	string	HTTP 1.1 Entity tag for the access-control entry.
generation	string (int64)	The content generation of the object, if applied to an object.
kind	string	The kind of item this is. For object access control entries, this is always storage#objectAccessControl. (default: storage#objectAccessControl)
object	string	The name of the object, if applied to an object.
projectTeam	object	The project team associated with the entity, if any.
role	string	The access permission for the entity.
selfLink	string	The link to this access-control entry.

list

Successful response

Name	Datatype	Description
items	array	The list of items.
kind	string	The kind of item this is. For lists of object access control entries, this is always storage#objectAccessControls. (default: storage#objectAccessControls)

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get	select	bucket, entity	userProject	Returns the default object ACL entry for the specified entity on the specified bucket.
list	select	bucket	ifMetagenerationMatch, ifMetagenerationNotMatch, userProject	Retrieves default object ACL entries on the specified bucket.
insert	insert	bucket	userProject	Creates a new default object ACL entry on the specified bucket.
patch	update	bucket, entity	userProject	Patches a default object ACL entry on the specified bucket.
update	replace	bucket, entity	userProject	Updates a default object ACL entry on the specified bucket.
delete	delete	bucket, entity	userProject	Permanently deletes the default object ACL entry for the specified entity on the specified bucket.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
bucket	string
entity	string
ifMetagenerationMatch	string (int64)
ifMetagenerationNotMatch	string (int64)
userProject	string

SELECT examples

get

Returns the default object ACL entry for the specified entity on the specified bucket.

SELECT
id,
bucket,
domain,
email,
entity,
entityId,
etag,
generation,
kind,
object,
projectTeam,
role,
selfLink
FROM google.storage.default_object_access_controls
WHERE bucket = '{{ bucket }}' -- required
AND entity = '{{ entity }}' -- required
AND userProject = '{{ userProject }}';

list

Retrieves default object ACL entries on the specified bucket.

SELECT
items,
kind
FROM google.storage.default_object_access_controls
WHERE bucket = '{{ bucket }}' -- required
AND ifMetagenerationMatch = '{{ ifMetagenerationMatch }}'
AND ifMetagenerationNotMatch = '{{ ifMetagenerationNotMatch }}'
AND userProject = '{{ userProject }}';

INSERT examples

insert

Creates a new default object ACL entry on the specified bucket.

INSERT INTO google.storage.default_object_access_controls (
data__bucket,
data__domain,
data__email,
data__entity,
data__entityId,
data__etag,
data__generation,
data__id,
data__kind,
data__object,
data__projectTeam,
data__role,
data__selfLink,
bucket,
userProject
)
SELECT 
'{{ bucket }}',
'{{ domain }}',
'{{ email }}',
'{{ entity }}',
'{{ entityId }}',
'{{ etag }}',
'{{ generation }}',
'{{ id }}',
'{{ kind }}',
'{{ object }}',
'{{ projectTeam }}',
'{{ role }}',
'{{ selfLink }}',
'{{ bucket }}',
'{{ userProject }}'
RETURNING
id,
bucket,
domain,
email,
entity,
entityId,
etag,
generation,
kind,
object,
projectTeam,
role,
selfLink
;

Manifest

# Description fields are for documentation purposes
- name: default_object_access_controls
  props:
    - name: bucket
      value: string
      description: Required parameter for the default_object_access_controls resource.
    - name: bucket
      value: string
      description: >
        The name of the bucket.
        
    - name: domain
      value: string
      description: >
        The domain associated with the entity, if any.
        
    - name: email
      value: string
      description: >
        The email address associated with the entity, if any.
        
    - name: entity
      value: string
      description: >
        The entity holding the permission, in one of the following forms: 
- user-userId 
- user-email 
- group-groupId 
- group-email 
- domain-domain 
- project-team-projectId 
- allUsers 
- allAuthenticatedUsers Examples: 
- The user liz@example.com would be user-liz@example.com. 
- The group example@googlegroups.com would be group-example@googlegroups.com. 
- To refer to all members of the Google Apps for Business domain example.com, the entity would be domain-example.com.
        
    - name: entityId
      value: string
      description: >
        The ID for the entity, if any.
        
    - name: etag
      value: string
      description: >
        HTTP 1.1 Entity tag for the access-control entry.
        
    - name: generation
      value: string
      description: >
        The content generation of the object, if applied to an object.
        
    - name: id
      value: string
      description: >
        The ID of the access-control entry.
        
    - name: kind
      value: string
      description: >
        The kind of item this is. For object access control entries, this is always storage#objectAccessControl.
        
      default: storage#objectAccessControl
    - name: object
      value: string
      description: >
        The name of the object, if applied to an object.
        
    - name: projectTeam
      value: object
      description: >
        The project team associated with the entity, if any.
        
    - name: role
      value: string
      description: >
        The access permission for the entity.
        
    - name: selfLink
      value: string
      description: >
        The link to this access-control entry.
        
    - name: userProject
      value: string

UPDATE examples

patch

Patches a default object ACL entry on the specified bucket.

UPDATE google.storage.default_object_access_controls
SET 
data__bucket = '{{ bucket }}',
data__domain = '{{ domain }}',
data__email = '{{ email }}',
data__entity = '{{ entity }}',
data__entityId = '{{ entityId }}',
data__etag = '{{ etag }}',
data__generation = '{{ generation }}',
data__id = '{{ id }}',
data__kind = '{{ kind }}',
data__object = '{{ object }}',
data__projectTeam = '{{ projectTeam }}',
data__role = '{{ role }}',
data__selfLink = '{{ selfLink }}'
WHERE 
bucket = '{{ bucket }}' --required
AND entity = '{{ entity }}' --required
AND userProject = '{{ userProject}}'
RETURNING
id,
bucket,
domain,
email,
entity,
entityId,
etag,
generation,
kind,
object,
projectTeam,
role,
selfLink;

REPLACE examples

update

Updates a default object ACL entry on the specified bucket.

REPLACE google.storage.default_object_access_controls
SET 
data__bucket = '{{ bucket }}',
data__domain = '{{ domain }}',
data__email = '{{ email }}',
data__entity = '{{ entity }}',
data__entityId = '{{ entityId }}',
data__etag = '{{ etag }}',
data__generation = '{{ generation }}',
data__id = '{{ id }}',
data__kind = '{{ kind }}',
data__object = '{{ object }}',
data__projectTeam = '{{ projectTeam }}',
data__role = '{{ role }}',
data__selfLink = '{{ selfLink }}'
WHERE 
bucket = '{{ bucket }}' --required
AND entity = '{{ entity }}' --required
AND userProject = '{{ userProject}}'
RETURNING
id,
bucket,
domain,
email,
entity,
entityId,
etag,
generation,
kind,
object,
projectTeam,
role,
selfLink;

DELETE examples

delete

Permanently deletes the default object ACL entry for the specified entity on the specified bucket.

DELETE FROM google.storage.default_object_access_controls
WHERE bucket = '{{ bucket }}' --required
AND entity = '{{ entity }}' --required
AND userProject = '{{ userProject }}';