AccountSasPermissions Class

ResourceTypes class to be used with generate_account_sas function and for the AccessPolicies used with set_*_acl. There are two types of SAS which may be used to grant resource access. One is to grant access to a specific resource (resource-specific). Another is to grant access to the entire service for a specific account and allow certain operations based on perms found here.

Inheritance
builtins.object
AccountSasPermissions

Constructor

AccountSasPermissions(read=False, write=False, delete=False, list=False, add=False, create=False, update=False, process=False, delete_previous_version=False, **kwargs)

Parameters

read
bool
default value: False

Valid for all signed resources types (Service, Container, and Object). Permits read permissions to the specified resource type.

write
bool
default value: False

Valid for all signed resources types (Service, Container, and Object). Permits write permissions to the specified resource type.

delete
bool
default value: False

Valid for Container and Object resource types, except for queue messages.

delete_previous_version
bool
default value: False

Delete the previous blob version for the versioning enabled storage account.

list
bool
default value: False

Valid for Service and Container resource types only.

add
bool
default value: False

Valid for the following Object resource types only: queue messages, and append blobs.

create
bool
default value: False

Valid for the following Object resource types only: blobs and files. Users can create new blobs or files, but may not overwrite existing blobs or files.

update
bool
default value: False

Valid for the following Object resource types only: queue messages.

process
bool
default value: False

Valid for the following Object resource type only: queue messages.

Keyword-Only Parameters

tag
bool

To enable set or get tags on the blobs in the container.

filter_by_tags
bool

To enable get blobs by tags, this should be used together with list permission.

set_immutability_policy
bool

To enable operations related to set/delete immutability policy. To get immutability policy, you just need read permission.

permanent_delete
bool

To enable permanent delete on the blob is permitted. Valid for Object resource type of Blob only.

Methods

from_string

Create AccountSasPermissions from a string.

To specify read, write, delete, etc. permissions you need only to include the first letter of the word in the string. E.g. for read and write permissions you would provide a string "rw".

from_string

Create AccountSasPermissions from a string.

To specify read, write, delete, etc. permissions you need only to include the first letter of the word in the string. E.g. for read and write permissions you would provide a string "rw".

from_string(permission)

Parameters

permission
str
Required

Specify permissions in the string with the first letter of the word.

Returns

An AccountSasPermissions object

Return type