Roll version of gsutil to 4.15.

third_party/gsutil/gslib/addlhelp/acls.py

 # -*- coding: utf-8 -*-
 # Copyright 2012 Google Inc. All Rights Reserved.
 #
 # Licensed under the Apache License, Version 2.0 (the "License");
 # you may not use this file except in compliance with the License.
 # You may obtain a copy of the License at
 #
 #     http://www.apache.org/licenses/LICENSE-2.0
 #
 # Unless required by applicable law or agreed to in writing, software
@@ skipping 16 matching lines @@
   -a option), objects will be created with a default object ACL set on the
   bucket (see "gsutil help defacl"). You can replace the ACL on an object
   or bucket using the "gsutil acl set" command, or
   modify the existing ACL using the "gsutil acl ch" command (see "gsutil help
   acl").
 
 
 <B>BUCKET VS OBJECT ACLS</B>
   In Google Cloud Storage, the bucket ACL works as follows:
 
-  - Users granted READ access are allowed to list the bucket contents.
+  - Users granted READ access are allowed to list the bucket contents and read
+    bucket metadata other than its ACL.
 
-  - Users granted WRITE access are allowed READ access and also are
-    allowed to write and delete objects in that bucket -- including
-    overwriting previously written objects.
+  - Users granted WRITE access are allowed READ access and also are allowed to
+    write and delete objects in that bucket, including overwriting previously
+    written objects.
 
-  - Users granted OWNER access are allowed WRITE access and also
-    are allowed to read and write the bucket's ACL.
+  - Users granted OWNER access are allowed WRITE access and also are allowed to
+    read and write the bucket's ACL.
 
   The object ACL works as follows:
 
   - Users granted READ access are allowed to read the object's data and
     metadata.
 
-  - Users granted OWNER access are allowed READ access and also
-    are allowed to read and write the object's ACL.
+  - Users granted OWNER access are allowed READ access and also are allowed to
+    read and write the object's ACL.
 
   A couple of points are worth noting, that sometimes surprise users:
 
   1. There is no WRITE access for objects; attempting to set an ACL with WRITE
      permission for an object will result in an error.
 
   2. The bucket ACL plays no role in determining who can read objects; only the
      object ACL matters for that purpose. This is different from how things
      work in Linux file systems, where both the file and directory permission
      control file read access. It also means, for example, that someone with
-     OWNER over the bucket may not have read access to objects in
-     the bucket.  This is by design, and supports useful cases. For example,
-     you might want to set up bucket ownership so that a small group of
-     administrators have OWNER on the bucket (with the ability to
-     delete data to control storage costs), but not grant those users read
-     access to the object data (which might be sensitive data that should
-     only be accessed by a different specific group of users).
+     OWNER over the bucket may not have read access to objects in the bucket.
+     This is by design, and supports useful cases. For example, you might want
+     to set up bucket ownership so that a small group of administrators have
+     OWNER on the bucket (with the ability to delete data to control storage
+     costs), but not grant those users read access to the object data (which
+     might be sensitive data that should only be accessed by a different
+     specific group of users).
 
 
 <B>CANNED ACLS</B>
   The simplest way to set an ACL on a bucket or object is using a "canned
   ACL". The available canned ACLs are:
 
   project-private
     Gives permission to the project team based on their roles. Anyone who is
     part of the team has READ permission, and project owners and project editors
     have OWNER permission. This is the default ACL for newly created
@@ skipping 132 matching lines @@
   help_spec = HelpProvider.HelpSpec(
       help_name='acls',
       help_name_aliases=[
           'ACL', 'access control', 'access control list', 'authorization',
           'canned', 'canned acl'],
       help_type='additional_help',
       help_one_line_summary='Working With Access Control Lists',
       help_text=_DETAILED_HELP_TEXT,
       subcommand_help_text={},
   )