Why Gemfury?
Push, build, and install
RubyGems
npm packages
Python packages
Maven artifacts
PHP packages
Go Modules
Debian packages
RPM packages
NuGet packages
Repository URL to install this package:
|
Version:
5.2.8-5.2 ▾
|
python3-dmapi-el9
/
usr
/
lib
/
python3.9
/
site-packages
/
dmapi
/
__pycache__
/
context.cpython-39.pyc
|
|---|
a
[r`e 9 ã @ s. d Z ddlZddlmZ ddlmZ ddlmZ ddl m
Z
ddl m Z ddl
mZ dd lmZ ddlZdd
lmZ dd lmZ dd lmZ dd
lmZ e e¡Ze Z e Z G dd dej Z e j!G dd de
j"Z"dd Z#d%ddZ$dd Z%dd Z&dd Z'd d Z(d d Z)i a*d!d" Z+ed#d$ Z,dS )&zGRequestContext: context for requests that persist through all of dmapi.é N)Úcontextmanager)Úservice_catalog)Úplugin©Úcontext)Ú enginefacade)Úlog)Ú timeutils)Ú exception)Ú_)Úpolicy)Úutilsc s2 e Zd ZdZ fddZdd Zd ddZ ZS )
Ú_ContextAuthPluginzñA keystoneauth auth plugin that uses the values from the Context.
Ideally we would use the plugin provided by auth_token middleware however
this plugin isn't serialized yet so we construct one from the serialized
auth data.
c s$ t t| ¡ || _t |¡| _d S ©N)Úsuperr Ú__init__Ú
auth_tokenÚksa_service_catalogZServiceCatalogV2r )Úselfr Zsc©Ú __class__© ú1/usr/lib/python3.9/site-packages/dmapi/context.pyr ) s z_ContextAuthPlugin.__init__c O s | j S r )r )r ÚargsÚkwargsr r r Ú get_token/ s z _ContextAuthPlugin.get_tokenNc K s | j j||||dS )N)Ú service_typeÚ service_nameÚ interfaceÚ region_name)r Zurl_for)r Zsessionr r r r r r r r Ú get_endpoint2 s
ýz _ContextAuthPlugin.get_endpoint)NNNN)Ú__name__Ú
__module__Ú __qualname__Ú__doc__r r r Ú
__classcell__r r r r r ! s ÿr c
s e Zd ZdZd fdd Zdd Zd d
Zd d Zd
d Ze eeeZ
fddZ e fddZ
d ddZd ddZ fddZdd Z ZS ) ÚRequestContextzpSecurity context and request information.
Represents the user taking a given action within the system.
NÚnoFc sº |r || d< |r|| d< | dd¡ tt| jf d|i| ¤ || _|| _|sVt ¡ }t|t j
rlt |¡}|| _ |rdd |D | _
ng | _
| | _|| _|
| _| jdu r¶t | ¡| _dS )aÉ :param read_deleted: 'no' indicates deleted records are hidden,
'yes' indicates deleted records are visible,
'only' indicates that *only* deleted records are visible.
:param overwrite: Set to False to ensure that the greenthread local
copy of the index is not overwritten.
:param user_auth_plugin: The auth plugin for the current request's
authentication data.
ÚuserÚ
project_idZtenantNÚis_adminc S s g | ]}| d ¡dv r|qS )Útype)Zimagez
block-storageZvolumev2Zvolumev3z key-managerZ placementZnetwork)Úget)Ú.0Úsr r r Ú
<listcomp>d s ÿz+RequestContext.__init__.<locals>.<listcomp>)Úpopr r& r Ú read_deletedÚremote_addressr ZutcnowÚ
isinstanceÚsixZ string_typesZ
parse_strtimeÚ timestampr Úinstance_lock_checkedÚ quota_classÚuser_auth_pluginr* r Zcheck_is_admin) r Úuser_idr) r* r1 r2 r5 r7 r r6 r8 r r r r r @ s*
zRequestContext.__init__c C s | j r | j S t| j| jS d S r )r8 r r r ©r r r r Úget_auth_pluginw s z RequestContext.get_auth_pluginc C s | j S r ©Ú
_read_deletedr: r r r Ú_get_read_deleted} s z RequestContext._get_read_deletedc C s" |dvrt td| || _d S )N)r' ZyesZonlyz=read_deleted can only be one of 'no', 'yes' or 'only', not %r)Ú
ValueErrorr r= )r r1 r r r Ú_set_read_deleted s
ÿz RequestContext._set_read_deletedc C s | ` d S r r< r: r r r Ú_del_read_deleted s z RequestContext._del_read_deletedc sº t t| ¡ }| t| dd t| dd t| dd t| ddt| dd t| drZt | j¡nd t| dd t| d d t| d
d t| d d t| d d t| d
dd ¡ | dt| ddi¡ |S )Nr9 r) r* r1 r' r2 r5 Ú
request_idr7 Ú user_namer Ú project_namer6 F) r9 r) r* r1 r2 r5 rB r7 rC r rD r6 Zis_admin_projectT) r r& Úto_dictÚupdateÚgetattrÚhasattrr
Zstrtimer5 )r Úvaluesr r r rE s0
ÿ
ÿó ÿzRequestContext.to_dictc
sV t t| j|| d¡| d¡| dd¡| d¡| d¡| d¡| d¡| d d
¡d S ) Nr9 r) r1 r' r2 r5 r7 r r6 F)r9 r) r1 r2 r5 r7 r r6 )r r& Ú from_dictr, )ÚclsrI r r r rJ ª s
ôzRequestContext.from_dictc C sF t | ¡}t | j¡|_d|_d|jvr4|j d¡ |durB||_|S )z5Return a version of this context with admin flag set.TZadminN)ÚcopyÚdeepcopyZrolesr* Úappendr1 )r r1 r r r r Úelevated» s
zRequestContext.elevatedTc C sH |du r| j | jd}zt | ||¡W S tjyB |r< Y dS 0 dS )aR Verifies that the given action is valid on the target in this context.
:param action: string representing the action to be checked.
:param target: dictionary representing the object of the action
for object creation this should be a dictionary representing the
location of the object e.g. ``{'project_id': context.project_id}``.
If None, then this default target will be considered:
{'project_id': self.project_id, 'user_id': self.user_id}
:param fatal: if False, will return False when an exception.Forbidden
occurs.
:raises dmapi.exception.Forbidden: if verification fails and fatal is
True.
:return: returns a non-False value (not necessarily "True") if
authorized and False if not authorized and fatal is False.
N)r) r9 F)r) r9 r Z authorizer
Ú Forbidden)r ÚactionÚtargetZfatalr r r ÚcanË s ÿzRequestContext.canc s t t| ¡ }| j|d< |S )Nr* )r r& Úto_policy_valuesr* )r r r r r rT è s
z RequestContext.to_policy_valuesc C s d| ¡ S )Nz <Context %s>)rE r: r r r Ú__str__í s zRequestContext.__str__)
NNNr' NNNNFN)N)NT)r! r" r# r$ r r; r> r@ rA Úpropertyr1 rE Ú classmethodrJ rO rS rT rU r% r r r r r& : s( ý7ÿ
r& c C s t dddddS )z·A helper method to get a blank context.
Note that overwrite is False here so this context will not update the
greenthread-local stored context that is used when logging.
NF)r9 r) r* Ú overwrite©r& r r r r Ú get_contextñ s
ýrZ r' c C s t d d d| ddS )NTF)r9 r) r* r1 rX rY )r1 r r r Úget_admin_contextý s ür[ c C s& | sdS | j rdS | jr | js"dS dS )z2Indicates if the request context is a normal user.FT)r* r9 r) r r r r Úis_user_context s r\ c C s | j st| st ¡ dS )zRRaise exception.Forbidden() if context is not a user or an
admin context.
N)r* r\ r
rP )Zctxtr r r Úrequire_context s r] c C s. t | r*| jst ¡ n| j|kr*t ¡ dS )z=Ensures a request has permission to access the given project.N)r\ r) r
rP )r r) r r r Úauthorize_project_context s
r^ c C s. t | r*| jst ¡ n| j|kr*t ¡ dS )z:Ensures a request has permission to access the given user.N)r\ r9 r
rP )r r9 r r r Úauthorize_user_context' s
r_ c C s. t | r*| jst ¡ n| j|kr*t ¡ dS )zAEnsures a request has permission to access the given quota class.N)r\ r7 r
rP )r Ú
class_namer r r Ú authorize_quota_class_context0 s
ra c sV durFddl m ddl m t j¡ fdd}| n d_d_dS )a¯ Adds database connection information to the context
for communicating with the given target_cell.
This is used for permanently targeting a cell in a context.
Use this when you want all subsequent code to target a cell.
Passing None for cell_mapping will untarget the context.
:param context: The RequestContext to add connection information
:param cell_mapping: An objects.CellMapping object or None
Nr )Údb)Úrpcc sx zt j } W nP ty^ j} |¡_ j d¡sH j¡_ jj ft j< Y n0 | d _| d _ d S )NZnoner é )
Ú
CELL_CACHEÚuuidÚKeyErrorZdatabase_connectionZcreate_context_managerÚ
db_connectionZ
transport_urlÚ
startswithZcreate_transportÚ
mq_connection)Z
cell_tupleZdb_connection_string©Ú cell_mappingr rb rc r r Ú*get_or_set_cached_cell_and_set_connectionsM s ÿ ÿÿ
zCset_target_cell.<locals>.get_or_set_cached_cell_and_set_connections)Údmapirb rc r
Z synchronizedrf rh rj )r rl rm r rk r Úset_target_cell: s
ro c c s" t | ¡ ¡}t|| |V dS )a¡ Yields a new context with connection information for a specific cell.
This function yields a copy of the provided context, which is targeted to
the referenced cell for MQ and DB connections.
Passing None for cell_mapping will yield an untargetd copy of the context.
:param context: The RequestContext to add connection information
:param cell_mapping: An objects.CellMapping object or None
N)r& rJ rE ro )r rl Zcctxtr r r Ú target_celld s
rp )r' )-r$ rL Ú
contextlibr Zkeystoneauth1.accessr r Z
keystoneauth1r Z oslo_contextr Zoslo_db.sqlalchemyr Zoslo_logr ZloggingZ
oslo_utilsr r4 rn r
Z
dmapi.i18nr r r
Z getLoggerr! ZLOGÚobjectZdid_not_respond_sentinelZraised_exception_sentinelZBaseAuthPluginr Z transaction_context_providerr& rZ r[ r\ r] r^ r_ ra re ro rp r r r r Ú<module> s>
7
*