add ACL-setting code to upload_rendered_skps.py

slave/skia_slave_scripts/build_step.py

Index: slave/skia_slave_scripts/build_step.py
diff --git a/slave/skia_slave_scripts/build_step.py b/slave/skia_slave_scripts/build_step.py
index 9a821de5b0b1112d13de5dbe897f959338377eb5..7c702a1e45efe6582d3e7e172804a1f08e05d58a 100644
--- a/slave/skia_slave_scripts/build_step.py
+++ b/slave/skia_slave_scripts/build_step.py
@@ -33,6 +33,7 @@ import builder_name_schema
 import slave_hosts_cfg
 import slaves_cfg
 
+from py.utils import gs_utils
 from py.utils import misc
 
 
@@ -51,8 +52,14 @@ INT_FALSE = 0
 build_step_stdout_has_written = multiprocessing.Value('i', INT_FALSE)
 
 
-# The canned acl to use while copying playback files to Google Storage.
-PLAYBACK_CANNED_ACL = 'private'
+# The canned acl to use while copying playback (SKP) files to Google Storage.
+# They should not be world-readable!
+PLAYBACK_CANNED_ACL = gs_utils.PREDEFINED_ACL_PRIVATE
+PLAYBACK_FINEGRAINED_ACL_LIST = [
+    (gs_utils.ID_TYPE_GROUP_BY_DOMAIN, 'google.com', gs_utils.PERMISSION_READ),
+]
+BOTO_CREDENTIALS_FILE = os.path.join(
+    BUILDBOT_PATH, 'third_party', 'chromium_buildbot', 'site_config', '.boto')
 
 
 class BuildStepWarning(Exception):