U $FZh|@sdZddlmZddlmZddlmZddlmZddlm Z Gddde Z Gd d d e Z Gd d d e Z Gd dde ZGddde ZdS)z%Manage access to objects and buckets.) _add_generation_match_parameters)create_trace_span)_DEFAULT_TIMEOUT) DEFAULT_RETRY))DEFAULT_RETRY_IF_METAGENERATION_SPECIFIEDc@s~eZdZdZdZdZdZdddZdd Zd d Z d d Z ddZ ddZ ddZ ddZddZddZddZddZdS) _ACLEntityaClass representing a set of roles for an entity. This is a helper class that you likely won't ever construct outside of using the factor methods on the :class:`ACL` object. :type entity_type: str :param entity_type: The type of entity (ie, 'group' or 'user'). :type identifier: str :param identifier: (Optional) The ID or e-mail of the entity. For the special entity types (like 'allUsers'). ZREADERZWRITERZOWNERNcCs||_tg|_||_dSN) identifiersetrolestype)self entity_typer r_/home/aprabhat/apps/x.techxrdev.in/venv/lib/python3.8/site-packages/google/cloud/storage/acl.py__init__*s z_ACLEntity.__init__cCs |jst|jSdj|dSdS)Nz{acl.type}-{acl.identifier})acl)r strr formatr rrr__str__/s z_ACLEntity.__str__cCsd|dd|jdS)Nz )joinr rrrr__repr__5sz_ACLEntity.__repr__cCs|jS)zGet the list of roles permitted by this entity. :rtype: list of strings :returns: The list of roles associated with this entity. )r rrrr get_roles8sz_ACLEntity.get_rolescCs|j|dS)zoAdd a role to the entity. :type role: str :param role: The role to add to the entity. N)r addr rolerrrgrant@sz_ACLEntity.grantcCs||jkr|j|dS)zyRemove a role from the entity. :type role: str :param role: The role to remove from the entity. N)r removerrrrrevokeHs z_ACLEntity.revokecCs|tjdS)z(Grant read access to the current entity.N)rr READER_ROLErrrr grant_readQsz_ACLEntity.grant_readcCs|tjdS)z)Grant write access to the current entity.N)rr WRITER_ROLErrrr grant_writeUsz_ACLEntity.grant_writecCs|tjdS)z)Grant owner access to the current entity.N)rr OWNER_ROLErrrr grant_ownerYsz_ACLEntity.grant_ownercCs|tjdS)z+Revoke read access from the current entity.N)rrr rrrr revoke_read]sz_ACLEntity.revoke_readcCs|tjdS)z,Revoke write access from the current entity.N)rrr"rrrr revoke_writeasz_ACLEntity.revoke_writecCs|tjdS)z,Revoke owner access from the current entity.N)rrr$rrrr revoke_owneresz_ACLEntity.revoke_owner)N)__name__ __module__ __qualname____doc__r r"r$rrrrrrr!r#r%r&r'r(rrrrrs    rc@s`eZdZdZdZdZdddddd d Zed dddddd gZd Z d Z d Z d Z ddZ efddZeddZddZddZddZddZdACLz7Container class representing a list of access controls.rZ predefinedAclZprojectPrivateZ publicReadZpublicReadWriteZauthenticatedReadZbucketOwnerReadZbucketOwnerFullControl)zproject-privatez public-readzpublic-read-writezauthenticated-readzbucket-owner-readzbucket-owner-full-controlprivateFNcCs i|_dSr)entitiesrrrrrsz ACL.__init__cCs|js|j|ddS)zLoad if not already loaded. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` )timeoutN)loadedreload)r r0rrr_ensure_loadedszACL._ensure_loadedcCs.|j||}|r*||jkr*td||S)a:Ensures predefined is in list of predefined json values :type predefined: str :param predefined: name of a predefined acl :type predefined: str :param predefined: validated JSON name of predefined acl :raises: :exc: `ValueError`: If predefined is not a valid acl zInvalid predefined ACL: )PREDEFINED_XML_ACLSgetPREDEFINED_JSON_ACLS ValueError)cls predefinedrrrvalidate_predefineds zACL.validate_predefinedcCs|jd|_dS)z@Remove all entities from the ACL, and clear the ``loaded`` flag.FN)r/clearr1rrrrresets z ACL.resetccs>||jD]&}|D]}|rt||dVqqdS)N)entityr)r3r/valuesrr)r r=rrrr__iter__s  z ACL.__iter__cCs|d}|d}|dkr"|}n8|dkr4|}n&d|krZ|dd\}}|j||d}t|tsrtd||||S) aBuild an _ACLEntity object from a dictionary of data. An entity is a mutable object that represents a list of roles belonging to either a user or group or the special types for all users and all authenticated users. :type entity_dict: dict :param entity_dict: Dictionary full of data from an ACL lookup. :rtype: :class:`_ACLEntity` :returns: An Entity constructed from the dictionary. r=rallUsersallAuthenticatedUsers-rr zInvalid dictionary: )allall_authenticatedsplitr= isinstancerr7r)r Z entity_dictr=rrr rrrentity_from_dicts     zACL.entity_from_dictcCs|t||jkS)aReturns whether or not this ACL has any entries for an entity. :type entity: :class:`_ACLEntity` :param entity: The entity to check for existence in this ACL. :rtype: bool :returns: True of the entity exists in the ACL. )r3rr/r r=rrr has_entitys zACL.has_entitycCs||jt||S)aGets an entity object from the ACL. :type entity: :class:`_ACLEntity` or string :param entity: The entity to get lookup in the ACL. :type default: anything :param default: This value will be returned if the entity doesn't exist. :rtype: :class:`_ACLEntity` :returns: The corresponding entity or the value provided to ``default``. )r3r/r5r)r r=defaultrrr get_entityszACL.get_entitycCs|||jt|<dS)zAdd an entity to the ACL. :type entity: :class:`_ACLEntity` :param entity: The entity to add to this ACL. N)r3r/rrJrrr add_entityszACL.add_entitycCs0t||d}||r"||}n |||S)aFactory method for creating an Entity. If an entity with the same type and identifier already exists, this will return a reference to that entity. If not, it will create a new one and add it to the list of known entities for this ACL. :type entity_type: str :param entity_type: The type of entity to create (ie, ``user``, ``group``, etc) :type identifier: str :param identifier: The ID of the entity (if applicable). This can be either an ID or an e-mail address. :rtype: :class:`_ACLEntity` :returns: A new Entity or a reference to an existing identical entity. rD)rrKrMrN)r rr r=rrrr=s     z ACL.entitycCs|jd|dS)zFactory method for a user Entity. :type identifier: str :param identifier: An id or e-mail for this particular user. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this user. userr r=r r rrrrOs zACL.usercCs|jd|dS)zFactory method for a group Entity. :type identifier: str :param identifier: An id or e-mail for this particular group. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this group. grouprPrQrRrrrrS(s z ACL.groupcCs|jd|dS)zFactory method for a domain Entity. :type domain: str :param domain: The domain for this entity. :rtype: :class:`_ACLEntity` :returns: An entity corresponding to this domain. domainrPrQ)r rTrrrrT3s z ACL.domaincCs |dS)zFactory method for an Entity representing all users. :rtype: :class:`_ACLEntity` :returns: An entity representing all users. r@rQrrrrrE>szACL.allcCs |dS)zFactory method for an Entity representing all authenticated users. :rtype: :class:`_ACLEntity` :returns: An entity representing all authenticated users. rArQrrrrrFFszACL.all_authenticatedcCs|t|jS)zGet a list of all Entity objects. :rtype: list of :class:`_ACLEntity` objects :returns: A list of all Entity objects. )r3listr/r>rrrr get_entitiesNszACL.get_entitiescCstdS)z&Abstract getter for the object client.N)NotImplementedErrorrrrrclientWsz ACL.clientcCs|dkr|j}|S)aCheck client or verify over-ride. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: the client to use. If not passed, falls back to the ``client`` stored on the current ACL. :rtype: :class:`google.cloud.storage.client.Client` :returns: The client passed in or the currently bound client. N)rX)r rXrrr_require_client\s zACL._require_clientc Cstddr|j}||}i}|jdk r4|j|d<|j|j||||d}d|_|ddD]}| | |qbW5QRXdS) aReload the ACL data from Cloud Storage. If :attr:`user_project` is set, bills the API request to that project. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: :class:`~google.api_core.retry.Retry` :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.reloadnameN userProject query_paramsr0retryTitemsr) r reload_pathrY user_projectr/r;Z _get_resourcer1r5rNrI)r rXr0r_pathr^foundentryrrrr2ks      z ACL.reloadc Cs||}ddi} |dk r(g}|| |j<|jdk r<|j| d<t| ||||d|j} |j| |jt|i| || d} |j | |jdD]} | | | qd|_ dS) aHelper for :meth:`save` and :meth:`save_predefined`. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` Z projectionfullNr\)if_generation_matchif_generation_not_matchif_metageneration_matchif_metageneration_not_matchr]rT)rY_PREDEFINED_QUERY_PARAMrbr save_pathZ_patch_resource_URL_PATH_ELEMrUr/r;r5rNrIr1)r rr9rXrgrhrirjr0r_r^rcresultrerrr_saves44      z ACL._savec CsRtdd>|dkr |}|j} nd} | rD|j|d|||||||d W5QRXdS)a!Save this ACL for the current bucket. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.saverZNTrgrhrirjr0r_)rr1ro) r rrXrgrhrirjr0r_Zsave_to_backendrrrsaves"1 zACL.savec Cs@tdd,||}|jd||||||||d W5QRXdS)aSave this ACL for the current bucket using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.savePredefinedrZNrp)rr:ro r r9rXrgrhrirjr0r_rrrsave_predefined.s4  zACL.save_predefinedc Cs4tdd |jg|||||||dW5QRXdS)IRemove all ACL entries. If :attr:`user_project` is set, bills the API request to that project. Note that this won't actually remove *ALL* the rules, but it will remove all the non-default rules. In short, you'll still have access to a bucket that you created even after you clear ACL rules with this method. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.clearrZrXrgrhrirjr0r_N)rrqr rXrgrhrirjr0r_rrrr;ps1 z ACL.clear)N)N))r)r*r+r,rmrkr4 frozensetr6r1rarlrbrrr3 classmethodr:r<r?rIrKrMrNr=rOrSrTrErFrVpropertyrXrYrr2rrorqrsr;rrrrr-js           , Y H Dr-csPeZdZdZfddZeddZeddZedd Zed d Z Z S) BucketACLzAn ACL specifically for a bucket. :type bucket: :class:`google.cloud.storage.bucket.Bucket` :param bucket: The bucket to which this ACL relates. cstt|||_dSr)superrzrbucket)r r| __class__rrrszBucketACL.__init__cCs|jjS)z&The client bound to this ACL's bucket.)r|rXrrrrrXszBucketACL.clientcCs|jjd|jS)3Compute the path for GET API requests for this ACL./)r|rcrmrrrrraszBucketACL.reload_pathcCs|jjSz5Compute the path for PATCH API requests for this ACL.)r|rcrrrrrlszBucketACL.save_pathcCs|jjSz?Compute the user project charged for API requests for this ACL.)r|rbrrrrrbszBucketACL.user_project) r)r*r+r,rryrXrarlrb __classcell__rrr}rrzs    rzc@seZdZdZdZdZdS)DefaultObjectACLz9A class representing the default object ACL for a bucket.ZdefaultObjectAclZpredefinedDefaultObjectAclN)r)r*r+r,rmrkrrrrrsrcseZdZdZfddZeddZeddZedd Zed d Z d d d d d d e e ffd d Z d d d d d e e ffdd Z d d d d d e e ffdd ZZS) ObjectACLzAn ACL specifically for a Cloud Storage object / blob. :type blob: :class:`google.cloud.storage.blob.Blob` :param blob: The blob that this ACL corresponds to. cstt|||_dSr)r{rrblob)r rr}rrrszObjectACL.__init__cCs|jjS)z$The client bound to this ACL's blob.)rrXrrrrrXszObjectACL.clientcCs|jjdS)rz/aclrrcrrrrraszObjectACL.reload_pathcCs|jjSrrrrrrrlszObjectACL.save_pathcCs|jjSr)rrbrrrrrbszObjectACL.user_projectNc s tj||||||||ddS)a!Save this ACL for the current object. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rrXrgrhrirjr0r_N)r{rq) r rrXrgrhrirjr0r_r}rrrqs1zObjectACL.savec s tj||||||||ddS)aSave this ACL for the current object using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )r9rXrgrhrirjr0r_N)r{rsrrr}rrrs0s4zObjectACL.save_predefinedc stj|||||||ddS)rtruN)r{r;rvr}rrr;os1zObjectACL.clear)r)r*r+r,rryrXrarlrbrrrqrsr;rrrr}rrsF     ?ArN)r,Zgoogle.cloud.storage._helpersrZ+google.cloud.storage._opentelemetry_tracingrZgoogle.cloud.storage.constantsrZgoogle.cloud.storage.retryrrobjectrr-rzrrrrrrs     RH