(PHP Extension) Set Container ACL

Azure Storage Blob Service REST API: Sample code to set the permissions of a container.

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// Azure Blob Service Example: Set Container ACL
// See also: https://msdn.microsoft.com/en-us/library/azure/dd179391.aspx

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$rest = new CkRest();

// Connect to the Azure Storage Blob Service
$bTls = true;
$port = 443;
$bAutoReconnect = true;
// In this example, the storage account name is "chilkat".
$success = $rest->Connect('chilkat.blob.core.windows.net',$port,$bTls,$bAutoReconnect);
if ($success != true) {
    print $rest->lastErrorText() . "\n";
    exit;
}

// Provide Azure Cloud credentials for the REST call.
$azAuth = new CkAuthAzureStorage();
$azAuth->put_AccessKey('AZURE_ACCESS_KEY');
// The account name used here should match the 1st part of the domain passed in the call to Connect (above).
$azAuth->put_Account('chilkat');
$azAuth->put_Scheme('SharedKey');
$azAuth->put_Service('Blob');
// This causes the "x-ms-version: 2020-08-04" header to be automatically added.
$azAuth->put_XMsVersion('2020-08-04');
$success = $rest->SetAuthAzureStorage($azAuth);

// Note: The application does not need to explicitly set the following
// headers: x-ms-date, Authorization.  These headers
// are automatically set by Chilkat.

// The XML body of the request will look like this:

// <?xml version="1.0" encoding="utf-8"?>
// <SignedIdentifiers>
//   <SignedIdentifier> 
//     <Id>unique-character-value-of-up-to-64-chars</Id>
//     <AccessPolicy>
//       <Start>start-time</Start>
//       <Expiry>expiry-time</Expiry>
//       <Permission>abbreviated-permission-list</Permission>
//     </AccessPolicy>
//   </SignedIdentifier>
// </SignedIdentifiers>

// Generate a random 32-character string.
$prng = new CkPrng();
$randomId = $prng->randomString(32,true,true,true);

// Get the current system date/time in ISO 8061 format
$dt = new CkDateTime();
$dt->SetFromCurrentSystemTime();
$bLocal = false;
// Get the current date/time in ISO 8061 UTC format.
$curDtStr = $dt->getAsTimestamp($bLocal);
// The expire time will be 365 days in the future.
$success = $dt->AddDays(365);
$expireDtStr = $dt->getAsTimestamp($bLocal);

// Build the request:
$xml = new CkXml();
$xml->put_Tag('SignedIdentifiers');
// xSignedId is a CkXml
$xSignedId = $xml->NewChild('SignedIdentifier','');
$xSignedId->NewChild2('Id',$randomId);
// xAccessPolicy is a CkXml
$xAccessPolicy = $xSignedId->NewChild('AccessPolicy','');
$xAccessPolicy->NewChild2('Start',$curDtStr);
$xAccessPolicy->NewChild2('Expiry',$expireDtStr);
$xAccessPolicy->NewChild2('Permission','rwd');

// Show the XML..
print $xml->getXml() . "\n";

// The expected response is a 200 response status code with no response body.
$responseStr = $rest->fullRequestString('PUT','/mycontainer?restype=container&comp=acl',$xml->getXml());
if ($rest->get_LastMethodSuccess() != true) {
    print $rest->lastErrorText() . "\n";
    exit;
}

// When successful, the Azure Storage service will respond with a 200 response status code,
// with no response body.

if ($rest->get_ResponseStatusCode() != 200) {
    // Examine the request/response to see what happened.
    print 'response status code = ' . $rest->get_ResponseStatusCode() . "\n";
    print 'response status text = ' . $rest->responseStatusText() . "\n";
    print 'response header: ' . $rest->responseHeader() . "\n";
    print 'response body (if any): ' . $responseStr . "\n";
    print '---' . "\n";
    print 'LastRequestStartLine: ' . $rest->lastRequestStartLine() . "\n";
    print 'LastRequestHeader: ' . $rest->lastRequestHeader() . "\n";
    exit;
}

print 'Success.' . "\n";

?>