AccountSasPermissions Class

ResourceTypes class to be used with generate_account_sas function and for the AccessPolicies used with set_*_acl. There are two types of SAS which may be used to grant resource access. One is to grant access to a specific resource (resource-specific). Another is to grant access to the entire service for a specific account and allow certain operations based on perms found here.

Inheritance

builtins.object

AccountSasPermissions

Constructor

AccountSasPermissions(read=False, write=False, delete=False, list=False, add=False, create=False, update=False, process=False, delete_previous_version=False, **kwargs)

Parameters

Name	Description
read	bool Valid for all signed resources types (Service, Container, and Object). Permits read permissions to the specified resource type. default value: False
write	bool Valid for all signed resources types (Service, Container, and Object). Permits write permissions to the specified resource type. default value: False
delete	bool Valid for Container and Object resource types, except for queue messages. default value: False
delete_previous_version	bool Delete the previous blob version for the versioning enabled storage account. default value: False
list	bool Valid for Service and Container resource types only. default value: False
add	bool Valid for the following Object resource types only: queue messages, and append blobs. default value: False
create	bool Valid for the following Object resource types only: blobs and files. Users can create new blobs or files, but may not overwrite existing blobs or files. default value: False
update	bool Valid for the following Object resource types only: queue messages. default value: False
process	bool Valid for the following Object resource type only: queue messages. default value: False

Keyword-Only Parameters

Name	Description
tag	bool To enable set or get tags on the blobs in the container.
filter_by_tags	bool To enable get blobs by tags, this should be used together with list permission.
set_immutability_policy	bool To enable operations related to set/delete immutability policy. To get immutability policy, you just need read permission.
permanent_delete	bool To enable permanent delete on the blob is permitted. Valid for Object resource type of Blob only.

Methods

from_string

Create AccountSasPermissions from a string. To specify read, write, delete, etc. permissions you need only to include the first letter of the word in the string. E.g. for read and write permissions you would provide a string "rw".

from_string

Create AccountSasPermissions from a string.

To specify read, write, delete, etc. permissions you need only to include the first letter of the word in the string. E.g. for read and write permissions you would provide a string "rw".

from_string(permission)

Parameters

Name	Description
permission Required	str Specify permissions in the string with the first letter of the word.

Returns

Type	Description
AccountSasPermissions	An AccountSasPermissions object