VSf cdZddlmZddlmZddlmZddlmZGddeZ Gdd eZ Gd d e Z Gd d e Z Gdde Z y)z%Manage access to objects and buckets.) _add_generation_match_parameters)_DEFAULT_TIMEOUT) DEFAULT_RETRY))DEFAULT_RETRY_IF_METAGENERATION_SPECIFIEDcfeZdZdZdZdZdZddZdZdZ d Z d Z d Z d Z d ZdZdZdZdZy) _ACLEntityaClass representing a set of roles for an entity. This is a helper class that you likely won't ever construct outside of using the factor methods on the :class:`ACL` object. :type entity_type: str :param entity_type: The type of entity (ie, 'group' or 'user'). :type identifier: str :param identifier: (Optional) The ID or e-mail of the entity. For the special entity types (like 'allUsers'). READERWRITEROWNERNc@||_tg|_||_yN) identifiersetrolestype)self entity_typers WC:\Users\user\Documents\project_loop\venv\Lib\site-packages\google/cloud/storage/acl.py__init__z_ACLEntity.__init__)s$W  ch|jst|jSdj|S)Nz{acl.type}-{acl.identifier})acl)rstrrformatrs r__str__z_ACLEntity.__str__.s+tyy> !077D7A ArcFd|ddj|jdS)Nz )joinrrs r__repr__z_ACLEntity.__repr__4s%tfBtyy'<&=R@@rc|jS)zGet the list of roles permitted by this entity. :rtype: list of strings :returns: The list of roles associated with this entity. )rrs r get_rolesz_ACLEntity.get_roles7s zzrc:|jj|y)zoAdd a role to the entity. :type role: str :param role: The role to add to the entity. N)raddrroles rgrantz_ACLEntity.grant?s trcX||jvr|jj|yy)zyRemove a role from the entity. :type role: str :param role: The role to remove from the entity. N)rremover$s rrevokez_ACLEntity.revokeGs' 4::  JJ  d # rcB|jtjy)z(Grant read access to the current entity.N)r&r READER_ROLErs r grant_readz_ACLEntity.grant_readP :))*rcB|jtjy)z)Grant write access to the current entity.N)r&r WRITER_ROLErs r grant_writez_ACLEntity.grant_writeTr-rcB|jtjy)z)Grant owner access to the current entity.N)r&r OWNER_ROLErs r grant_ownerz_ACLEntity.grant_ownerXs :(()rcB|jtjy)z+Revoke read access from the current entity.N)r)rr+rs r revoke_readz_ACLEntity.revoke_read\ J**+rcB|jtjy)z,Revoke write access from the current entity.N)r)rr/rs r revoke_writez_ACLEntity.revoke_write`r6rcB|jtjy)z,Revoke owner access from the current entity.N)r)rr2rs r revoke_ownerz_ACLEntity.revoke_ownerds J))*rr )__name__ __module__ __qualname____doc__r+r/r2rrrr!r&r)r,r0r3r5r8r:rrrrsV KKJ B A$++*,,+rrc>eZdZdZdZdZdddddd d Zegd Z d Z d Z d Z d Z dZ efdZedZdZdZdZdZd%dZdZd%dZdZdZdZdZdZdZedZ dZ!d ee"fd Z#d d d d ee$fd!Z%d d d d d d ee$fd"Z&d d d d d ee$fd#Z'd d d d d ee$fd$Z(y )&ACLz7Container class representing a list of access controls.r predefinedAclprojectPrivate publicReadpublicReadWriteauthenticatedReadbucketOwnerReadbucketOwnerFullControl)zproject-privatez public-readzpublic-read-writezauthenticated-readzbucket-owner-readzbucket-owner-full-control)privaterCrDrErFrGrHFNci|_yr )entitiesrs rrz ACL.__init__s  rcB|js|j|yy)zLoad if not already loaded. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` )timeoutN)loadedreload)rrMs r_ensure_loadedzACL._ensure_loadeds{{ KKK (rcz|jj||}|r||jvrtd||S)a:Ensures predefined is in list of predefined json values :type predefined: str :param predefined: name of a predefined acl :type predefined: str :param predefined: validated JSON name of predefined acl :raises: :exc: `ValueError`: If predefined is not a valid acl zInvalid predefined ACL: )PREDEFINED_XML_ACLSgetPREDEFINED_JSON_ACLS ValueError)cls predefineds rvalidate_predefinedzACL.validate_predefinedsE,,00ZH *C,D,DD7 |DE ErcF|jjd|_y)z@Remove all entities from the ACL, and clear the ``loaded`` flag.FN)rKclearrNrs rresetz ACL.resets  rc#K|j|jjD]*}|jD]}|st ||d,yw)N)entityr%)rPrKvaluesr!r)rr]r%s r__iter__z ACL.__iter__s\ mm**, @F((* @%([$?? @ @s AAAc(|d}|d}|dk(r|j}nB|dk(r|j}n,d|vr(|jdd\}}|j||}t |t st d||j||S) aBuild an _ACLEntity object from a dictionary of data. An entity is a mutable object that represents a list of roles belonging to either a user or group or the special types for all users and all authenticated users. :type entity_dict: dict :param entity_dict: Dictionary full of data from an ACL lookup. :rtype: :class:`_ACLEntity` :returns: An Entity constructed from the dictionary. r]r%allUsersallAuthenticatedUsers-rrzInvalid dictionary: )allall_authenticatedsplitr] isinstancerrUr&)r entity_dictr]r%rrs rentity_from_dictzACL.entity_from_dictsX&6" Z XXZF . .++-F F]&,ll3&: #K[[[Z[PF&*-3K=AB B T rcP|jt||jvS)aReturns whether or not this ACL has any entries for an entity. :type entity: :class:`_ACLEntity` :param entity: The entity to check for existence in this ACL. :rtype: bool :returns: True of the entity exists in the ACL. )rPrrKrr]s r has_entityzACL.has_entitys# 6{dmm++rcl|j|jjt||S)aGets an entity object from the ACL. :type entity: :class:`_ACLEntity` or string :param entity: The entity to get lookup in the ACL. :type default: anything :param default: This value will be returned if the entity doesn't exist. :rtype: :class:`_ACLEntity` :returns: The corresponding entity or the value provided to ``default``. )rPrKrSr)rr]defaults r get_entityzACL.get_entitys+ }}  Vg66rcT|j||jt|<y)zAdd an entity to the ACL. :type entity: :class:`_ACLEntity` :param entity: The entity to add to this ACL. N)rPrKrrms r add_entityzACL.add_entitys" %+ c&k"rct||}|j|r|j|}|S|j||S)aFactory method for creating an Entity. If an entity with the same type and identifier already exists, this will return a reference to that entity. If not, it will create a new one and add it to the list of known entities for this ACL. :type entity_type: str :param entity_type: The type of entity to create (ie, ``user``, ``group``, etc) :type identifier: str :param identifier: The ID of the entity (if applicable). This can be either an ID or an e-mail address. :rtype: :class:`_ACLEntity` :returns: A new Entity or a reference to an existing identical entity. re)rrnrqrs)rrrr]s rr]z ACL.entitysD& K ??6 "__V,F  OOF # rc(|jd|S)zFactory method for a user Entity. :type identifier: str :param identifier: An id or e-mail for this particular user. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this user. userrr]rrs rrvzACL.users{{6j{99rc(|jd|S)zFactory method for a group Entity. :type identifier: str :param identifier: An id or e-mail for this particular group. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this group. grouprwrxrys rr{z ACL.group's{{7z{::rc(|jd|S)zFactory method for a domain Entity. :type domain: str :param domain: The domain for this entity. :rtype: :class:`_ACLEntity` :returns: An entity corresponding to this domain. domainrwrx)rr}s rr}z ACL.domain2s{{8{77rc$|jdS)zFactory method for an Entity representing all users. :rtype: :class:`_ACLEntity` :returns: An entity representing all users. rarxrs rrfzACL.all=s {{:&&rc$|jdS)zFactory method for an Entity representing all authenticated users. :rtype: :class:`_ACLEntity` :returns: An entity representing all authenticated users. rbrxrs rrgzACL.all_authenticatedEs {{233rch|jt|jjS)zGet a list of all Entity objects. :rtype: list of :class:`_ACLEntity` objects :returns: A list of all Entity objects. )rPlistrKr^rs r get_entitieszACL.get_entitiesMs( DMM((*++rct)z&Abstract getter for the object client.)NotImplementedErrorrs rclientz ACL.clientVs "!rc"| |j}|S)aCheck client or verify over-ride. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: the client to use. If not passed, falls back to the ``client`` stored on the current ACL. :rtype: :class:`google.cloud.storage.client.Client` :returns: The client passed in or the currently bound client. )r)rrs r_require_clientzACL._require_client[s >[[F rcR|j}|j|}i}|j|j|d<|jj |j ||||}d|_|jddD]"}|j|j|$y)aReload the ACL data from Cloud Storage. If :attr:`user_project` is set, bills the API request to that project. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: :class:`~google.api_core.retry.Retry` :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` N userProject query_paramsrMretryTitemsr?) reload_pathr user_projectrKrZ _get_resourcerNrSrsrk)rrrMrpathrfoundentrys rrOz ACL.reloadjs$%%f-    (*.*;*;L ' $$ % %   YYw+ :E OOD11%8 9 :rc |j|}ddi} |g}|| |j<|j|j| d<t| |||||j} |j | |j t|i| || } |jj| j|j dD]"} |j|j| $d|_ y) aHelper for :meth:`save` and :meth:`save_predefined`. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` projectionfullNr)if_generation_matchif_generation_not_matchif_metageneration_matchif_metageneration_not_matchrr?T)r_PREDEFINED_QUERY_PARAMrr save_path_patch_resource_URL_PATH_ELEMrrKrZrSrsrkrN)rrrWrrrrrrMrrrresultrs r_savez ACL._savesh%%f-$f-  !C9CL55 6    (*.*;*;L '(  3$;$;(C  ~~''   $s) ,% (  ZZ 3 3R8 :E OOD11%8 9 : rc d||}|j} nd} | r|j|d||||||| yy)a!Save this ACL for the current bucket. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` NTrrrrrMr)rNr) rrrrrrrrMrsave_to_backends rsavezACL.savesQb ;C!jjO"O  JJ$7(?(?,G   rc Z|j|}|jd|||||||| y)aSave this ACL for the current bucket using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` Nr)rXr) rrWrrrrrrMrs rsave_predefinedzACL.save_predefined+sAh--j9     3$;$;(C  rc 6|jg|||||||y)aIRemove all ACL entries. If :attr:`user_project` is set, bills the API request to that project. Note that this won't actually remove *ALL* the rules, but it will remove all the non-default rules. In short, you'll still have access to a bucket that you created even after you clear ACL rules with this method. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rrrrrrMrN)r)rrrrrrrMrs rrZz ACL.clearls.b  3$;$;(C  rr ))r;r<r=r>rrrR frozensetrTrNrrrrrrP classmethodrXr[r_rkrnrqrsr]rvr{r}rfrgrpropertyrrrrOrrrrrZr?rrrArAis_AN-,#.1.%=%  FKIL&6 )  @@ ,7",4 : ; 8'4,"" !*:-$:V! $ $$( 7Ur  $ $$( 7BN $ $$( 7? F $ $$( 7: rrAcbeZdZdZfdZedZedZedZedZ xZ S) BucketACLzAn ACL specifically for a bucket. :type bucket: :class:`google.cloud.storage.bucket.Bucket` :param bucket: The bucket to which this ACL relates. c8tt| ||_yr )superrrbucket)rr __class__s rrzBucketACL.__init__s i') rc.|jjS)z&The client bound to this ACL's bucket.)rrrs rrzBucketACL.clients{{!!!rcL|jjd|jS)3Compute the path for GET API requests for this ACL./)rrrrs rrzBucketACL.reload_paths'++""#1T%8%8$9::rc.|jjSz5Compute the path for PATCH API requests for this ACL.)rrrs rrzBucketACL.save_paths{{rc.|jjSz?Compute the user project charged for API requests for this ACL.)rrrs rrzBucketACL.user_projects{{'''r r;r<r=r>rrrrrr __classcell__rs@rrrs] "";;  ((rrceZdZdZdZdZy)DefaultObjectACLz9A class representing the default object ACL for a bucket.defaultObjectAclpredefinedDefaultObjectAclN)r;r<r=r>rrr?rrrrsC'N:rrcbeZdZdZfdZedZedZedZedZ xZ S) ObjectACLzAn ACL specifically for a Cloud Storage object / blob. :type blob: :class:`google.cloud.storage.blob.Blob` :param blob: The blob that this ACL corresponds to. c8tt| ||_yr )rrrblob)rrrs rrzObjectACL.__init__s i') rc.|jjS)z$The client bound to this ACL's blob.)rrrs rrzObjectACL.clientsyyrc4|jjdS)rz/aclrrrs rrzObjectACL.reload_paths))..!&&rc.|jjSrrrs rrzObjectACL.save_pathsyy~~rc.|jjSr)rrrs rrzObjectACL.user_projectsyy%%%rrrs@rrrs]   ''&&rrN)r>google.cloud.storage._helpersrgoogle.cloud.storage.constantsrgoogle.cloud.storage.retryrrobjectrrArrrr?rrrsY,J;4PO+O+d} &} @((@;y;&&r