google-cloud-storage 1.22.0 → 1.23.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a67ef9bc41b662092abd0586681372ace9f9e55f8343d60d06309f2fd8f83616
-  data.tar.gz: 4123df331b12abbe88a9d205233bb6c217f1a193dd6e224cf97c61d8d65f109d
+  metadata.gz: 52575f5ef15af2995be2e3b8598cc5bfae8d96468b1f56d2eb218f1ea53f4091
+  data.tar.gz: 5bbda2deb2729b4fb0046ae968d16ee22019363acf9ed511f43e36a3631d2f0e
 SHA512:
-  metadata.gz: 2a7ca08ea73ed40b9fb36ff17c3402711366874651ef18f51da42d67232d153fa9067741a0dfe4cd7ea7200a730be992b3125b979c5490b99f42906b6398553f
-  data.tar.gz: 290c14694bd1c37996a182ff8295434410c2efdc4ce41f5f3ef5f99cfc819a2d649380ed75f22aa9adfd6c8fea65e8318731403f8272e40ca269e975c971d3ca
+  metadata.gz: 7a7af41ef5155e1d9e272f7402194baef5559fdba501cc0c64e8bc17c276ac9a0c965b8772e422eb360d668344e8e83b4b6128b1a25cfa84a2d6c17eec7f8e7c
+  data.tar.gz: 6b31863d501097f76334100889953e02e3f3e643737fbca51c976317dc37c2cf06ba370f1e50d577e7dc3c46978b8bd270eb4d4c9f3f35430bed992c79ce1d36

data/CHANGELOG.md

@@ -1,5 +1,13 @@
 # Release History
 
+### 1.23.0 / 2019-11-05
+
+#### Features
+
+* Add support for Bucket#uniform_bucket_level_access
+  * Deprecate Bucket#policy_only=, #policy_only?, and #policy_only_locked_at,
+    which are now aliases for the uniform_bucket_level_access methods.
+
 ### 1.22.0 / 2019-10-28
 
 * Now requires Ruby 2.4 or later.

data/lib/google/cloud/storage/bucket.rb

@@ -780,20 +780,12 @@ module Google
         end
 
         ##
-        # Whether the bucket's file IAM configuration enables Bucket Policy
-        # Only. The default is false. This value can be modified by calling
-        # {Bucket#policy_only=}.
+        # Whether the bucket's file IAM configuration enables uniform bucket-level access. The default is false. This
+        # value can be modified by calling {Bucket#uniform_bucket_level_access=}.
         #
-        # If true, access checks only use bucket-level IAM policies or above,
-        # all object ACLs within the bucket are no longer evaluated, and
-        # access-control is configured solely through the bucket's IAM policy.
-        # Any requests which attempt to use the ACL API to view or manipulate
-        # ACLs will fail with 400 errors.
-        #
-        # @return [Boolean] Returns `false` if the bucket has no IAM
-        #   configuration or if Bucket Policy Only is not enabled in the IAM
-        #   configuration. Returns `true` if Bucket Policy Only is enabled in
-        #   the IAM configuration.
+        # @return [Boolean] Returns `false` if the bucket has no IAM configuration or if uniform bucket-level access is
+        #   not enabled in the IAM configuration. Returns `true` if uniform bucket-level access is enabled in the IAM
+        #   configuration.
         #
         # @example
         #   require "google/cloud/storage"
@@ -802,30 +794,27 @@ module Google
         #
         #   bucket = storage.bucket "my-bucket"
         #
-        #   bucket.policy_only = true
-        #   bucket.policy_only? # true
+        #   bucket.uniform_bucket_level_access = true
+        #   bucket.uniform_bucket_level_access? # true
         #
-        def policy_only?
-          return false unless @gapi.iam_configuration &&
-                              @gapi.iam_configuration.bucket_policy_only
-          !@gapi.iam_configuration.bucket_policy_only.enabled.nil? &&
-            @gapi.iam_configuration.bucket_policy_only.enabled
+        def uniform_bucket_level_access?
+          return false unless @gapi.iam_configuration && @gapi.iam_configuration.uniform_bucket_level_access
+          !@gapi.iam_configuration.uniform_bucket_level_access.enabled.nil? &&
+            @gapi.iam_configuration.uniform_bucket_level_access.enabled
         end
 
         ##
-        # If enabled, access checks only use bucket-level IAM policies or above,
-        # all object ACLs within the bucket are no longer evaluated, and
-        # access-control is configured solely through the bucket's IAM policy.
-        # Any requests which attempt to use the ACL API to view or manipulate
-        # ACLs will fail with 400 errors.
+        # Sets whether uniform bucket-level access is enabled for this bucket. When this is enabled, access to the
+        # bucket will be configured through IAM, and legacy ACL policies will not work. When it is first enabled,
+        # {#uniform_bucket_level_access_locked_at} will be set by the API automatically. The uniform bucket-level access
+        # can then be disabled until the time specified, after which it will become immutable and calls to change it
+        # will fail. If uniform bucket-level access is enabled, calls to access legacy ACL information will fail.
         #
-        # Before enabling Bucket Policy Only please review [feature
-        # documentation](https://cloud.google.com/storage/docs/bucket-policy-only),
-        # as well as [Should you use Bucket Policy
-        # Only?](https://cloud.google.com/storage/docs/bucket-policy-only#should-you-use).
+        # Before enabling uniform bucket-level access please review [uniform bucket-level
+        # access](https://cloud.google.com/storage/docs/uniform-bucket-level-access).
         #
-        # @param [Boolean] new_policy_only When set to `true`, Bucket Policy
-        #   Only is enabled in the bucket's IAM configuration.
+        # @param [Boolean] new_uniform_bucket_level_access When set to `true`, uniform bucket-level access is enabled in
+        #   the bucket's IAM configuration.
         #
         # @example
         #   require "google/cloud/storage"
@@ -834,35 +823,29 @@ module Google
         #
         #   bucket = storage.bucket "my-bucket"
         #
-        #   bucket.policy_only = true
-        #   bucket.policy_only? # true
+        #   bucket.uniform_bucket_level_access = true
+        #   bucket.uniform_bucket_level_access? # true
         #
         #   bucket.default_acl.public! # Google::Cloud::InvalidArgumentError
         #
-        #   # The deadline for disabling Bucket Policy Only.
-        #   puts bucket.policy_only_locked_at
+        #   # The deadline for disabling uniform bucket-level access.
+        #   puts bucket.uniform_bucket_level_access_locked_at
         #
-        def policy_only= new_policy_only
+        def uniform_bucket_level_access= new_uniform_bucket_level_access
           @gapi.iam_configuration ||= API::Bucket::IamConfiguration.new
-          @gapi.iam_configuration.bucket_policy_only ||= \
-            API::Bucket::IamConfiguration::BucketPolicyOnly.new
           @gapi.iam_configuration.uniform_bucket_level_access ||= \
             API::Bucket::IamConfiguration::UniformBucketLevelAccess.new
-          @gapi.iam_configuration.bucket_policy_only.enabled = new_policy_only
-          @gapi.iam_configuration.uniform_bucket_level_access.enabled = \
-            new_policy_only
+          @gapi.iam_configuration.uniform_bucket_level_access.enabled = new_uniform_bucket_level_access
           patch_gapi! :iam_configuration
         end
 
         ##
-        # The deadline time for disabling Bucket Policy Only by calling
-        # {Bucket#policy_only=}. After the locked time the Bucket Policy Only
-        # setting cannot be changed from true to false. Corresponds to the
-        # property `locked_time`.
+        # The deadline time for disabling uniform bucket-level access by calling {Bucket#uniform_bucket_level_access=}.
+        # After the locked time the uniform bucket-level access setting cannot be changed from true to false.
+        # Corresponds to the property `locked_time`.
         #
-        # @return [DateTime, nil] The deadline time for changing
-        #   {Bucket#policy_only=} from true to false, or `nil` if
-        #   {Bucket#policy_only?} is false.
+        # @return [DateTime, nil] The deadline time for changing {Bucket#uniform_bucket_level_access=} from true to
+        #   false, or `nil` if {Bucket#uniform_bucket_level_access?} is false.
         #
         # @example
         #   require "google/cloud/storage"
@@ -871,15 +854,35 @@ module Google
         #
         #   bucket = storage.bucket "my-bucket"
         #
-        #   bucket.policy_only = true
+        #   bucket.uniform_bucket_level_access = true
         #
-        #   # The deadline for disabling Bucket Policy Only.
-        #   puts bucket.policy_only_locked_at
+        #   # The deadline for disabling uniform bucket-level access.
+        #   puts bucket.uniform_bucket_level_access_locked_at
+        #
+        def uniform_bucket_level_access_locked_at
+          return nil unless @gapi.iam_configuration && @gapi.iam_configuration.uniform_bucket_level_access
+          @gapi.iam_configuration.uniform_bucket_level_access.locked_time
+        end
+
+        ##
+        # @deprecated Use {#uniform_bucket_level_access?} instead.
+        #
+        def policy_only?
+          uniform_bucket_level_access?
+        end
+
+        ##
+        # @deprecated Use {#uniform_bucket_level_access=} instead.
+        #
+        def policy_only= new_policy_only
+          self.uniform_bucket_level_access = new_policy_only
+        end
+
+        ##
+        # @deprecated Use {#uniform_bucket_level_access_locked_at} instead.
         #
         def policy_only_locked_at
-          return nil unless @gapi.iam_configuration &&
-                            @gapi.iam_configuration.bucket_policy_only
-          @gapi.iam_configuration.bucket_policy_only.locked_time
+          uniform_bucket_level_access_locked_at
         end
 
         ##

data/lib/google/cloud/storage/project.rb

@@ -233,11 +233,9 @@ module Google
         # for the bucket, including a block that defines CORS rule. See
         # {Bucket::Cors} for details.
         #
-        # Before enabling Bucket Policy Only (see {Bucket#policy_only=}) please
-        # review [feature
-        # documentation](https://cloud.google.com/storage/docs/bucket-policy-only),
-        # as well as [Should you use Bucket Policy
-        # Only?](https://cloud.google.com/storage/docs/bucket-policy-only#should-you-use).
+        # Before enabling uniform bucket-level access (see
+        # {Bucket#uniform_bucket_level_access=}) please review [uniform bucket-level
+        # access](https://cloud.google.com/storage/docs/uniform-bucket-level-access).
         #
         # @see https://cloud.google.com/storage/docs/cross-origin Cross-Origin
         #   Resource Sharing (CORS)

data/lib/google/cloud/storage/version.rb

@@ -16,7 +16,7 @@
 module Google
   module Cloud
     module Storage
-      VERSION = "1.22.0".freeze
+      VERSION = "1.23.0".freeze
     end
   end
 end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: google-cloud-storage
 version: !ruby/object:Gem::Version
-  version: 1.22.0
+  version: 1.23.0
 platform: ruby
 authors:
 - Mike Moore
@@ -9,7 +9,7 @@ authors:
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2019-10-28 00:00:00.000000000 Z
+date: 2019-11-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: google-cloud-core