def _gcs_acls(readers):
  """Returns a list with objectAccessControls dicts.

  Args:
    readers: list of emails that should have read access.
  """
  return [{'entity': 'user-%s' % r, 'role': 'READER'} for r in readers]