Allow prodaccess based gsutil to also write into a bucket

third_party/gsutil/plugins/sso_auth.py

 # Copyright 2013 The Chromium Authors. All rights reserved.
 # Use of this source code is governed by a BSD-style license that can be
 # found in the LICENSE file.
 
 """AuthHandler plugin for gsutil's boto to support LOAS based auth."""
 
 import getpass
 import json
 import os
 import re
 import subprocess
 import time
 import urllib2
 
 from boto.auth_handler import AuthHandler
 from boto.auth_handler import NotReadyToAuthenticate
 
 CMD = ['stubby', '--proto2', 'call', 'blade:sso', 'CorpLogin.Exchange']
 
 STUBBY_CMD = """target: {
   scope: GAIA_USER
   name: "%s"
 }
 target_credential: {
   type: OAUTH2_TOKEN
   oauth2_attributes: {
-    scope: 'https://www.googleapis.com/auth/devstorage.read_only'
+    scope: 'https://www.googleapis.com/auth/devstorage.read_write'
   }
 }"""
 
 COOKIE_LOCATION = os.path.expanduser('~/.devstore_token')
 
 TOKEN_EXPIRY = 300
 
 
 class SSOAuthError(Exception):
   pass
@@ skipping 58 matching lines @@
   def add_auth(self, http_request):
     http_request.headers['Authorization'] = 'OAuth %s' % self.GetAccessToken()
 
   @staticmethod
   def has_prodaccess():
     for path in os.environ['PATH'].split(os.pathsep):
       exe_file = os.path.join(path, 'prodaccess')
       if os.path.exists(exe_file) and os.access(exe_file, os.X_OK):
         return True
     return False