getting-started/bookshelf: add AllUsers warning
@@ -215,6 +215,8 @@ func uploadFileFromForm(r *http.Request) (url string, err error) {
ctx := context.Background()
w := bookshelf.StorageBucket.Object(name).NewWriter(ctx)
+
+ // Warning: storage.AllUsers gives public read access to anyone.
w.ACL = []storage.ACLRule{{Entity: storage.AllUsers, Role: storage.RoleReader}}
w.ContentType = fh.Header.Get("Content-Type")
