(ph|SrSSKJr SSKJr SSKJr SSKJr SSKJ r "SS\ 5r "S S \ 5r "S S \ 5r "S S\ 5r"SS\ 5rg)z%Manage access to objects and buckets.) _add_generation_match_parameters)create_trace_span)_DEFAULT_TIMEOUT) DEFAULT_RETRY))DEFAULT_RETRY_IF_METAGENERATION_SPECIFIEDcp\rSrSrSrSrSrSrSSjrSr S r S r S r S r S rSrSrSrSrSrSrg) _ACLEntityaClass representing a set of roles for an entity. This is a helper class that you likely won't ever construct outside of using the factor methods on the :class:`ACL` object. :type entity_type: str :param entity_type: The type of entity (ie, 'group' or 'user'). :type identifier: str :param identifier: (Optional) The ID or e-mail of the entity. For the special entity types (like 'allUsers'). READERWRITEROWNERNc<X l[/5UlXlgN) identifiersetrolestype)self entity_typers K/var/www/html/venv/lib/python3.13/site-packages/google/cloud/storage/acl.py__init___ACLEntity.__init__*s$W  clUR(d[UR5$SRUS9$)Nz{acl.type}-{acl.identifier})acl)rstrrformatrs r__str___ACLEntity.__str__/s+tyy> !077D7A ArcFSUSSRUR5S3$)Nz )joinrrs r__repr___ACLEntity.__repr__5s%tfBtyy'<&=R@@rcUR$)zGet the list of roles permitted by this entity. :rtype: list of strings :returns: The list of roles associated with this entity. )rrs r get_roles_ACLEntity.get_roles8s zzrc:URRU5 g)zWAdd a role to the entity. :type role: str :param role: The role to add to the entity. N)raddrroles rgrant_ACLEntity.grant@s trcZXR;aURRU5 gg)zaRemove a role from the entity. :type role: str :param role: The role to remove from the entity. N)rremover*s rrevoke_ACLEntity.revokeHs% ::  JJ  d # rcBUR[R5 g)z(Grant read access to the current entity.N)r,r READER_ROLErs r grant_read_ACLEntity.grant_readQ :))*rcBUR[R5 g)z)Grant write access to the current entity.N)r,r WRITER_ROLErs r grant_write_ACLEntity.grant_writeUr6rcBUR[R5 g)z)Grant owner access to the current entity.N)r,r OWNER_ROLErs r grant_owner_ACLEntity.grant_ownerYs :(()rcBUR[R5 g)z+Revoke read access from the current entity.N)r0r r3rs r revoke_read_ACLEntity.revoke_read] J**+rcBUR[R5 g)z,Revoke write access from the current entity.N)r0r r8rs r revoke_write_ACLEntity.revoke_writearBrcBUR[R5 g)z,Revoke owner access from the current entity.N)r0r r<rs r revoke_owner_ACLEntity.revoke_owneres J))*r)rrrr)__name__ __module__ __qualname____firstlineno____doc__r3r8r<rrr#r&r,r0r4r9r=r@rDrG__static_attributes__rrr r sV KKJ B A$++*,,+rr cV\rSrSrSrSrSrSSSSS S S .r\"/S Q5r S r Sr Sr Sr Sr\4Sjr\S5rSrSrSrSrS'SjrSrS'SjrSrSrSrSrSrSr\ S5r!S r"S\\#4S!jr$SSSS\\%4S"jr&SSSSSS\\%4S#jr'SSSSS\\%4S$jr(SSSSS\\%4S%jr)S&r*g)(ACLjz7Container class representing a list of access controls.r predefinedAclprojectPrivate publicReadpublicReadWriteauthenticatedReadbucketOwnerReadbucketOwnerFullControl)zproject-privatez public-readzpublic-read-writezauthenticated-readzbucket-owner-readzbucket-owner-full-control)privaterTrUrVrWrXrYFNc0Ulgr)entitiesrs rr ACL.__init__s  rcFUR(dURUS9 gg)zLoad if not already loaded. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` )timeoutN)loadedreload)rr_s r_ensure_loadedACL._ensure_loadeds{{ KKK (rcURRX5nU(aXR;a[SU35eU$)a Ensures predefined is in list of predefined json values :type predefined: str :param predefined: name of a predefined acl :type predefined: str :param predefined: validated JSON name of predefined acl :raises: :exc: `ValueError`: If predefined is not a valid acl zInvalid predefined ACL: )PREDEFINED_XML_ACLSgetPREDEFINED_JSON_ACLS ValueError)cls predefineds rvalidate_predefinedACL.validate_predefinedsA,,00H *,D,DD7 |DE ErcFURR5 SUlg)z@Remove all entities from the ACL, and clear the ``loaded`` flag.FN)r\clearr`rs rreset ACL.resets  rc## UR5 URR5H3nUR5HnU(dM [ U5US.v M M5 g7f)N)entityr+)rbr\valuesr&r)rrrr+s r__iter__ ACL.__iter__sO mm**,F((*4%([$??+-s AA% A%c0USnUSnUS:XaUR5nO@US:XaUR5nO)SU;a#URSS5upEURXES9n[ U[ 5(d[ SU35eURU5 U$) aBuild an _ACLEntity object from a dictionary of data. An entity is a mutable object that represents a list of roles belonging to either a user or group or the special types for all users and all authenticated users. :type entity_dict: dict :param entity_dict: Dictionary full of data from an ACL lookup. :rtype: :class:`_ACLEntity` :returns: An Entity constructed from the dictionary. rrr+allUsersallAuthenticatedUsers-rrzInvalid dictionary: )allall_authenticatedsplitrr isinstancer rhr,)r entity_dictrrr+rrs rentity_from_dictACL.entity_from_dictsX&6" Z XXZF . .++-F F]&,ll3&: #K[[[[PF&*--3K=AB B T rcRUR5 [U5UR;$)zReturns whether or not this ACL has any entries for an entity. :type entity: :class:`_ACLEntity` :param entity: The entity to check for existence in this ACL. :rtype: bool :returns: True of the entity exists in the ACL. )rbrr\rrrs r has_entityACL.has_entitys# 6{dmm++rclUR5 URR[U5U5$)agGets an entity object from the ACL. :type entity: :class:`_ACLEntity` or string :param entity: The entity to get lookup in the ACL. :type default: anything :param default: This value will be returned if the entity doesn't exist. :rtype: :class:`_ACLEntity` :returns: The corresponding entity or the value provided to ``default``. )rbr\rfr)rrrdefaults r get_entityACL.get_entitys+ }}  Vg66rcRUR5 XR[U5'g)zkAdd an entity to the ACL. :type entity: :class:`_ACLEntity` :param entity: The entity to add to this ACL. N)rbr\rrs r add_entityACL.add_entitys %+ c&k"rc[XS9nURU5(aURU5nU$URU5 U$)a_Factory method for creating an Entity. If an entity with the same type and identifier already exists, this will return a reference to that entity. If not, it will create a new one and add it to the list of known entities for this ACL. :type entity_type: str :param entity_type: The type of entity to create (ie, ``user``, ``group``, etc) :type identifier: str :param identifier: The ID of the entity (if applicable). This can be either an ID or an e-mail address. :rtype: :class:`_ACLEntity` :returns: A new Entity or a reference to an existing identical entity. r{)r rrr)rrrrrs rrr ACL.entitysE& K ??6 " "__V,F  OOF # rc"URSUS9$)zFactory method for a user Entity. :type identifier: str :param identifier: An id or e-mail for this particular user. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this user. userrrrrrs rrACL.users{{6j{99rc"URSUS9$)zFactory method for a group Entity. :type identifier: str :param identifier: An id or e-mail for this particular group. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this group. grouprrrs rr ACL.group(s{{7z{::rc"URSUS9$)zFactory method for a domain Entity. :type domain: str :param domain: The domain for this entity. :rtype: :class:`_ACLEntity` :returns: An entity corresponding to this domain. domainrr)rrs rr ACL.domain3s{{8{77rc$URS5$)z~Factory method for an Entity representing all users. :rtype: :class:`_ACLEntity` :returns: An entity representing all users. rwrrs rr|ACL.all>s {{:&&rc$URS5$)zFactory method for an Entity representing all authenticated users. :rtype: :class:`_ACLEntity` :returns: An entity representing all authenticated users. rxrrs rr}ACL.all_authenticatedFs {{233rchUR5 [URR55$)zwGet a list of all Entity objects. :rtype: list of :class:`_ACLEntity` objects :returns: A list of all Entity objects. )rblistr\rsrs r get_entitiesACL.get_entitiesNs( DMM((*++rc[e)z&Abstract getter for the object client.)NotImplementedErrorrs rclient ACL.clientWs "!rc$Uc URnU$)ahCheck client or verify over-ride. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: the client to use. If not passed, falls back to the ``client`` stored on the current ACL. :rtype: :class:`google.cloud.storage.client.Client` :returns: The client passed in or the currently bound client. )r)rrs r_require_clientACL._require_client\s >[[F rc[SS9 URnURU5n0nURbURUS'URR 5 UR UUUUS9nSUlURSS5H#nURURU55 M% SSS5 g!,(df  g=f) azReload the ACL data from Cloud Storage. If :attr:`user_project` is set, bills the API request to that project. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: :class:`~google.api_core.retry.Retry` :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.reloadnameN userProject query_paramsr_retryTitemsrO) r reload_pathr user_projectr\rn _get_resourcer`rfrr)rrr_rpathrfoundentrys rra ACL.reloadks$$8 9##D))&1FL  ,.2.?.? ]+ MM   !(() )E DK7B/ 5 5e <=0%: 9 9s B(B;; C c URU5nSS0n Ub/nX*UR'URbURU S'[U UUUUS9 URn UR U UR [U50U UU S9n URR5 U RUR S5H#n URURU 55 M% SUl g) aHelper for :meth:`save` and :meth:`save_predefined`. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` projectionfullNr)if_generation_matchif_generation_not_matchif_metageneration_matchif_metageneration_not_matchrrOT)r_PREDEFINED_QUERY_PARAMrr save_path_patch_resource_URL_PATH_ELEMrr\rnrfrrr`)rrrjrrrrrr_rrrresultrs r_save ACL._savesh%%f-$f-  !C9C55 6    (*.*;*;L '(  3$;$;(C  ~~''   $s) ,% (  ZZ 3 3R8E OOD11%8 99 rc [SS9 UcUnURn OSn U (aURUSUUUUUUUS9 SSS5 g!,(df  g=f)aASave this ACL for the current bucket. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.saverNTrrrrr_r)rr`r) rrrrrrrr_rsave_to_backends rsaveACL.savesab$6 7{"%**"& (;,C,C0K# 8 7 7s 3A Ac [SS9 URU5nURSUUUUUUUUS9 SSS5 g!,(df  g=f)aSave this ACL for the current bucket using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.savePredefinedrNr)rrkr) rrjrrrrrr_rs rsave_predefinedACL.save_predefined.sWh$@ A11*=J JJ$7(?(?,G  B A As )< A c v[SS9 UR/UUUUUUUS9 SSS5 g!,(df  g=f)aRemove all ACL entries. If :attr:`user_project` is set, bills the API request to that project. Note that this won't actually remove *ALL* the rules, but it will remove all the non-default rules. In short, you'll still have access to a bucket that you created even after you clear ACL rules with this method. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.clearrrrrrrr_rN)rr)rrrrrrr_rs rrn ACL.clearpsCb$7 8 II$7(?(?,G  9 8 8s* 8)r\r`r)+rIrJrKrLrMrrre frozensetrgr`rrrrrrb classmethodrkrortrrrrrrrrrr|r}rpropertyrrrrarrrrrnrNrOrrrQrQjs`AN-,#.1.%=%  FKIL&6 )  @@ ,7",4 : ; 8'4,"" !*:-%>X! $ $$( 7Ur  $ $$( 7CP $ $$( 7@H $ $$( 7;rrQcl^\rSrSrSrU4Sjr\S5r\S5r\S5r \S5r Sr U=r $) BucketACLizAn ACL specifically for a bucket. :type bucket: :class:`google.cloud.storage.bucket.Bucket` :param bucket: The bucket to which this ACL relates. c6>[[U] 5 Xlgr)superrrbucket)rr __class__s rrBucketACL.__init__s i') rc.URR$)z&The client bound to this ACL's bucket.)rrrs rrBucketACL.clients{{!!!rcLURRSUR3$)3Compute the path for GET API requests for this ACL./)rrrrs rrBucketACL.reload_paths'++""#1T%8%8$9::rc.URR$z5Compute the path for PATCH API requests for this ACL.)rrrs rrBucketACL.save_paths{{rc.URR$z?Compute the user project charged for API requests for this ACL.)rrrs rrBucketACL.user_projects{{'''r)r) rIrJrKrLrMrrrrrrrN __classcell__rs@rrrs] "";;  ((rrc \rSrSrSrSrSrSrg)DefaultObjectACLiz9A class representing the default object ACL for a bucket.defaultObjectAclpredefinedDefaultObjectAclrON)rIrJrKrLrMrrrNrOrrrrsC'N:rrc^\rSrSrSrU4Sjr\S5r\S5r\S5r \S5r SSSSSS\ \ 4U4S jjr SSSSS\ \ 4U4S jjrSSSSS\ \ 4U4S jjrS rU=r$) ObjectACLizAn ACL specifically for a Cloud Storage object / blob. :type blob: :class:`google.cloud.storage.blob.Blob` :param blob: The blob that this ACL corresponds to. c6>[[U] 5 Xlgr)rrrblob)rrrs rrObjectACL.__init__s i') rc.URR$)z$The client bound to this ACL's blob.)rrrs rrObjectACL.clientsyyrc4URRS3$)rz/aclrrrs rrObjectACL.reload_paths))..!&&rc.URR$rrrs rrObjectACL.save_pathsyy~~rc.URR$r)rrrs rrObjectACL.user_projectsyy%%%rNc .>[T U]UUUUUUUUS9 g)aASave this ACL for the current object. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rrrrrrr_rN)rr) rrrrrrrr_rrs rrObjectACL.saves/b   3$;$;(C  rc .>[T U]UUUUUUUUS9 g)aSave this ACL for the current object using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rjrrrrrr_rN)rr) rrjrrrrrr_rrs rrObjectACL.save_predefined0s0h ! 3$;$;(C rc ,>[TU]UUUUUUUS9 g)rrN)rrn) rrrrrrr_rrs rrnObjectACL.clearos,b   3$;$;(C  r)r)rIrJrKrLrMrrrrrrrrrrrnrNrrs@rrrs   ''&&  $ $$( : ~ $ $$( = B $ $$( 9 9 rrN)rMgoogle.cloud.storage._helpersr+google.cloud.storage._opentelemetry_tracingrgoogle.cloud.storage.constantsrgoogle.cloud.storage.retryrrobjectr rQrrrrOrrr s^,JI;4PO+O+dA &A H((@;y;S S r