title: How do you set object access from shared publicly to only being able to access the file momentarily?
body: <p>I've been playing around in google cloud storage. I've been able to upload files without any signature mismatch errors by doing the following.</p>
  
  <ol>
  <li>set cors using gsutils from a json file.</li>
  <li>get signed urls with an additional <code>'x-goog-acl': 'project-private'</code> key value (or at least I think I have)</li>
  <li>and PUT my object to storage with an additional body object <code>'x-goog-acl': 'project-private'</code></li>
  </ol>
  
  <p>It doesn't seem to do anything. When I look in the console my image file is still shared publicly.</p>
  
  <p><a href="https://i.stack.imgur.com/vxZxv.png" rel="nofollow noreferrer"><img src="https://i.stack.imgur.com/vxZxv.png" alt="enter image description here"></a></p>
  
  <p>What I'm trying to do is that the user that is authenticated in my web app is the only person that can access that file. How can I do that I thought it was ACL permissions but I'm not sure anymore.</p>