Why Gemfury?
Push, build, and install
RubyGems
npm packages
Python packages
Maven artifacts
PHP packages
Go Modules
Debian packages
RPM packages
NuGet packages
triliodata-3-3 / python3-dmapi deb
Repository URL to install this package:
|
Version:
3.3.35 ▾
|
çáþ\Ù8 ã @ s© d Z d d l Z d d l m Z d d l m Z d d l m Z d d l m
Z
d d l m Z d d l
m Z d d l m Z d d l Z d d
l m Z d d l m Z d d l m Z d d
l m Z e j e Z e Z e Z Gd d d e j Z e j! Gd d d e
j" Z" d d Z# d d d Z$ d d Z% d d Z& d d Z' d d Z( d d Z) i a* d! d" Z+ e d# d$ Z, d S)%zGRequestContext: context for requests that persist through all of dmapi.é N)Úcontextmanager)Úservice_catalog)Úplugin)Úcontext)Ú enginefacade)Úlog)Ú timeutils)Ú exception)Ú_)Úpolicy)Úutilsc sL e Z d Z d Z f d d Z d d Z d d d d d d Z S) Ú_ContextAuthPluginzñA keystoneauth auth plugin that uses the values from the Context.
Ideally we would use the plugin provided by auth_token middleware however
this plugin isn't serialized yet so we construct one from the serialized
auth data.
c s2 t t | j | | _ t j | | _ d S)N)Úsuperr
Ú__init__Ú
auth_tokenÚksa_service_catalogZServiceCatalogV2r )Úselfr Zsc)Ú __class__© ú//usr/lib/python3/dist-packages/dmapi/context.pyr ) s z_ContextAuthPlugin.__init__c O s | j S)N)r )r ÚargsÚkwargsr r r Ú get_token/ s z _ContextAuthPlugin.get_tokenNc K s% | j j d | d | d | d | S)NÚ service_typeÚ service_nameÚ interfaceÚ region_name)r Zurl_for)r Zsessionr r r r r r r r Ú get_endpoint2 s z _ContextAuthPlugin.get_endpoint)Ú__name__Ú
__module__Ú __qualname__Ú__doc__r r r r r )r r r
! s
r
c
sñ e Z d Z d Z d d d d d d d d d d f d d
Z d d Z d d
Z d d Z d
d Z e e e e Z
f d d Z e f d d Z
d d d Z d d d d Z f d d Z d d Z S) ÚRequestContextzpSecurity context and request information.
Represents the user taking a given action within the system.
NÚnoFc sò | r | | d <| r | | d <t t | j d | | | | _ | | _ | s` t j } t | t j r t j
| } | | _ | r© d d | D | _ n g | _ | | _
| | _ |
| _ | j d k rî t j | | _ d S)aÉ :param read_deleted: 'no' indicates deleted records are hidden,
'yes' indicates deleted records are visible,
'only' indicates that *only* deleted records are visible.
:param overwrite: Set to False to ensure that the greenthread local
copy of the index is not overwritten.
:param user_auth_plugin: The auth plugin for the current request's
authentication data.
ÚuserZtenantÚis_adminc
S s+ g | ]! } | j d d k r | q S) ÚtypeÚimageú
block-storageÚvolumev2Úvolumev3ú key-managerÚ placementÚnetwork)r' r( r) r* r+ r, znetwork)Úget)Ú.0Úsr r r ú
<listcomp>c s z+RequestContext.__init__.<locals>.<listcomp>N)r r" r Ú read_deletedÚremote_addressr ÚutcnowÚ
isinstanceÚsixÚ string_typesZ
parse_strtimeÚ timestampr Úinstance_lock_checkedÚ quota_classÚuser_auth_pluginr% r Zcheck_is_admin) r Úuser_idÚ
project_idr% r2 r3 r8 r: r r9 r; r )r r r r @ s(
zRequestContext.__init__c C s' | j r | j St | j | j Sd S)N)r; r
r r )r r r r Úget_auth_pluginv s z RequestContext.get_auth_pluginc C s | j S)N)Ú
_read_deleted)r r r r Ú_get_read_deleted| s z RequestContext._get_read_deletedc C s/ | d k r" t t d | | | _ d S)Nr# ÚyesÚonlyz=read_deleted can only be one of 'no', 'yes' or 'only', not %r)znozyeszonly)Ú
ValueErrorr
r? )r r2 r r r Ú_set_read_deleted s
z RequestContext._set_read_deletedc C s
| ` d S)N)r? )r r r r Ú_del_read_deleted
s z RequestContext._del_read_deletedc s2 t t | j } | j d t | d d d t | d d d t | d d d t | d d d t | d d d t | d r t j | j n d d t | d d d t | d d d
t | d
d d t | d d d t | d d d
t | d
d i | j d t | d d i | S)Nr< r= r% r2 r# r3 r8 Z
request_idr: Z user_namer Ú project_namer9 FZis_admin_projectT) r r" Úto_dictÚupdateÚgetattrÚhasattrr Zstrtimer8 )r Úvalues)r r r rG s& !
zRequestContext.to_dictc s t t | j | d | j d d | j d d | j d d d | j d d | j d d | j d d | j d d | j d d
S) Nr< r= r2 r# r3 r8 r: r r9 F)r r" Ú from_dictr. )ÚclsrK )r r r rL © s zRequestContext.from_dictc C se t j | } t j | j | _ d | _ d | j k rL | j j d | d k ra | | _ | S)z5Return a version of this context with admin flag set.TZadminN)ÚcopyÚdeepcopyZrolesr% Úappendr2 )r r2 r r r r Úelevatedº s zRequestContext.elevatedTc C sd | d k r$ d | j d | j i } y t j | | | SWn" t j k
r_ | rW d SYn Xd S)aR Verifies that the given action is valid on the target in this context.
:param action: string representing the action to be checked.
:param target: dictionary representing the object of the action
for object creation this should be a dictionary representing the
location of the object e.g. ``{'project_id': context.project_id}``.
If None, then this default target will be considered:
{'project_id': self.project_id, 'user_id': self.user_id}
:param fatal: if False, will return False when an exception.Forbidden
occurs.
:raises dmapi.exception.Forbidden: if verification fails and fatal is
True.
:return: returns a non-False value (not necessarily "True") if
authorized and False if not authorized and fatal is False.
Nr= r< F)r= r< r Z authorizer Ú Forbidden)r ÚactionÚtargetÚfatalr r r ÚcanÊ s zRequestContext.canc s& t t | j } | j | d <| S)Nr% )r r" Úto_policy_valuesr% )r r )r r r rW ç s
z RequestContext.to_policy_valuesc C s d | j S)Nz <Context %s>)rG )r r r r Ú__str__ì s zRequestContext.__str__)r r r r! r r> r@ rD rE Úpropertyr2 rG Ú classmethodrL rQ rV rW rX r r )r r r" : s" 3 r" c C s t d d d d d d d d S)z·A helper method to get a blank context.
Note that overwrite is False here so this context will not update the
greenthread-local stored context that is used when logging.
r< Nr= r% FÚ overwrite)r" r r r r Ú get_contextð s r\ r# c C s% t d d d d d d d | d d S)Nr< r= r% Tr2 r[ F)r" )r2 r r r Úget_admin_contextü s
r] c C s3 | s
d S| j r d S| j s+ | j r/ d Sd S)z2Indicates if the request context is a normal user.FT)r% r< r= )r r r r Úis_user_context
s r^ c C s' | j r# t | r# t j d S)zRRaise exception.Forbidden() if context is not a user or an
admin context.
N)r% r^ r rR )Zctxtr r r Úrequire_context s r_ c C sC t | r? | j s$ t j n | j | k r? t j d S)z=Ensures a request has permission to access the given project.N)r^ r= r rR )r r= r r r Úauthorize_project_context s
r` c C sC t | r? | j s$ t j n | j | k r? t j d S)z:Ensures a request has permission to access the given user.N)r^ r< r rR )r r< r r r Úauthorize_user_context& s
ra c C sC t | r? | j s$ t j n | j | k r? t j d S)zAEnsures a request has permission to access the given quota class.N)r^ r: r rR )r Ú
class_namer r r Ú authorize_quota_class_context/ s
rc c sy d k rc d d l m d d l m t j j f d d } | n d _ d _ d S)a¯ Adds database connection information to the context
for communicating with the given target_cell.
This is used for permanently targeting a cell in a context.
Use this when you want all subsequent code to target a cell.
Passing None for cell_mapping will untarget the context.
:param context: The RequestContext to add connection information
:param cell_mapping: An objects.CellMapping object or None
Nr )Údb)Úrpcc s y t j } Wnm t k
r j } j | _ j j d sc j j _ j j f t j <Yn X| d _ | d _ d S)NZnoner é )
Ú
CELL_CACHEÚuuidÚKeyErrorZdatabase_connectionZcreate_context_managerÚ
db_connectionZ
transport_urlÚ
startswithZcreate_transportÚ
mq_connection)Z
cell_tupleZdb_connection_string)Ú cell_mappingr rd re r r Ú*get_or_set_cached_cell_and_set_connectionsL s
zCset_target_cell.<locals>.get_or_set_cached_cell_and_set_connections)Údmapird re r Z synchronizedrh rj rl )r rm rn r )rm r rd re r Úset_target_cell9 s
-
rp c c s+ t j | j } t | | | Vd S)a¡ Yields a new context with connection information for a specific cell.
This function yields a copy of the provided context, which is targeted to
the referenced cell for MQ and DB connections.
Passing None for cell_mapping will yield an untargetd copy of the context.
:param context: The RequestContext to add connection information
:param cell_mapping: An objects.CellMapping object or None
N)r" rL rG rp )r rm Zcctxtr r r Ú target_cellc s
rq )-r! rN Ú
contextlibr Zkeystoneauth1.accessr r Z
keystoneauth1r Z oslo_contextr Zoslo_db.sqlalchemyr Zoslo_logr ÚloggingZ
oslo_utilsr r6 ro r Z
dmapi.i18nr
r r Ú getLoggerr ZLOGÚobjectZdid_not_respond_sentinelZraised_exception_sentinelZBaseAuthPluginr
Z transaction_context_providerr" r\ r] r^ r_ r` ra rc rg rp rq r r r r Ú<module> s: µ *