/
opt
/
gsutil
/
gslib
/
utils
/
__pycache__
/
up file
home
a +(Wg�2 � @ s� d Z ddlmZ ddlmZ ddlmZ ddlmZ ddlZddlmZ ddl m Z G d d � d e �Z G d d � d e �ZG d d� de �Zdd� ZdS )z7Contains helper objects for changing and deleting ACLs.� )�absolute_import)�print_function)�division)�unicode_literalsN)�CommandException)�storage_v1_messagesc @ s e Zd ZdZdZdZdS )� ChangeType�User�Group�ProjectN)�__name__� __module__� __qualname__�USER�GROUP�PROJECT� r r �%/opt/gsutil/gslib/utils/acl_helper.pyr s r c @ s� e Zd ZdZddgZddgZddgZdgZd gZee e e e Z d Z d Z e e fZ d Z d ZdZdZdZdddddddd�Zdd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'S )(� AclChangez6Represents a logical change to an access control list.�AllAuthenticatedUsers�AllUsers�UserById� GroupById� UserByEmail� GroupByEmail� GroupByDomainr �allUsers�allAuthenticatedUsers)zproject-editors-zproject-owners-zproject-viewers-zgroup-zuser-zdomain-zproject-�READER�WRITER�OWNER)�R�WZFC�O�READ�WRITE� FULL_CONTROLc C s$ d| _ || _| �||� | �� dS )a< Creates an AclChange object. Args: acl_change_descriptor: An acl change as described in the "ch" section of the "acl" command's help. scope_type: Either ChangeType.USER or ChangeType.GROUP or ChangeType.PROJECT, specifying the extent of the scope. � N)� identifier�raw_descriptor�_Parse� _Validate)�selfZacl_change_descriptor� scope_typer r r �__init__@ s zAclChange.__init__c C s d� | j| j| j�S )NzAclChange<{0}|{1}|{2}>)�formatr- �permr( �r, r r r �__str__O s �zAclChange.__str__c C s� dd� }|� d�dkr$td�|���|�d�\}}|�� }|| jv rR| j| | _n|| _||�}|dkr|d�|�| _|| _nZ|dv r�d �||�| _|| _n<|d kr�d | _n,|d kr�d | _n |d kr�d | _|| _n|| _d S )z Parses an ACL Change descriptor.c S s@ ddddddd�}|� � D ] \}}t�|| tj�r| S qd S )Nz!^(AllAuthenticatedUsers|AllAuth)$z^(AllUsers|All)$z ^.+@.+\..+$z^[0-9A-Fa-f]{64}$z^[^@]+\.[^@]+$z (owners|editors|viewers)\-.+$)r r �Email�Id�Domainr )�items�re�match� IGNORECASE)�textZre_mapZ type_string�regexr r r �_ClassifyScopeIdentifierV s �z2AclChange._Parse.<locals>._ClassifyScopeIdentifier�:� z%{0} is an invalid change description.r5 z {0}ByDomain)r3 r4 z{0}By{1}r r r N) �countr r/ �split�upper� permission_shorthand_mappingr0 r- r( )r, Zchange_descriptorr- r< Z scope_stringZ perm_tokenZ scope_classr r r r* S s2 � zAclChange._Parsec s� � fdd�}� j � jvr(|d�� j �� � j � jv rJ� jrJ|d�� j �� � j � jv rl� jsl|d�� j �� � j � jv r�� js�|d�� j �� � j � jv r�� js�|d�� j �� � j� j � � vr�d� t � j � � ��}|d �|�� d S ) z$Validates a parsed AclChange object.c s t d�� j| ���d S )Nz!{0} is not a valid ACL change {1})r r/ r) )�msgr1 r r � _ThrowError� s �z(AclChange._Validate.<locals>._ThrowErrorz {0} is not a valid scope typez{0} requires no argumentsz{0} requires an idz {0} requires an email addressz{0} requires domainz, zAllowed permissions are {0}N) r- � scope_typesr/ � public_scopesr( � id_scopes� email_scopes� domain_scopesr0 rB �values�join�set)r, rD Zpermsr r1 r r+ � s zAclChange._Validatec c s� |D ]�}| j dv r,|jr,| j|jkr,|V q| j dv rP|jrP| j|jkrP|V q| j dkrt|jrt| j|jkrt|V q| j dkr�|jr�| jd|jj|jjf kr�|V q| j dkr�|j� � | j � � kr�|V q| j dkr|j� � | j � � kr|V qdS ) aR Generator that yields entries that match the change descriptor. Args: current_acl: A list of apitools_messages.BucketAccessControls or ObjectAccessControls which will be searched for matching entries. Yields: An apitools_messages.BucketAccessControl or ObjectAccessControl. )r r �r r r r �%s-%sr r N) r- �entityIdr( �email�domain� projectTeam�team� projectNumber�entity�lower�public_entity_all_users� public_entity_all_auth_users�r, � current_acl�entryr r r �_YieldMatchingEntries� s: � � � ��� � �z AclChange._YieldMatchingEntriesc C s� | j dv r| j| j S | j dv r,| j| j S | j dkrB| j| j S | j dkrX| j| j S | j dkrh| jS | j dkrx| jS td| j ��dS ) z3Gets an appropriate entity string for an ACL grant.)r r )r r r r r r z.Add entry to ACL got unexpected scope type %s.N) r- �user_entity_prefixr( �group_entity_prefix�project_entity_prefix�domain_entity_prefixrX rW r r1 r r r � GetEntity� s �zAclChange.GetEntityc C s^ | � � }|| j|d�}| jdv r*| j|_n&| jdv r>| j|_n| jdkrP| j|_|�|� dS )z Adds an entry to current_acl.)�rolerU )r r r rM r N)ra r0 r- r( rO rP rQ �append)r, rZ � entry_classrU r[ r r r � _AddEntry� s zAclChange._AddEntryc C s |D ] }|j S t�� j S )N)� __class__�apitools_messages�ObjectAccessControl)r, rZ � acl_entryr r r �_GetEntriesClass� s zAclChange._GetEntriesClassc C s� |� d|| j|� | jdkrP|dkr@|�� r@|�d| j|� dS |dkrPtd��| �|�}t| �|��}d}|r�|D ] }|j | jkrt| j|_ |d7 }qtn| � ||� d}|� d t |�� |S ) a� Executes the described change on an ACL. Args: storage_url: StorageUrl representing the object to change. current_acl: A list of ObjectAccessControls or BucketAccessControls to permute. command_name: String name of comamnd being run (e.g., 'acl'). logger: An instance of logging.Logger. Returns: The number of changes that were made. �Executing %s %s on %sr �aclz6Skipping %s on %s, as WRITER does not apply to objectsr �defaclzUWRITER cannot be set as a default object ACL because WRITER does not apply to objectsr> � New Acl: %s) �debugr) r0 �IsObject�warningr rj �listr\ rb re �str) r, � storage_urlrZ � command_name�loggerrd �matching_entriesZ change_countr[ r r r �Execute� s. � � zAclChange.ExecuteN) r r r �__doc__rF rG rH rI Zproject_scopesrE rW rX Zpublic_entity_typesZproject_entity_prefixesr^ r] r` r_ rB r. r2 r* r+ r\ ra re rj rx r r r r r " sD �� 1 r c @ s2 e Zd ZdZddd�Zdd� Zdd� Zd d � Zd S ) �AclDelz8Represents a logical change from an access control list.r r )z All(Users)?$zAllAuth(enticatedUsers)?$c C sN d� |�| _|| _| j�� D ] \}}t�|| jtj�r || _q d| _d| _ d S )Nz-d {0}�Any�NONE) r/ r) r( � scope_regexesr6 r7 r8 r9 r- r0 )r, r( r; �scoper r r r. s zAclDel.__init__c c s� |D ]�}|j r*| j�� |j �� kr*|V q|jrL| j�� |j�� krL|V q|jrn| j�� |j�� krn|V q|jr�| j�� d�� |jj|jjf kr�|V q|j�� dkr�| jdkr�|V q|j�� dkr| jdkr|V qdS )aW Generator that yields entries that match the change descriptor. Args: current_acl: An instance of apitools_messages.BucketAccessControls or ObjectAccessControls which will be searched for matching entries. Yields: An apitools_messages.BucketAccessControl or ObjectAccessControl. rN Zallusersr Zallauthenticatedusersr N) rO r( rV rP rQ rR rS rT rU rY r r r r\ s" ��z AclDel._YieldMatchingEntriesc C sL |� d|| j|� t| �|��}|D ]}|�|� q$|� dt|�� t|�S )Nrk rn )ro r) rr r\ �removers �len)r, rt rZ ru rv rw r[ r r r rx 8 s � zAclDel.ExecuteN)r r r ry r} r. r\ rx r r r r rz s � rz c C s� g }t jt jt jd�}| D ]r\}}||v r\t||| d�}d�|�� |j�}|�||f� q|dkr~t |�}|�d|j f� q|�||f� q|S )N)z-gz-pz-u)r- zentity={},role={}z-d) r r r r r r/ ra r0 rc rz r( )�sub_optsZtranslated_sub_optsZscope_type_from_flag�flag�value�changeZ new_valuer r r �translate_sub_opts_for_shimB s � r� )ry � __future__r r r r r7 �gslib.exceptionr �"gslib.third_party.storage_apitoolsr rg �objectr r rz r� r r r r �<module> s l5