CODEWITHSUNDEEP
google-cloud-platformgoogle-cloud-storagereadonlygoogle-cloud-consolemeteor-slingshot
yungbonesvillain
yungbonesvillain

Reputation: 681

Allow Public Read access on a GCS bucket?

I am trying to allow anonymous (or just from my applications domain) read access for files in my bucket.

When trying to read the files I get

```

<Error>
    <Code>AccessDenied</Code>
    <Message>Access denied.</Message>
    <Details>
        Anonymous users does not have storage.objects.get access to object.
    </Details>
</Error>

```

I also tried to add a domain with the object default permissions dialog in the google cloud console. that gives me the error "One of your permissions is invalid. Make sure that you enter an authorized id or email for the groups and users and a domain for the domains"

I have also looked into making the ACL for the bucket public-read. My only problem with this is that it removes my ownership over the bucket. I need to have that ownership since I want to allow uploading from a specific Google Access Id.

Upvotes: 50

Views: 38625

Answers (7)

Super Kai - Kazuya Ito
Super Kai - Kazuya Ito

Reputation: 1

Apr, 2022 Update:

You can allow all users to read files in your bucket on Cloud Storage.

First, in Bucket details, click on "PERMISSIONS" then "ADD":

enter image description here

Then, type "allUsers":

enter image description here

Then, select the role "Storage Legacy Object Reader" so that all users can read files:

enter image description here

Then, click on "SAVE":

enter image description here

Then, you should be asked as shown below so click on "ALLOW PUBLIC ACCESS":

enter image description here

Finally, you can allow all users to read files in your bucket:

enter image description here

Upvotes: 2

JohnBegood
JohnBegood

Reputation: 878

If you want to allow specific bucket to be accessible with the specific "folder/content" then you have to specify in the command: gsutil iam -r ch allUsers:legacyObjectReader gs://your-bucket/your-files/**

  • But this is for specific content inside a bucket that is not public!

Upvotes: 0

haxpanel
haxpanel

Reputation: 4678

If you upload files in firebase functions you'll need to call makePublic() on the reference object in order to make it accessible without passing token.

Upvotes: 3

Digimix
Digimix

Reputation: 323

  1. Open the Cloud Storage browser in the Google Cloud Platform Console.
  2. In the list of buckets, click on the name of the bucket that contains the object you want to make public, and navigate to the object if it's in a subdirectory.
  3. Click the drop-down menu associated with the object that you want to make public.
  4. The drop-down menu appears as three vertical dots to the far right of the object's row.
  5. Select Edit permissions from the drop-down menu.
  6. In the overlay that appears, click the + Add item button.

  7. Add a permission for allUsers.

    • Select User for the Entity.
    • Enter allUsers for the Name.
    • Select Reader for the Access.
    • Click Save.

  8. Once shared publicly, a link icon appears in the public access column. You can click on this icon to get the URL for the object.

Instruction on Making Data Public from Google Cloud Docs

Upvotes: 8

adam shamsudeen
adam shamsudeen

Reputation: 1872

You can also do it from the console.
https://console.cloud.google.com/storage/
Choose edit the bucket permissions:
Input "allUsers" in Add Members option and "Storage Object Viewer" as the role. Then go to "Select a role" and set "Storage" and "Storage Object Legacy" to "Storage Object View"

GCS bucket access

Upvotes: 51

Jacob
Jacob

Reputation: 7821

Using IAM roles, to make the files readable, and block listing:

gsutil iam ch allUsers:legacyObjectReader gs://bucket-name

To make the files readable, and allow listing:

gsutil iam ch allUsers:objectViewer gs://bucket-name

Upvotes: 12

Travis Hobrla
Travis Hobrla

Reputation: 5511

You can use gsutil to make new objects created in the bucket publicly readable without removing your ownership. To make new objects created in the bucket publicly readable:

gsutil defacl ch -u AllUsers:R gs://yourbucket

If you have existing objects in the bucket that you want to make publicly readable, you can run:

gsutil acl ch -u AllUsers:R gs://yourbucket/**

Upvotes: 46

Related Questions