Why Gemfury?
Push, build, and install
RubyGems
npm packages
Python packages
Maven artifacts
PHP packages
Go Modules
Debian packages
RPM packages
NuGet packages
Repository URL to install this package:
|
Version:
6.0.24-6.0 ▾
|
python3-tvault-contego-el9
/
usr
/
lib
/
python3.9
/
site-packages
/
contego
/
__pycache__
/
context.cpython-39.pyc
|
|---|
a
JrgI. ã @ s
d Z ddlZddlmZ ddlmZ ddlmZ ddl m
Z
ddl m Z ddl
mZ dd lmZ ddlZdd
lmZ dd lmZ dd lmZ e e¡Ze Z e Z G d
d dej Z e j G dd de
j!Z!dd Z"d ddZ#dd Z$dd Z%dd Z&d d Z'd d Z(dS )!zGRequestContext: context for requests that persist through all of dmapi.é N)Úcontextmanager)Úservice_catalog)Úplugin©Úcontext)Ú enginefacade)Úlog)Ú timeutils)Ú exception)Ú_)Úutilsc s2 e Zd ZdZ fddZdd Zd ddZ ZS )
Ú_ContextAuthPluginzñA keystoneauth auth plugin that uses the values from the Context.
Ideally we would use the plugin provided by auth_token middleware however
this plugin isn't serialized yet so we construct one from the serialized
auth data.
c s$ t t| ¡ || _t |¡| _d S ©N)Úsuperr
Ú__init__Ú
auth_tokenÚksa_service_catalogZServiceCatalogV2r )Úselfr Zsc©Ú __class__© ú3/usr/lib/python3.9/site-packages/contego/context.pyr ) s z_ContextAuthPlugin.__init__c O s | j S r )r )r ÚargsÚkwargsr r r Ú get_token/ s z _ContextAuthPlugin.get_tokenNc K s | j j||||dS )N)Ú service_typeÚ service_nameÚ interfaceÚ region_name)r Zurl_for)r Zsessionr r r r r r r r Ú get_endpoint2 s
ýz _ContextAuthPlugin.get_endpoint)NNNN)Ú__name__Ú
__module__Ú __qualname__Ú__doc__r r r Ú
__classcell__r r r r r
! s ÿr
c
s e Zd ZdZd fdd Zdd Zd d
Zd d Zd
d Ze eeeZ
fddZ e fddZ
dddZd ddZdd Z ZS ) ÚRequestContextzpSecurity context and request information.
Represents the user taking a given action within the system.
NÚnoFc s¤ |r || d< |r|| d< | dd¡ tt| jf d|i| ¤ || _|| _|sVt ¡ }t|t j
rlt |¡}|| _ |rdd |D | _
ng | _
| | _|| _|
| _dS )aÉ :param read_deleted: 'no' indicates deleted records are hidden,
'yes' indicates deleted records are visible,
'only' indicates that *only* deleted records are visible.
:param overwrite: Set to False to ensure that the greenthread local
copy of the index is not overwritten.
:param user_auth_plugin: The auth plugin for the current request's
authentication data.
ÚuserÚ
project_idZtenantNÚis_adminc S s g | ]}| d ¡dv r|qS )Útype)Zimagez
block-storageZvolumev2Zvolumev3z key-managerZ placementZnetwork)Úget)Ú.0Úsr r r Ú
<listcomp>d s ÿz+RequestContext.__init__.<locals>.<listcomp>)Úpopr r% r Ú read_deletedÚremote_addressr ZutcnowÚ
isinstanceÚsixZ string_typesZ
parse_strtimeÚ timestampr Úinstance_lock_checkedÚ quota_classÚuser_auth_plugin) r Úuser_idr( r) r0 r1 r4 r6 r r5 r7 r r r r r @ s(
zRequestContext.__init__c C s | j r | j S t| j| jS d S r )r7 r
r r ©r r r r Úget_auth_pluginy s z RequestContext.get_auth_pluginc C s | j S r ©Ú
_read_deletedr9 r r r Ú_get_read_deleted s z RequestContext._get_read_deletedc C s" |dvrt td| || _d S )N)r& ZyesZonlyz=read_deleted can only be one of 'no', 'yes' or 'only', not %r)Ú
ValueErrorr r< )r r0 r r r Ú_set_read_deleted s
ÿz RequestContext._set_read_deletedc C s | ` d S r r; r9 r r r Ú_del_read_deleted s z RequestContext._del_read_deletedc sº t t| ¡ }| t| dd t| dd t| dd t| ddt| dd t| drZt | j¡nd t| dd t| d d t| d
d t| d d t| d d t| d
dd ¡ | dt| ddi¡ |S )Nr8 r( r) r0 r& r1 r4 Ú
request_idr6 Ú user_namer Ú project_namer5 F) r8 r( r) r0 r1 r4 rA r6 rB r rC r5 Zis_admin_projectT) r r% Úto_dictÚupdateÚgetattrÚhasattrr Zstrtimer4 )r Úvaluesr r r rD s0
ÿ
ÿó ÿzRequestContext.to_dictc
sV t t| j|| d¡| d¡| dd¡| d¡| d¡| d¡| d¡| d d
¡d S ) Nr8 r( r0 r& r1 r4 r6 r r5 F)r8 r( r0 r1 r4 r6 r r5 )r r% Ú from_dictr+ )ÚclsrH r r r rI ¬ s
ôzRequestContext.from_dictc C sF t | ¡}t | j¡|_d|_d|jvr4|j d¡ |durB||_|S )z5Return a version of this context with admin flag set.TZadminN)ÚcopyÚdeepcopyZrolesr) Úappendr0 )r r0 r r r r Úelevated½ s
zRequestContext.elevatedTc C sH |du r| j | jd}zt | ||¡W S tjyB |r< Y dS 0 dS )aR Verifies that the given action is valid on the target in this context.
:param action: string representing the action to be checked.
:param target: dictionary representing the object of the action
for object creation this should be a dictionary representing the
location of the object e.g. ``{'project_id': context.project_id}``.
If None, then this default target will be considered:
{'project_id': self.project_id, 'user_id': self.user_id}
:param fatal: if False, will return False when an exception.Forbidden
occurs.
:raises dmapi.exception.Forbidden: if verification fails and fatal is
True.
:return: returns a non-False value (not necessarily "True") if
authorized and False if not authorized and fatal is False.
N)r( r8 F)r( r8 ZpolicyZ authorizer
Ú Forbidden)r ÚactionÚtargetZfatalr r r ÚcanÍ s ÿzRequestContext.canc C s d| ¡ S )Nz <Context %s>)rD r9 r r r Ú__str__ñ s zRequestContext.__str__)
NNNr& NNNNFN)N)NT)r r! r" r# r r: r= r? r@ Úpropertyr0 rD Ú classmethodrI rN rR rS r$ r r r r r% : s& ý9ÿ
$r% c C s t dddddS )z·A helper method to get a blank context.
Note that overwrite is False here so this context will not update the
greenthread-local stored context that is used when logging.
NF)r8 r( r) Ú overwrite©r% r r r r Ú get_contextõ s
ýrX r& c C s t d d d| ddS )NTF)r8 r( r) r0 rV rW )r0 r r r Úget_admin_context s ürY c C s& | sdS | j rdS | jr | js"dS dS )z2Indicates if the request context is a normal user.FT)r) r8 r( r r r r Úis_user_context s rZ c C s | j st| st ¡ dS )zRRaise exception.Forbidden() if context is not a user or an
admin context.
N)r) rZ r
rO )Zctxtr r r Úrequire_context s r[ c C s. t | r*| jst ¡ n| j|kr*t ¡ dS )z=Ensures a request has permission to access the given project.N)rZ r( r
rO )r r( r r r Úauthorize_project_context" s
r\ c C s. t | r*| jst ¡ n| j|kr*t ¡ dS )z:Ensures a request has permission to access the given user.N)rZ r8 r
rO )r r8 r r r Úauthorize_user_context+ s
r] c C s. t | r*| jst ¡ n| j|kr*t ¡ dS )zAEnsures a request has permission to access the given quota class.N)rZ r6 r
rO )r Ú
class_namer r r Ú authorize_quota_class_context4 s
r_ )r& ))r# rK Ú
contextlibr Zkeystoneauth1.accessr r Z
keystoneauth1r Z oslo_contextr Zoslo_db.sqlalchemyr Zoslo_logr ZloggingZ
oslo_utilsr r3 Zcontegor
Z contego.i18nr r Z getLoggerr ZLOGÚobjectZdid_not_respond_sentinelZraised_exception_sentinelZBaseAuthPluginr
Z transaction_context_providerr% rX rY rZ r[ r\ r] r_ r r r r Ú<module> s4
;