google-cloud-storage 1.16.0 → 1.17.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 49f8e8d016fa4aab87babc4c20e8f471eb9923c3263625668aa2eb7fe029dc0a
-  data.tar.gz: bf4bbdd4b7570a58a8d63184ef5869c9b7d0ca0870d7044f64158ff6dcd8af9e
+  metadata.gz: 99549b865b9a4222f87a79ca84f7bfb6f9291e48284fd27a8be32cd91a7fe6d5
+  data.tar.gz: b4aee052f8aa4f56caa8c37ddd1d8cac51ad562f85f8bb1b14f9166bc7d65bd2
 SHA512:
-  metadata.gz: 413d832b96b41b17733db3f50ae67e1d79322da88161bb8857c1eff5caf8e6ddc26fea2833090e261b00883d294b398f587c25f86cead52cbb13c37cce2dd4a8
-  data.tar.gz: 94926a277a7c7f296b6789cbbd4022a96a6ee34b4ac00041b4bb68f87af3c1ad448211b7627266a9cce557bd7d2d2e464a2156866de8938f5f8855a59877f43a
+  metadata.gz: 02ff1dab5acafa5b56ee161c1cae21fabd901f6e6edecd802d511c17732d8f837ac4e723babed90feaf2c54054880a36e908302b5ea64dc308e86107858fcc39
+  data.tar.gz: d154a90c24ae673416bb3759d040bb9299cd3a6c53b53b3406a4fe663b525cda298b5fc69da041e828cb7503faf3f7f4380e878bfb3a01dc4b962f71e7ec2b1f

data/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Release History
 
+### 1.17.0 / 2019-02-07
+
+* Add support for Bucket Policy Only with `Bucket#policy_only?`,
+  `Bucket#policy_only=` and `Bucket#policy_only_locked_at`.
+  Read more at https://cloud.google.com/storage/docs/bucket-policy-only
+
 ### 1.16.0 / 2019-02-01
 
 * Make use of Credentials#project_id

data/lib/google/cloud/storage/bucket.rb

@@ -42,6 +42,10 @@ module Google
       #
       class Bucket
         include Convert
+        ##
+        # @private Alias to the Google Client API module
+        API = Google::Apis::StorageV1
+
         ##
         # @private The Service object.
         attr_accessor :service
@@ -82,7 +86,7 @@ module Google
         # @private Create an empty Bucket object.
         def initialize
           @service = nil
-          @gapi = Google::Apis::StorageV1::Bucket.new
+          @gapi = API::Bucket.new
           @user_project = nil
         end
 
@@ -300,7 +304,7 @@ module Google
         # @param [String] logging_bucket The bucket to hold the logging output
         #
         def logging_bucket= logging_bucket
-          @gapi.logging ||= Google::Apis::StorageV1::Bucket::Logging.new
+          @gapi.logging ||= API::Bucket::Logging.new
           @gapi.logging.log_bucket = logging_bucket
           patch_gapi! :logging
         end
@@ -329,7 +333,7 @@ module Google
         # @param [String] logging_prefix The logging object prefix.
         #
         def logging_prefix= logging_prefix
-          @gapi.logging ||= Google::Apis::StorageV1::Bucket::Logging.new
+          @gapi.logging ||= API::Bucket::Logging.new
           @gapi.logging.log_object_prefix = logging_prefix
           patch_gapi! :logging
         end
@@ -381,7 +385,7 @@ module Google
         #   for the bucket.
         #
         def versioning= new_versioning
-          @gapi.versioning ||= Google::Apis::StorageV1::Bucket::Versioning.new
+          @gapi.versioning ||= API::Bucket::Versioning.new
           @gapi.versioning.enabled = new_versioning
           patch_gapi! :versioning
         end
@@ -411,7 +415,7 @@ module Google
         # @param [String] website_main The main page suffix.
         #
         def website_main= website_main
-          @gapi.website ||= Google::Apis::StorageV1::Bucket::Website.new
+          @gapi.website ||= API::Bucket::Website.new
           @gapi.website.main_page_suffix = website_main
           patch_gapi! :website
         end
@@ -459,7 +463,7 @@ module Google
         #   How to Host a Static Website
         #
         def website_404= website_404
-          @gapi.website ||= Google::Apis::StorageV1::Bucket::Website.new
+          @gapi.website ||= API::Bucket::Website.new
           @gapi.website.not_found_page = website_404
           patch_gapi! :website
         end
@@ -501,7 +505,7 @@ module Google
         #   # Project#bucket or Project#buckets to access this bucket.
         #
         def requester_pays= new_requester_pays
-          @gapi.billing ||= Google::Apis::StorageV1::Bucket::Billing.new
+          @gapi.billing ||= API::Bucket::Billing.new
           @gapi.billing.requester_pays = new_requester_pays
           patch_gapi! :billing
         end
@@ -549,7 +553,7 @@ module Google
         #   bucket.default_kms_key = kms_key_name
         #
         def default_kms_key= new_default_kms_key
-          @gapi.encryption = Google::Apis::StorageV1::Bucket::Encryption.new \
+          @gapi.encryption = API::Bucket::Encryption.new \
             default_kms_key_name: new_default_kms_key
           patch_gapi! :encryption
         end
@@ -604,8 +608,7 @@ module Google
           if new_retention_period.nil?
             @gapi.retention_policy = nil
           else
-            @gapi.retention_policy ||= \
-              Google::Apis::StorageV1::Bucket::RetentionPolicy.new
+            @gapi.retention_policy ||= API::Bucket::RetentionPolicy.new
             @gapi.retention_policy.retention_period = new_retention_period
           end
 
@@ -757,6 +760,100 @@ module Google
           true
         end
 
+        ##
+        # Whether the bucket's file IAM configuration enables Bucket Policy
+        # Only. The default is false. This value can be modified by calling
+        # {Bucket#policy_only=}.
+        #
+        # If true, access checks only use bucket-level IAM policies or above,
+        # all object ACLs within the bucket are no longer evaluated, and
+        # access-control is configured solely through the bucket's IAM policy.
+        # Any requests which attempt to use the ACL API to view or manipulate
+        # ACLs will fail with 400 errors.
+        #
+        # @return [Boolean] Returns `false` if the bucket has no IAM
+        #   configuration or if Bucket Policy Only is not enabled in the IAM
+        #   configuration. Returns `true` if Bucket Policy Only is enabled in
+        #   the IAM configuration.
+        #
+        # @example
+        #   require "google/cloud/storage"
+        #
+        #   storage = Google::Cloud::Storage.new
+        #
+        #   bucket = storage.bucket "my-bucket"
+        #
+        #   bucket.policy_only = true
+        #   bucket.policy_only? # true
+        #
+        def policy_only?
+          return false unless @gapi.iam_configuration &&
+                              @gapi.iam_configuration.bucket_policy_only
+          !@gapi.iam_configuration.bucket_policy_only.enabled.nil? &&
+            @gapi.iam_configuration.bucket_policy_only.enabled
+        end
+
+        ##
+        # If enabled, access checks only use bucket-level IAM policies or above,
+        # all object ACLs within the bucket are no longer evaluated, and
+        # access-control is configured solely through the bucket's IAM policy.
+        # Any requests which attempt to use the ACL API to view or manipulate
+        # ACLs will fail with 400 errors.
+        #
+        # @param [Boolean] new_policy_only When set to `true`, Bucket Policy
+        #   Only is enabled in the bucket's IAM configuration.
+        #
+        # @example
+        #   require "google/cloud/storage"
+        #
+        #   storage = Google::Cloud::Storage.new
+        #
+        #   bucket = storage.bucket "my-bucket"
+        #
+        #   bucket.policy_only = true
+        #   bucket.policy_only? # true
+        #
+        #   bucket.default_acl.public! # Google::Cloud::InvalidArgumentError
+        #
+        #   # The deadline for disabling Bucket Policy Only.
+        #   puts bucket.policy_only_locked_at
+        #
+        def policy_only= new_policy_only
+          @gapi.iam_configuration ||= API::Bucket::IamConfiguration.new \
+            bucket_policy_only: \
+              API::Bucket::IamConfiguration::BucketPolicyOnly.new
+          @gapi.iam_configuration.bucket_policy_only.enabled = new_policy_only
+          patch_gapi! :iam_configuration
+        end
+
+        ##
+        # The deadline time for disabling Bucket Policy Only by calling
+        # {Bucket#policy_only=}. After the locked time the Bucket Policy Only
+        # setting cannot be changed from true to false. Corresponds to the
+        # property `locked_time`.
+        #
+        # @return [DateTime, nil] The deadline time for changing
+        #   {Bucket#policy_only=} from true to false, or `nil` if
+        #   {Bucket#policy_only?} is false.
+        #
+        # @example
+        #   require "google/cloud/storage"
+        #
+        #   storage = Google::Cloud::Storage.new
+        #
+        #   bucket = storage.bucket "my-bucket"
+        #
+        #   bucket.policy_only = true
+        #
+        #   # The deadline for disabling Bucket Policy Only.
+        #   puts bucket.policy_only_locked_at
+        #
+        def policy_only_locked_at
+          return nil unless @gapi.iam_configuration &&
+                            @gapi.iam_configuration.bucket_policy_only
+          @gapi.iam_configuration.bucket_policy_only.locked_time
+        end
+
         ##
         # Updates the bucket with changes made in the given block in a single
         # PATCH request. The following attributes may be set: {#cors},
@@ -1243,7 +1340,7 @@ module Google
                       user_project: user_project }
           destination_gapi = nil
           if block_given?
-            destination_gapi = Google::Apis::StorageV1::Object.new
+            destination_gapi = API::Object.new
             updater = File::Updater.new destination_gapi
             yield updater
             updater.check_for_changed_metadata!
@@ -1910,7 +2007,7 @@ module Google
           patch_args = Hash[attributes.map do |attr|
             [attr, @gapi.send(attr)]
           end]
-          patch_gapi = Google::Apis::StorageV1::Bucket.new patch_args
+          patch_gapi = API::Bucket.new patch_args
           @gapi = service.patch_bucket name, patch_gapi,
                                        user_project: user_project
           @lazy = nil

data/lib/google/cloud/storage/version.rb

@@ -16,7 +16,7 @@
 module Google
   module Cloud
     module Storage
-      VERSION = "1.16.0".freeze
+      VERSION = "1.17.0".freeze
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-storage
 version: !ruby/object:Gem::Version
-  version: 1.16.0
+  version: 1.17.0
 platform: ruby
 authors:
 - Mike Moore
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-02-04 00:00:00.000000000 Z
+date: 2019-02-07 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-cloud-core
@@ -31,14 +31,14 @@ dependencies:
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.23'
+        version: '0.26'
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
     - - "~>"
       - !ruby/object:Gem::Version
-        version: '0.23'
+        version: '0.26'
 - !ruby/object:Gem::Dependency
   name: googleauth
   requirement: !ruby/object:Gem::Requirement