How to let service account on Google Cloud Platform to have access to the Firebase Storage?

Question

I'm using the Vision Api Product Search in the Google CLoud Vision, so i want to access the images in the firebase Storage but now when i'm making request this error occurs "message": "Error opening file: gs://swaepone.appspot.com/bag.jpeg." so how to have read access to the firebase sotrage ?

Answer 1

Assuming this is the service account calling ...check the bucket permissions on Cloud Storage.

PROJECT_ID.appspot.com is the the relevant GCS bucket, behind "Firebase Storage".

The security rules for Firebase Storage might only consider Firebase Auth users;
you'd have to add this service account with (at least) role "Storage Object Viewer".

Answer 2

When i made the bucket public to all users and add the role 'Storage Object Viewer' the error gone! but my question is, is it a bad way to make the bucket public and the users can now modify or delete any data ? or only can view them