ó
úEYc@sñdd
lZddl
mZ
ddlmZ
ddlmZ
ejeƒ
ZdZ	ddddgZ
d	ejf
d
„ƒYZdef
d„ƒYZ
d
ef
d„ƒYZdef
d„ƒYZdef
d„ƒYZdejf
d„ƒYZd
S(iÿÿÿÿN(
t
parse_isotime(
tbase(
t	formattertreadtwritetdeletetlisttACLFormattercBseZ
dZd„ZRS(sOperation TypesProject AccesstUserstCreatedtUpdatedc
Csd|jr|jj
ƒnd}
|jr6|jj
ƒnd}|j|j|j|
||jf}|S(
N(tcreatedt	isoformattNonetupdatedtoperation_typetproject_accesstuserstacl_ref(tselfRRtdata((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyt_get_formatted_data(s







(sOperation TypesProject AccessRsCreatedR
(t__name__t
__module__tcolumnsR(((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRs



t_PerOperationACLcBsÔeZ
d
d
d
d
d
d
d„Zed
„ƒ
Zed„ƒ
Zed„ƒ
Zed„ƒ
Zed„ƒ
Z	ed„ƒ
Z
ed„ƒ
Ze	jd„ƒ
Z	ejd	„ƒ
Zejd
„ƒ
Zd„Z
d„ZRS(cCsv|
|_||_
|r|ntƒ|_||_||_|rNt|ƒ
nd
|_|rit|ƒ
nd
|_	d
S(sáPer Operation ACL data instance for secret or container.

        This class not to be instantiated outside of this module.

        :param parent_acl: acl entity to this per operation data belongs to
        :param str entity_ref: Full HATEOAS reference to a secret or container
        :param users: List of Keystone userid(s) to be used for ACL.
        :type users: List or None
        :param bool project_access: Flag indicating project access behavior
        :param str operation_type: Type indicating which class of Barbican
            operations this ACL is defined for e.g. 'read' operations
        :param str created: Time string indicating ACL create timestamp. This
            is populated only when populating data from api response. Not
            needed in client input.
        :param str updated: Time string indicating ACL last update timestamp.
            This is populated only when populating data from api response. Not
            needed in client input.
        N(
t_parent_aclt_entity_refRt_userst_project_accesst_operation_typeRR
t_createdt_updated(Rt
parent_aclt
entity_refRRRRR((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyt__init__7s	
	

	
	

c

Cstj
|jƒ
S(
N(tACLtget_acl_ref_from_entity_refR"(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRTsc


Cs|jS(
N(
R(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR"Xsc


Cs|jS(
s9Flag indicating project access behavior is enabled or not(
R(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR\sc


Cs|jS(
s"List of users for this ACL setting(
R(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRasc


Cs|jS(
s9Type indicating class of Barbican operations for this ACL(
R(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRfsc


Cs|jS(
N(
R(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRksc


Cs|jS(
N(
R (
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRoscCs
|
|_dS(
N(
R(Rtvalue((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRsscCs
|
|_dS(
N(
R(RR&((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRwscCs
|
|_dS(
N(
R(RR&((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR{sc
Cs„tj
d
j|j|jƒƒ

|jjƒ
|j}
|
j|jƒ
}|r€|
jj	|ƒ

|
jrs|
j
ƒ
q€|
j	ƒ
ndS(sÝRemove operation specific setting defined for a secret or container

        :raises barbicanclient.exceptions.HTTPAuthError: 401 Responses
        :raises barbicanclient.exceptions.HTTPClientError: 4xx Responses
        s1Removing {0} operation specific ACL for href: {1}N(tLOGtdebugtformatRRRtload_acls_datatgettoperation_aclstremovetsubmit(Rt
acl_entityt
per_op_acl((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR-s


	

	

c

CsG|jrCt
|jƒ
tkp0t
|jƒ
tkrCtd
ƒ
‚
ndS(Ns3Users value is expected to be provided as list/set.(RttypeRtsett
ValueError(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyt_validate_users_type˜s


N(RRR
R#tpropertyRR"RRRRRtsetterR-R4(((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR5s

	R$cBsÈeZ
dZddeddd
„Zed„ƒ
Zed„ƒ
Zed„ƒ
Z	dddddd„Z
d„Zd„Zd„Z
d	„Zd
„Zd„Zd„Zed
„ƒ
Zed„ƒ
ZRS(taclc	Cs}|
|_||_
g|_|dk	s3|dk	rytd
|d|d|d|d|d|d|ƒ}|jj|ƒ

ndS(	s-Base ACL entity instance for secret or container.

        Provide ACL data arguments to set ACL setting for given operation_type.

        To add ACL setting for other operation types, use `add_operation_acl`
        method.

        :param api: client instance reference
        :param str entity_ref: Full HATEOAS reference to a secret or container
        :param users: List of Keystone userid(s) to be used for ACL.
        :type users: str List or None
        :param bool project_access: Flag indicating project access behavior
        :param str operation_type: Type indicating which class of Barbican
            operations this ACL is defined for e.g. 'read' operations
        :param str created: Time string indicating ACL create timestamp. This
            is populated only when populating data from api response. Not
            needed in client input.
        :param str updated: Time string indicating ACL last update timestamp.
            This is populated only when populating data from api response. Not
            needed in client input.
        R!R"RRRRRN(t_apiRt_operation_aclsR
Rtappend(	RtapiR"RRRRRR7((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR#£s	
	
	




c


Cs|jS(
sEntity URI reference.(
R(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR"Ésc


Cs|jS(
s(List of operation specific ACL settings.(
R9(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR,Îsc

Cstj
|jƒ
S(
N(R$R%R"(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRÓsc	CsŠtd
|d|j
d|
d|d|d|d|ƒ}xMt|jƒ
D],\}}|j|krF||j|<PqFqFW|jj|ƒ

dS(	sJAdd ACL settings to entity for specific operation type.

        If matching operation_type ACL already exists, then it replaces it with
        new PerOperationACL object using provided inputs. Otherwise it appends
        new PerOperationACL object to existing per operation ACL list.

        This just adds to local entity and have not yet applied these changes
        to server.

        :param users: List of Keystone userid(s) to be used in ACL.
        :type users: List or None
        :param bool project_access: Flag indicating project access behavior
        :param str operation_type: Type indicating which class of Barbican
            operations this ACL is defined for e.g. 'read' operations
        :param str created: Time string indicating ACL create timestamp. This
            is populated only when populating data from api response. Not
            needed in client input.
        :param str updated: Time string indicating ACL last update timestamp.
            This is populated only when populating data from api response. Not
            needed in client input.
        R!R"RRRRRN(RR"t	enumerateR9RR:(	RRRRRRtnew_aclt
iR7((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pytadd_operation_acl×s





cs t‡f
d
†|j
Dƒ
dƒS(Nc
3s$|]}
|
jˆkr|
V
qdS(
N(
R(t.0R7(
R(sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pys	<genexpr>ýs
(tnextR9R
(RR((
RsH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyt_get_operation_aclüs

cCs
|j|
ƒ
S(
s’Get operation specific ACL instance.

        :param str operation_type: Type indicating which operation's ACL
        setting is needed.
        (
RB(RR((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR+
scCs)|
tkr|j
|
ƒ
St|
ƒ
‚
dS(
N(tVALID_ACL_OPERATIONSRBtAttributeError(Rtname((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyt__getattr__
s


c
Csötj
d
j|j|jƒƒ

|jsCtdj|jƒ
ƒ
‚
n|jƒ
i}
xr|jD]g}|j	ƒ
|j
}i}|jdk	r›|j|d<n|j
dk	rº|j
|d<n||
|<q]W|jj|jd|
ƒ

}|jƒjdƒ
S(sŸSubmits ACLs for a secret or a container defined in server

        In existing ACL case, this overwrites the existing ACL setting with
        provided inputs. If input users are None or empty list, this will
        remove existing ACL users if there. If input project_access flag is
        None, then default project access behavior is enabled.

        :returns: str acl_ref: Full HATEOAS reference to a secret or container
            ACL.
        :raises barbicanclient.exceptions.HTTPAuthError: 401 Responses
        :raises barbicanclient.exceptions.HTTPClientError: 4xx Responses
        :raises barbicanclient.exceptions.HTTPServerError: 5xx Responses
        s)Submitting complete {0} ACL for href: {1}s!ACL data for {0} is not provided.sproject-accessRtjsonRN(R'R(R)tacl_typeR"R,R3t	_acl_typetvalidate_input_refR4RRR
RR8tputRRGR+(Rtacl_dictR0top_typetacl_datatresponse((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR.
s$

	
	




	





c

Cs@|jƒ
t
jd
j|j|jƒƒ

|jj|jƒ

dS(sØRemove Barbican ACLs setting defined for a secret or container

        :raises barbicanclient.exceptions.HTTPAuthError: 401 Responses
        :raises barbicanclient.exceptions.HTTPClientError: 4xx Responses
        s"Removing ACL for {0} for href: {1}N(	RJR'R(R)RHR"R8RR(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR-4
s



c
Cs¤|jj
|jƒ
}
|j2x|
D]y}|
j
|ƒ
}|j
d
ƒ
}|j
dƒ
}|j
dƒ
}|j
dƒ
}|jd|d|d|d|d|ƒ
q#WdS(sÂ
Loads ACL entity from Barbican server using its acl_ref

        Clears the existing list of per operation ACL settings if there.
        Populates current ACL entity with ACL settings received from Barbican
        server.

        :raises barbicanclient.exceptions.HTTPAuthError: 401 Responses
        :raises barbicanclient.exceptions.HTTPClientError: 4xx Responses
        :raises barbicanclient.exceptions.HTTPServerError: 5xx Responses
        sproject-accessRRRRRN(R8R+RR,R?(RRORMRLtproj_accessRRR((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR*?
s










c
Cs¡|jj
ƒ}
|js0td
j|
ƒ
ƒ
‚
n|j|jkrud|jkritdj|
ƒ
ƒ
‚
n|j}ntdj|
ƒ
ƒ
‚
tj|j|ƒ
|S(Ns{0} href is required.s/acls({0} ACL URI provided. Expecting {0} URI.s{0} URI is not specified.(RIttitleR"R3R)t_parent_entity_pathR
tvalidate_ref(Rt	res_titletref_type((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRJY
s

	



	


c

Cs,|r(|jd
ƒ
}dj
|tjƒSdS(Nt
/s{0}/{1}(trstripR)R$t_resource_name(
R"((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR%h
s

c
CsO|std
ƒ
‚
nd|kr*d}
n!d|kr?d}
ntdƒ
‚
|
S(Ns%Secret or container href is required.s/secretstsecrets/containerst	containers)Secret or container URI is not specified.(
R3(R"RU((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pytidentify_ref_typeo
s


	

	N(RRRXR
tDEFAULT_OPERATION_TYPER#R5R"R,RR?RBR+RFR.R-R*RJtstaticmethodR%R[(((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR$Ÿs&

$

#				&			t	SecretACLcBs6eZ
dZejdZdZdZed„ƒ
ZRS(sACL entity for a secretsSecret ACL RefRYs/secretsc


Cs|jS(
N(
RI(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRH…
s(
sSecret ACL Ref(	RRt__doc__RRRIRRR5RH(((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR^~
s




tContainerACLcBs6eZ
dZejdZdZdZed„ƒ
ZRS(sACL entity for a containersContainer ACL RefRZs/containersc


Cs|jS(
N(
RI(
R((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRH‘
s(
sContainer ACL Ref(	RRR_RRRIRRR5RH(((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR`Š
s




t
ACLManagercBsReZ
dZied
6ed6Zd„Zddded„Z	d„Z
d„ZRS(s3Entity Manager for Secret or Container ACL entitiesRYRZcCs tt
|ƒj|
tjƒ
dS(
N(tsuperRaR#R$RX(RR;((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR#ž
s
cCsItj
|
ƒ
}tjj|ƒ
}|d
|jd|
d|d|d|ƒS(spFactory method for creating `ACL` entity.

        `ACL` object returned by this method have not yet been
        stored in Barbican.

        Input entity_ref is used to determine whether
        ACL object type needs to be :class:`barbicanclient.acls.SecretACL`
        or  :class:`barbicanclient.acls.ContainerACL`.

        :param str entity_ref: Full HATEOAS reference to a secret or container
        :param users: List of Keystone userid(s) to be used in ACL.
        :type users: List or None
        :param bool project_access: Flag indicating project access behavior
        :param str operation_type: Type indicating which class of Barbican
            operations this ACL is defined for e.g. 'read' operations
        :returns: ACL object instance
        :rtype: :class:`barbicanclient.acls.SecretACL` or
            :class:`barbicanclient.acls.ContainerACL`
        R;R"RRR(R$R[Rat
acl_class_mapR+R8(RR"RRRtentity_typetentity_class((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pytcreate¡
s


cCs<|j|
ƒ
}t
jd
j|j|jƒƒ

|jƒ
|S(sÉ
Retrieve existing ACLs for a secret or container found in Barbican

        :param str entity_ref: Full HATEOAS reference to a secret or container.
        :returns: ACL entity object instance
        :rtype: :class:`barbicanclient.acls.SecretACL` or
            :class:`barbicanclient.acls.ContainerACL`
        :raises barbicanclient.exceptions.HTTPAuthError: 401 Responses
        :raises barbicanclient.exceptions.HTTPClientError: 4xx Responses
        sGetting ACL for {0} href: {1}(t_validate_acl_refR'R(R)RHRR*(RR"tentity((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyR+¾
s






cCsq|
dkrt
d
ƒ
‚
n|
jdƒ
}
tj|
ƒ
}tjj|ƒ
}|d|jd|
ƒ}|j	ƒ
|S(Ns2Expected secret or container URI is not specified.RVR;R"(
R
R3RWR$R[RaRcR+R8RJ(RR"RdReR/((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRgÎ
s






N(RRR_R^R`RcR#R
R\RfR+Rg(((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyRa–
s



		
	(tloggingtoslo_utils.timeutilsRtbarbicanclientR
Rt	getLoggerRR'R\RCtEntityFormatterRRtobjectR$R^R`tBaseEntityManagerRa(((sH/home/tvault/.virtenv/lib/python2.7/site-packages/barbicanclient/acls.pyt<module>s
jß