Start implementing setIamPolicy, getIamPolicy, and testIamPermissions

[dhermes]

I thought we already had an issue filed, must have mismembered.

See googleapis/google-cloud-node#758 and googleapis/google-cloud-node#767

@tseaver Care to take a stab at it?

[tseaver]

Narrative docs

Policy resource definition

Topic methods:

• https://cloud.google.com/pubsub/reference/rest/v1/projects.topics/getIamPolicy
• https://cloud.google.com/pubsub/reference/rest/v1/projects.topics/setIamPolicy
• https://cloud.google.com/pubsub/reference/rest/v1/projects.topics/testIamPermissions

Subscription methods:

• https://cloud.google.com/pubsub/reference/rest/v1/projects.subscriptions/getIamPolicy
• https://cloud.google.com/pubsub/reference/rest/v1/projects.subscriptions/setIamPolicy
• https://cloud.google.com/pubsub/reference/rest/v1/projects.subscriptions/testIamPermissions

[dhermes]

@tseaver Are you planning on doing this or just added docs as a resource?

[tseaver]

I'm still planning on it.

[dhermes]

Great to hear

[dhermes]

@tseaver Still planning on it?

[tseaver]

Dropped off my radar, I'm afraid.

[dhermes]

Coming back on the radar or no?

[tseaver]

Depends on priorities, really. @jgeewax, how important would you rate this feature?

[tseaver]

I will tackle this issue today: it is a prerequisite for using topics as logging sink destinations (or at least for being able to script the topic setup for sink system tests).

[dhermes]

Good to hear. ISTM this probably belongs in oauth2client. WDYT?

[tseaver]

I'm confused: those operations are about changing security settings on the API subject-domain resources (projects / topics / subscriptions.) I don't see anything related to oauth2client.

[dhermes]

I am unfamiliar with how they work so take my previous comment with a grain of salt

[tseaver]

These methods are basically attacking the same problem as BucketACL/ObjectACL in Cloud Storage, or Dataset.access_grants in BigQuery.