class Google::Cloud::Storage::Service

def insert_default_acl bucket_name, entity, role, user_project: nil, options: {}
  if options[:retries].nil?
    options = options.merge({ retries: 0 })
  end
  param = { entity: entity, role: role }.delete_if { |_k, v| v.nil? }
  new_acl = Google::Apis::StorageV1::ObjectAccessControl.new(**param)
  execute do
    service.insert_default_object_access_control \
      bucket_name, new_acl, user_project: user_project(user_project),
      options: options
  end
end