{"action":"closed","issue":{"url":"https://api.github.com/repos/ncw/rclone/issues/1232","repository_url":"https://api.github.com/repos/ncw/rclone","labels_url":"https://api.github.com/repos/ncw/rclone/issues/1232/labels{/name}","comments_url":"https://api.github.com/repos/ncw/rclone/issues/1232/comments","events_url":"https://api.github.com/repos/ncw/rclone/issues/1232/events","html_url":"https://github.com/ncw/rclone/issues/1232","id":213589247,"node_id":"MDU6SXNzdWUyMTM1ODkyNDc=","number":1232,"title":"GCS permission issue","user":{"login":"lavalamp","id":647318,"node_id":"MDQ6VXNlcjY0NzMxOA==","avatar_url":"https://avatars0.githubusercontent.com/u/647318?v=4","gravatar_id":"","url":"https://api.github.com/users/lavalamp","html_url":"https://github.com/lavalamp","followers_url":"https://api.github.com/users/lavalamp/followers","following_url":"https://api.github.com/users/lavalamp/following{/other_user}","gists_url":"https://api.github.com/users/lavalamp/gists{/gist_id}","starred_url":"https://api.github.com/users/lavalamp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lavalamp/subscriptions","organizations_url":"https://api.github.com/users/lavalamp/orgs","repos_url":"https://api.github.com/users/lavalamp/repos","events_url":"https://api.github.com/users/lavalamp/events{/privacy}","received_events_url":"https://api.github.com/users/lavalamp/received_events","type":"User","site_admin":false},"labels":[{"id":306063008,"node_id":"MDU6TGFiZWwzMDYwNjMwMDg=","url":"https://api.github.com/repos/ncw/rclone/labels/Remote:%20Google%20Cloud%20Storage","name":"Remote: Google Cloud Storage","color":"fbca04","default":false},{"id":86399007,"node_id":"MDU6TGFiZWw4NjM5OTAwNw==","url":"https://api.github.com/repos/ncw/rclone/labels/enhancement","name":"enhancement","color":"84b6eb","default":true}],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2017-03-12T07:52:21Z","updated_at":"2018-06-11T05:07:15Z","closed_at":"2018-06-11T05:07:15Z","author_association":"NONE","body":"When using a service account with GCS, it'd be nice to give the service account only storage object creater & viewer. Unfortunately, one must currently also give it the *project* viewer role due to this function:\r\n\r\nhttps://github.com/ncw/rclone/blob/v1.35/googlecloudstorage/googlecloudstorage.go#L456\r\n\r\nThis assumes a bucket get failure is due to the bucket not existing, when it is actually due to lack of permission (even though one has permission to write to the bucket).\r\n\r\n(I might send a PR to fix but don't count on it :) )"}}
{"actor":{"display_login":"lavalamp"}}