Need Help?

Search our documentation and community forum

Terra is a cloud-native platform for biomedical researchers to access data, run analysis tools, and collaborate.
Terra powers important scientific projects like FireCloud, AnVIL, and BioData Catalyst. Learn more.

gsutil cp: AccessDeniedException: 403 and unable to edit Bucket permissisons

Comments

5 comments

  • Avatar
    Samantha (she/her)

    Hi Terrance Shea,

     

    Thanks for writing in. Are you able to navigate to the bucket/file and view it in the Google Cloud Storage Browser? 

    If you are able, can you share the workspace where you are seeing this issue with GROUP_FireCloud-Support@firecloud.org by clicking the Share button in your workspace, and also add my email (svelasqu@broadinstitute.org) to the broad-bacterial authorization domain so I can access the workspace?

     

    Best,
    Samantha

    0
    Comment actions Permalink
  • Avatar
    Terrance Shea

    Hi-

    Thank you for the quick response.  I have shared the Workspace and added you as a user to the broad-bacterial group.  And yes I am able to navigate the Bucket and view the files in the Bucket, and even able to download using the button on far right of screen shot below: 

     

    Please let me know if there is any other info I can provide to assist.

     

    Thank you.

    Terrance

    0
    Comment actions Permalink
  • Avatar
    Samantha (she/her)

    Hi Terrance Shea,

     

    Can you let us know the workspace name or share a link to the workspace?

    Also, just to confirm, is the error you are getting when running the gsutil cp command: AccessDeniedException: 403 tshea@broadinstitute.org does not have storage.buckets.getIamPolicy access to the Google Cloud Storage bucket.? Can you share the full command you are running when you receive this error? It seems to be in response to a different command. You shouldn't have access to change any permissions on your workspace's underlying GCS bucket so that error message is expected, but you should already have access to download any of it's contents using gsutil cp.

     

    Best,

    Samantha

    0
    Comment actions Permalink
  • Avatar
    Terrance Shea

    Hi Samantha-

     

    Thank you for your help.  I am not sure exactly which change I did to get this to now work (as I have been doing some trial and error with setting to different accounts (gcloud config set account ) and changing projects ( gcloud config set project) but I am now able to successfully run gsutil cp (and gsutil rsync).  For example this command now proceeds without error gsutil cp gs://fc-secure-57e2b775-b88c-47a8-ab24-842cc0547a81/8e19cc0a-cfc1-4f6c-9982-36bc597d58cb/workflowAssembly/ac894dea-797b-4cae-ae58-63eaafdfebb8/call-asm_metrics/shard-0/112231_D0.asm_metrics.txt .

     

    Thank you again for looking into this. I think this may now be marked as resolved.

     

     

    0
    Comment actions Permalink
  • Avatar
    Samantha (she/her)

    Hi Terrance Shea,

     

    Glad to hear you were able to resolve the issue. If you need assistance with anything else, please don't hesitate to reach out.

     

    Best,

    Samantha

    0
    Comment actions Permalink

Please sign in to leave a comment.

Powered by Zendesk