title: GCloud Function gives 'Access denied' to a Storage Bucket object
body: <p>A deployed Google Cloud Function is supposed to read data from a Storage Bucket. Both are in the same project (Function and the Bucket).
  The function has a Bucket object 'create trigger', which works fine. But when it comes to reading the object's content an Access Denied message comes up (as found in logs).</p>
  
  <p>Which seems like a permission problem. Although the Function is using a default Service Account created by GCP with an Editor role, which as I found in docs, is supposed to have no problem with permissions for reading the Storage Bucket.</p>
  
  <p>Which seems like I'm missing something really important.</p>
  
  <p>There is one more thing to notice: there was an accident a few days ago, where some project parts were removed by an accident, after that the whole project was renewed to its a previous state. And this was the time when strange things, like this, started to happen. Before this accident, we had no problems with functions access permissions...</p>
  
  <p>Function run log follows:</p>
  
  <pre><code>//Real values ommitted
  Function execution started update-from-bucket 
  update-from-bucket triggered by: Event XXX, Event Type: google.storage.object.finalize, Bucket: BUCKET_NAME, File: FILE_NAME update-from-bucket 
  update-from-bucket submitted: Job PROJECT_NAME finished. 
  update-from-bucket [ { reason: 'accessDenied', update-from-bucket 
  update-from-bucket 'Access Denied: File gs://BUCKET_NAME/FILE_NAME: Access Denied' } ]
  </code></pre>