[download_from_google_storage] Don't list ALL objects to check for ACLs

download_from_google_storage.py

Index: download_from_google_storage.py
diff --git a/download_from_google_storage.py b/download_from_google_storage.py
index 0f53ea46e93be9297fb60fb3f99d39b7177f64d8..96b66c72cd775993d24c54647a78b07de49f5f5c 100755
--- a/download_from_google_storage.py
+++ b/download_from_google_storage.py
@@ -106,7 +106,7 @@ class Gsutil(object):
 
 
 def check_bucket_permissions(base_url, gsutil):

[hinoka, 2015/02/12 18:03:54]

I'd actually be okay with removing this entirely.  The intention for this was to
early exit if it detects the lack of permissions.

In reality, bucket and object acls are separate, so having bucket permission
doesn't necessarily mean we have object permissions, and vice verca.  Its good
enough to see if "gsutil cp x y" fails later on, and produce a good message on
403.

-  code, _, ls_err = gsutil.check_call('ls', base_url)
+  code, _, ls_err = gsutil.check_call('ls', base_url + '/..')

[Michael Moss, 2015/02/12 16:39:21]

Based on your description of "only ls the bucket itself, and not its contents",
it sounds like 'ls -b' might be the proper solution.

   if code != 0:
     print >> sys.stderr, ls_err
   if code == 403: