B f cdZddlmZddlmZddlmZddlmZGddeZ Gdd eZ Gd d e Z Gd d e Z Gdde Z dS)z%Manage access to objects and buckets.) _add_generation_match_parameters)_DEFAULT_TIMEOUT) DEFAULT_RETRY))DEFAULT_RETRY_IF_METAGENERATION_SPECIFIEDcheZdZdZdZdZdZddZdZdZ d Z d Z d Z d Z d ZdZdZdZdZdS) _ACLEntityaClass representing a set of roles for an entity. This is a helper class that you likely won't ever construct outside of using the factor methods on the :class:`ACL` object. :type entity_type: str :param entity_type: The type of entity (ie, 'group' or 'user'). :type identifier: str :param identifier: (Optional) The ID or e-mail of the entity. For the special entity types (like 'allUsers'). READERWRITEROWNERNcJ||_tg|_||_dSN) identifiersetrolestype)self entity_typers g/home/panchajanya/Development/work/volatility3/lib/python3.11/site-packages/google/cloud/storage/acl.py__init__z_ACLEntity.__init__)s!$WW  cd|jst|jSd|S)Nz{acl.type}-{acl.identifier})acl)rstrrformatrs r__str__z_ACLEntity.__str__.s2 Bty>> !077D7AA ArcDd|dd|jdS)Nz )joinrrs r__repr__z_ACLEntity.__repr__4s)@t@@tyy'<'<@@@@rc|jS)zGet the list of roles permitted by this entity. :rtype: list of strings :returns: The list of roles associated with this entity. )rrs r get_rolesz_ACLEntity.get_roles7s zrc:|j|dS)zoAdd a role to the entity. :type role: str :param role: The role to add to the entity. N)raddrroles rgrantz_ACLEntity.grant?s trcP||jvr|j|dSdS)zyRemove a role from the entity. :type role: str :param role: The role to remove from the entity. N)rremover$s rrevokez_ACLEntity.revokeGs5 4:   J  d # # # # #  rcD|tjdS)z(Grant read access to the current entity.N)r&r READER_ROLErs r grant_readz_ACLEntity.grant_readP :)*****rcD|tjdS)z)Grant write access to the current entity.N)r&r WRITER_ROLErs r grant_writez_ACLEntity.grant_writeTr-rcD|tjdS)z)Grant owner access to the current entity.N)r&r OWNER_ROLErs r grant_ownerz_ACLEntity.grant_ownerXs :()))))rcD|tjdS)z+Revoke read access from the current entity.N)r)rr+rs r revoke_readz_ACLEntity.revoke_read\ J*+++++rcD|tjdS)z,Revoke write access from the current entity.N)r)rr/rs r revoke_writez_ACLEntity.revoke_write`r6rcD|tjdS)z,Revoke owner access from the current entity.N)r)rr2rs r revoke_ownerz_ACLEntity.revoke_ownerds J)*****rr )__name__ __module__ __qualname____doc__r+r/r2rrrr!r&r)r,r0r3r5r8r:rrrrs  KKJ    BBB AAA$$$++++++***,,,,,,+++++rrcReZdZdZdZdZdddddd d Zegd Z d Z d Z d Z d Z dZ efdZedZdZdZdZdZd%dZdZd%dZdZdZdZdZdZdZedZ dZ!d ee"fd Z#d d d d ee$fd!Z%d d d d d d ee$fd"Z&d d d d d ee$fd#Z'd d d d d ee$fd$Z(d S)&ACLz7Container class representing a list of access controls.r predefinedAclprojectPrivate publicReadpublicReadWriteauthenticatedReadbucketOwnerReadbucketOwnerFullControl)zproject-privatez public-readzpublic-read-writezauthenticated-readzbucket-owner-readzbucket-owner-full-control)privaterCrDrErFrGrHFNci|_dSr )entitiesrs rrz ACL.__init__s  rcD|js||dSdS)zLoad if not already loaded. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` )timeoutN)loadedreload)rrMs r_ensure_loadedzACL._ensure_loadeds2{ ) KKK ( ( ( ( ( ) )rcv|j||}|r||jvrtd||S)a:Ensures predefined is in list of predefined json values :type predefined: str :param predefined: name of a predefined acl :type predefined: str :param predefined: validated JSON name of predefined acl :raises: :exc: `ValueError`: If predefined is not a valid acl zInvalid predefined ACL: )PREDEFINED_XML_ACLSgetPREDEFINED_JSON_ACLS ValueError)cls predefineds rvalidate_predefinedzACL.validate_predefinedsO,00ZHH  F*C,DDDD DDEE ErcF|jd|_dS)z@Remove all entities from the ACL, and clear the ``loaded`` flag.FN)rKclearrNrs rresetz ACL.resets!  rc#K||jD]/}|D]}|rt ||dV0dS)N)entityr%)rPrKvaluesr!r)rr]r%s r__iter__z ACL.__iter__s m**,, @ @F((** @ @@%([[$????? @ @ @rcr|d}|d}|dkr|}nO|dkr|}n4d|vr0|dd\}}|||}t |t st d||||S) aBuild an _ACLEntity object from a dictionary of data. An entity is a mutable object that represents a list of roles belonging to either a user or group or the special types for all users and all authenticated users. :type entity_dict: dict :param entity_dict: Dictionary full of data from an ACL lookup. :rtype: :class:`_ACLEntity` :returns: An Entity constructed from the dictionary. r]r%allUsersallAuthenticatedUsers-rrzInvalid dictionary: )allall_authenticatedsplitr] isinstancerrUr&)r entity_dictr]r%rrs rentity_from_dictzACL.entity_from_dictsX&6" Z  XXZZFF . . .++--FF F]]&,ll3&:&: #K[[[Z[PPF&*-- CAKAABB B T rcV|t||jvS)aReturns whether or not this ACL has any entries for an entity. :type entity: :class:`_ACLEntity` :param entity: The entity to check for existence in this ACL. :rtype: bool :returns: True of the entity exists in the ACL. )rPrrKrr]s r has_entityzACL.has_entitys) 6{{dm++rcz||jt||S)aGets an entity object from the ACL. :type entity: :class:`_ACLEntity` or string :param entity: The entity to get lookup in the ACL. :type default: anything :param default: This value will be returned if the entity doesn't exist. :rtype: :class:`_ACLEntity` :returns: The corresponding entity or the value provided to ``default``. )rPrKrSr)rr]defaults r get_entityzACL.get_entitys4 }  Vg666rc\|||jt|<dS)zAdd an entity to the ACL. :type entity: :class:`_ACLEntity` :param entity: The entity to add to this ACL. N)rPrKrrms r add_entityzACL.add_entitys. %+ c&kk"""rct||}||r||}n|||S)aFactory method for creating an Entity. If an entity with the same type and identifier already exists, this will return a reference to that entity. If not, it will create a new one and add it to the list of known entities for this ACL. :type entity_type: str :param entity_type: The type of entity to create (ie, ``user``, ``group``, etc) :type identifier: str :param identifier: The ID of the entity (if applicable). This can be either an ID or an e-mail address. :rtype: :class:`_ACLEntity` :returns: A new Entity or a reference to an existing identical entity. re)rrnrqrs)rrrr]s rr]z ACL.entitysT& KKK ??6 " " $__V,,FF OOF # # # rc0|d|S)zFactory method for a user Entity. :type identifier: str :param identifier: An id or e-mail for this particular user. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this user. userrr]rrs rrvzACL.users{{6j{999rc0|d|S)zFactory method for a group Entity. :type identifier: str :param identifier: An id or e-mail for this particular group. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this group. grouprwrxrys rr{z ACL.group's{{7z{:::rc0|d|S)zFactory method for a domain Entity. :type domain: str :param domain: The domain for this entity. :rtype: :class:`_ACLEntity` :returns: An entity corresponding to this domain. domainrwrx)rr}s rr}z ACL.domain2s{{8{777rc,|dS)zFactory method for an Entity representing all users. :rtype: :class:`_ACLEntity` :returns: An entity representing all users. rarxrs rrfzACL.all=s {{:&&&rc,|dS)zFactory method for an Entity representing all authenticated users. :rtype: :class:`_ACLEntity` :returns: An entity representing all authenticated users. rbrxrs rrgzACL.all_authenticatedEs {{2333rcv|t|jS)zGet a list of all Entity objects. :rtype: list of :class:`_ACLEntity` objects :returns: A list of all Entity objects. )rPlistrKr^rs r get_entitieszACL.get_entitiesMs2 DM((**+++rct)z&Abstract getter for the object client.)NotImplementedErrorrs rclientz ACL.clientVs "!rc||j}|S)aCheck client or verify over-ride. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: the client to use. If not passed, falls back to the ``client`` stored on the current ACL. :rtype: :class:`google.cloud.storage.client.Client` :returns: The client passed in or the currently bound client. )r)rrs r_require_clientzACL._require_client[s >[F rcX|j}||}i}|j |j|d<|j|||||}d|_|ddD]*}|| |+dS)aReload the ACL data from Cloud Storage. If :attr:`user_project` is set, bills the API request to that project. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: :class:`~google.api_core.retry.Retry` :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` N userProject query_paramsrMretryTitemsr?) reload_pathr user_projectrKrZ _get_resourcerNrSrsrk)rrrMrpathrfoundentrys rrOz ACL.reloadjs$%%f--   (*.*;L ' $$ % %    YYw++ : :E OOD11%88 9 9 9 9 : :rc ||}ddi} | g}|| |j<|j |j| d<t| |||||j} || |jt|i| || } |j | |jdD]*} | | | +d|_ dS) aHelper for :meth:`save` and :meth:`save_predefined`. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` projectionfullNr)if_generation_matchif_generation_not_matchif_metageneration_matchif_metageneration_not_matchrr?T)r_PREDEFINED_QUERY_PARAMrr save_path_patch_resource_URL_PATH_ELEMrrKrZrSrsrkrN)rrrWrrrrrrMrrrresultrs r_savez ACL._savesh%%f--$f-  !C9CL5 6   (*.*;L '(  3$;$;(C     ~''   $s)) ,% (   ZZ 3R88 : :E OOD11%88 9 9 9 9 rc f| |}|j} nd} | r ||d||||||| dSdS)a!Save this ACL for the current bucket. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` NTrrrrrMr)rNr) rrrrrrrrMrsave_to_backends rsavezACL.savesob ;C!jOO"O   JJ$7(?(?,G        rc l||}|d|||||||| dS)aSave this ACL for the current bucket using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` Nr)rXr) rrWrrrrrrMrs rsave_predefinedzACL.save_predefined+sXh--j99     3$;$;(C  rc @|g|||||||dS)aIRemove all ACL entries. If :attr:`user_project` is set, bills the API request to that project. Note that this won't actually remove *ALL* the rules, but it will remove all the non-default rules. In short, you'll still have access to a bucket that you created even after you clear ACL rules with this method. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rrrrrrMrN)r)rrrrrrrMrs rrZz ACL.clearlsBb  3$;$;(C  rr ))r;r<r=r>rrrR frozensetrTrNrrrrrrP classmethodrXr[r_rkrnrqrsr]rvr{r}rfrgrpropertyrrrrOrrrrrZr?rrrArAisAAN-,#.1.%=%9     FKIL&6 ) ) ) )[  @@@@ , , ,7777",,,4 : : : ; ; ; 8 8 8'''444,,,""X"   !*:-$:$:$:$:V! $ $$( 7UUUUr  $ $$( 7BBBBN $ $$( 7? ? ? ? F $ $$( 7: : : : : : rrAczeZdZdZfdZedZedZedZedZ xZ S) BucketACLzAn ACL specifically for a bucket. :type bucket: :class:`google.cloud.storage.bucket.Bucket` :param bucket: The bucket to which this ACL relates. cdtt|||_dSr )superrrbucket)rr __class__s rrzBucketACL.__init__s* i''))) rc|jjS)z&The client bound to this ACL's bucket.)rrrs rrzBucketACL.clients{!!rc.|jjd|jS)3Compute the path for GET API requests for this ACL./)rrrrs rrzBucketACL.reload_paths +"::T%8:::rc|jjSz5Compute the path for PATCH API requests for this ACL.)rrrs rrzBucketACL.save_paths{rc|jjSz?Compute the user project charged for API requests for this ACL.)rrrs rrzBucketACL.user_projects{''r r;r<r=r>rrrrrr __classcell__rs@rrrs ""X";;X;  X ((X(((((rrceZdZdZdZdZdS)DefaultObjectACLz9A class representing the default object ACL for a bucket.defaultObjectAclpredefinedDefaultObjectAclN)r;r<r=r>rrr?rrrrs!CC'N:rrczeZdZdZfdZedZedZedZedZ xZ S) ObjectACLzAn ACL specifically for a Cloud Storage object / blob. :type blob: :class:`google.cloud.storage.blob.Blob` :param blob: The blob that this ACL corresponds to. cdtt|||_dSr )rrrblob)rrrs rrzObjectACL.__init__s* i''))) rc|jjS)z$The client bound to this ACL's blob.)rrrs rrzObjectACL.clientsyrc |jjdS)rz/aclrrrs rrzObjectACL.reload_paths).&&&&rc|jjSrrrs rrzObjectACL.save_pathsy~rc|jjSr)rrrs rrzObjectACL.user_projectsy%%rrrs@rrrs   X ''X'X&&X&&&&&rrN)r>google.cloud.storage._helpersrgoogle.cloud.storage.constantsrgoogle.cloud.storage.retryrrobjectrrArrrr?rrrsD,+JJJJJJ;;;;;;444444PPPPPPO+O+O+O+O+O+O+O+d} } } } } &} } } @((((((((@;;;;;y;;;&&&&&&&&&&r