Thanks for the explanation. понедельник, 6 сентября 2021 г. в 11:18:17 UTC+4, Jofre Riba Sánchez:
> This is working as intended. This was previously reported on this same > group and other similar ones [1]. This has also been reported on our issue > tracker in [2], [3] (and a bunch more times). > > In summary, somebody granted a permission to get the name of the project > (resourcamanager.projects.get) without giving you any additional > permission, which has the effect of being able to see the project, but not > take any action on it. > > There is a feature request to hide un-wanted projects on the console [4], > and another one to display a warning when somebody shares a project with > groups containing +100 people [5]. > > This usually happens when somebody shares a project with a group (I'm > guessing by accident), and everybody on that group can see the project. > > As a matter of fact, the second project on that list > (you-can-see-this-project) is my own, where I granted > resourcemanager.projects.get to this very same group ( > [email protected]), to demonstrate those are the only steps > needed for projects to appear on the list, to show there's nothing > nefarious going on, and also in an attempt to grab a bunch of screenshots > of the process to write a more detailed explanation for some of our public > forums (that is still ongoing work). I tried to make it obvious on the > project name that this was the intended behaviour of that project, but > there's so much that can be said with 30 characters. > > There is right now no option to remove yourself from projects where you do > not have IAM access (the permission is at the project level, not at the > account level, so you need permissions on the project to modify IAM > bindings), but this should have no impact on your experience. Note that the > feature request is only for the console. The OP is mentioning the SDK > (gcloud projects list), and this would not be modified by hiding the list > on the console. The SDK is only calling resporcemanaget.projects.list [6], > and that would not be modified by the request in [4]. > > [1] https://groups.google.com/g/google-cloud-dev/c/TEIZvOecBFs > [2] https://issuetracker.google.com/191214686 > [3] https://issuetracker.google.com/195146186 > [4] https://issuetracker.google.com/194427619 > [5] https://issuetracker.google.com/195426458 > [6] > https://cloud.google.com/resource-manager/reference/rest/v1/projects/list > On Monday, September 6, 2021 at 7:22:18 AM UTC+2 [email protected] wrote: > >> +1 >> >> Two unknown projects in the list. >> >> >> >> воскресенье, 5 сентября 2021 г. в 14:31:16 UTC+4, Tapir: >> >>> Totally same for me. >>> >>> On Saturday, September 4, 2021 at 1:11:06 PM UTC-4 [email protected] >>> wrote: >>> >>>> Hi there. >>>> >>>> I have noticed recently that I have in my GCP console 2 projects that I >>>> did not create and I guess came with the account. I have been using GCP >>>> for >>>> the last 4 years, was at the time of installing the gcloud-sdk, that I >>>> noticed those 2 projects. >>>> >>>> Since I'm not the owner, how do I removed them from my GCP Console? >>>> >>>> One of the projects name is "you-can-see-this-project" and the other >>>> "brave-watch-xxxxx". >>>> >>>> When I try to delete it with the gcloud command I get >>>> >>>> `*ERROR: (gcloud.projects.delete) User [[email protected]] does not >>>> have permission to access projects instance [you-can-see-this-project] (or >>>> it may not exist): The caller does not have permission*` >>>> >>>> If I try in the GCP Console I do not have valid permissions to remove >>>> them. >>>> >>>> I really want to get rid of those projects. >>>> >>>> >>>> Best Regards >>>> >>>> Edgard >>>> >>> -- You received this message because you are subscribed to the Google Groups "Google App Engine" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/google-appengine/bd5da8e8-ee2c-4869-aa68-5919acfb60d3n%40googlegroups.com.
