Storage.objects.test Iam Permissions

Tests a set of permissions on the given object to see which, if any, are held by the caller.

GET/b/{bucket}/o/{object}/iam/testPermissions

Use it in a workflow

Add a step and choose the Google Cloud Storage connector.
Pick the Storage.objects.test Iam Permissions action (under objects).
Fill in the fields below, then reference the result from later steps as {{storageObjectsTestIamPermissions.response.data}}.

Request

Path parameters

bucketstringrequired

Name of the bucket in which the object resides.

objectstringrequired

Name of the object. For information about how to URL encode object names to be path safe, see Encoding URI Path Parts.

Query parameters

altstring

Data format for the response.

One ofjson

fieldsstring

Selector specifying which fields to include in a partial response.

keystring

API key. Your API key identifies your project and provides you with API access, quota, and reports. Required unless you provide an OAuth 2.0 token.

oauth_tokenstring

OAuth 2.0 token for the current user.

prettyPrintboolean

Returns response with indentations and line breaks.

quotaUserstring

An opaque string that represents a user for quota purposes. Must not exceed 40 characters.

uploadTypestring

Upload protocol for media (e.g. "media", "multipart", "resumable").

userIpstring

Deprecated. Please use quotaUser instead.

permissionsarray<string>required

Permissions to test.

generationstring

If present, selects a specific revision of this object (as opposed to the latest version, the default).

userProjectstring

The project to be billed for this request. Required for Requester Pays buckets.

Response

Returns 200 with an object. Read it in later steps with {{storageObjectsTestIamPermissions.response.data.<field>}}.

kindstring

The kind of item this is.

Default "storage#testIamPermissionsResponse"

permissionsarray<string>

The permissions held by the caller. Permissions are always of the format storage.resource.capability, where resource is one of buckets or objects. The supported permissions are as follows: - storage.buckets.delete — Delete bucket. - storage.buckets.get — Read bucket metadata. - storage.buckets.getIamPolicy — Read bucket IAM policy. - storage.buckets.create — Create bucket. - storage.buckets.list — List buckets. - storage.buckets.setIamPolicy — Update bucket IAM policy. - storage.buckets.update — Update bucket metadata. - storage.objects.delete — Delete object. - storage.objects.get — Read object data and metadata. - storage.objects.getIamPolicy — Read object IAM policy. - storage.objects.create — Create object. - storage.objects.list — List objects. - storage.objects.setIamPolicy — Update object IAM policy. - storage.objects.update — Update object metadata.

json

{
  "kind": "storage#testIamPermissionsResponse",
  "permissions": [
    "string"
  ]
}

Need more? See the Google Cloud Storage guide for connection setup and behaviour shared by every action.

Was this page helpful?