h|dZddlmZddlmZddlmZddlmZddlm Z Gdde Z Gd d e Z Gd d e Z Gd de ZGdde ZdS)z%Manage access to objects and buckets.) _add_generation_match_parameters)create_trace_span)_DEFAULT_TIMEOUT) DEFAULT_RETRY))DEFAULT_RETRY_IF_METAGENERATION_SPECIFIEDcheZdZdZdZdZdZddZdZdZ d Z d Z d Z d Z d ZdZdZdZdZdS) _ACLEntityaClass representing a set of roles for an entity. This is a helper class that you likely won't ever construct outside of using the factor methods on the :class:`ACL` object. :type entity_type: str :param entity_type: The type of entity (ie, 'group' or 'user'). :type identifier: str :param identifier: (Optional) The ID or e-mail of the entity. For the special entity types (like 'allUsers'). READERWRITEROWNERNcJ||_tg|_||_dSN) identifiersetrolestype)self entity_typers \/var/www/html/e360mart/e360mart_env/lib/python3.11/site-packages/google/cloud/storage/acl.py__init__z_ACLEntity.__init__*s!$WW  cd|jst|jSd|S)Nz{acl.type}-{acl.identifier})acl)rstrrformatrs r__str__z_ACLEntity.__str__/s2 Bty>> !077D7AA ArcDd|dd|jdS)Nz )joinrrs r__repr__z_ACLEntity.__repr__5s)@t@@tyy'<'<@@@@rc|jS)zGet the list of roles permitted by this entity. :rtype: list of strings :returns: The list of roles associated with this entity. )rrs r get_rolesz_ACLEntity.get_roles8s zrc:|j|dS)zoAdd a role to the entity. :type role: str :param role: The role to add to the entity. N)raddrroles rgrantz_ACLEntity.grant@s trcP||jvr|j|dSdS)zyRemove a role from the entity. :type role: str :param role: The role to remove from the entity. N)rremover%s rrevokez_ACLEntity.revokeHs5 4:   J  d # # # # #  rcD|tjdS)z(Grant read access to the current entity.N)r'r READER_ROLErs r grant_readz_ACLEntity.grant_readQ :)*****rcD|tjdS)z)Grant write access to the current entity.N)r'r WRITER_ROLErs r grant_writez_ACLEntity.grant_writeUr.rcD|tjdS)z)Grant owner access to the current entity.N)r'r OWNER_ROLErs r grant_ownerz_ACLEntity.grant_ownerYs :()))))rcD|tjdS)z+Revoke read access from the current entity.N)r*r r,rs r revoke_readz_ACLEntity.revoke_read] J*+++++rcD|tjdS)z,Revoke write access from the current entity.N)r*r r0rs r revoke_writez_ACLEntity.revoke_writear7rcD|tjdS)z,Revoke owner access from the current entity.N)r*r r3rs r revoke_ownerz_ACLEntity.revoke_owneres J)*****rr)__name__ __module__ __qualname____doc__r,r0r3rrr r"r'r*r-r1r4r6r9r;rrr r s  KKJ    BBB AAA$$$++++++***,,,,,,+++++rr cReZdZdZdZdZdddddd d Zegd Z d Z d Z d Z d Z dZ efdZedZdZdZdZdZd%dZdZd%dZdZdZdZdZdZdZedZ dZ!d ee"fd Z#d d d d ee$fd!Z%d d d d d d ee$fd"Z&d d d d d ee$fd#Z'd d d d d ee$fd$Z(d S)&ACLz7Container class representing a list of access controls.r predefinedAclprojectPrivate publicReadpublicReadWriteauthenticatedReadbucketOwnerReadbucketOwnerFullControl)zproject-privatez public-readzpublic-read-writezauthenticated-readzbucket-owner-readzbucket-owner-full-control)privaterDrErFrGrHrIFNci|_dSr)entitiesrs rrz ACL.__init__s  rcD|js||dSdS)zLoad if not already loaded. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` )timeoutN)loadedreload)rrNs r_ensure_loadedzACL._ensure_loadeds2{ ) KKK ( ( ( ( ( ) )rcv|j||}|r||jvrtd||S)a:Ensures predefined is in list of predefined json values :type predefined: str :param predefined: name of a predefined acl :type predefined: str :param predefined: validated JSON name of predefined acl :raises: :exc: `ValueError`: If predefined is not a valid acl zInvalid predefined ACL: )PREDEFINED_XML_ACLSgetPREDEFINED_JSON_ACLS ValueError)cls predefineds rvalidate_predefinedzACL.validate_predefinedsO,00ZHH  F*C,DDDD DDEE ErcF|jd|_dS)z@Remove all entities from the ACL, and clear the ``loaded`` flag.FN)rLclearrOrs rresetz ACL.resets!  rc#K||jD]/}|D]}|rt ||dV0dS)N)entityr&)rQrLvaluesr"r)rr^r&s r__iter__z ACL.__iter__s m**,, @ @F((** @ @@%([[$????? @ @ @rcr|d}|d}|dkr|}nO|dkr|}n4d|vr0|dd\}}|||}t |t st d||||S) aBuild an _ACLEntity object from a dictionary of data. An entity is a mutable object that represents a list of roles belonging to either a user or group or the special types for all users and all authenticated users. :type entity_dict: dict :param entity_dict: Dictionary full of data from an ACL lookup. :rtype: :class:`_ACLEntity` :returns: An Entity constructed from the dictionary. r^r&allUsersallAuthenticatedUsers-rrzInvalid dictionary: )allall_authenticatedsplitr^ isinstancer rVr')r entity_dictr^r&rrs rentity_from_dictzACL.entity_from_dictsX&6" Z  XXZZFF . . .++--FF F]]&,ll3&:&: #K[[[Z[PPF&*-- CAKAABB B T rcV|t||jvS)aReturns whether or not this ACL has any entries for an entity. :type entity: :class:`_ACLEntity` :param entity: The entity to check for existence in this ACL. :rtype: bool :returns: True of the entity exists in the ACL. )rQrrLrr^s r has_entityzACL.has_entitys) 6{{dm++rcz||jt||S)aGets an entity object from the ACL. :type entity: :class:`_ACLEntity` or string :param entity: The entity to get lookup in the ACL. :type default: anything :param default: This value will be returned if the entity doesn't exist. :rtype: :class:`_ACLEntity` :returns: The corresponding entity or the value provided to ``default``. )rQrLrTr)rr^defaults r get_entityzACL.get_entitys4 }  Vg666rc\|||jt|<dS)zAdd an entity to the ACL. :type entity: :class:`_ACLEntity` :param entity: The entity to add to this ACL. N)rQrLrrns r add_entityzACL.add_entitys. %+ c&kk"""rct||}||r||}n|||S)aFactory method for creating an Entity. If an entity with the same type and identifier already exists, this will return a reference to that entity. If not, it will create a new one and add it to the list of known entities for this ACL. :type entity_type: str :param entity_type: The type of entity to create (ie, ``user``, ``group``, etc) :type identifier: str :param identifier: The ID of the entity (if applicable). This can be either an ID or an e-mail address. :rtype: :class:`_ACLEntity` :returns: A new Entity or a reference to an existing identical entity. rf)r rorrrt)rrrr^s rr^z ACL.entitysT& KKK ??6 " " $__V,,FF OOF # # # rc0|d|S)zFactory method for a user Entity. :type identifier: str :param identifier: An id or e-mail for this particular user. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this user. userrr^rrs rrwzACL.users{{6j{999rc0|d|S)zFactory method for a group Entity. :type identifier: str :param identifier: An id or e-mail for this particular group. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this group. grouprxryrzs rr|z ACL.group(s{{7z{:::rc0|d|S)zFactory method for a domain Entity. :type domain: str :param domain: The domain for this entity. :rtype: :class:`_ACLEntity` :returns: An entity corresponding to this domain. domainrxry)rr~s rr~z ACL.domain3s{{8{777rc,|dS)zFactory method for an Entity representing all users. :rtype: :class:`_ACLEntity` :returns: An entity representing all users. rbryrs rrgzACL.all>s {{:&&&rc,|dS)zFactory method for an Entity representing all authenticated users. :rtype: :class:`_ACLEntity` :returns: An entity representing all authenticated users. rcryrs rrhzACL.all_authenticatedFs {{2333rcv|t|jS)zGet a list of all Entity objects. :rtype: list of :class:`_ACLEntity` objects :returns: A list of all Entity objects. )rQlistrLr_rs r get_entitieszACL.get_entitiesNs2 DM((**+++rct)z&Abstract getter for the object client.)NotImplementedErrorrs rclientz ACL.clientWs "!rc||j}|S)aCheck client or verify over-ride. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: the client to use. If not passed, falls back to the ``client`` stored on the current ACL. :rtype: :class:`google.cloud.storage.client.Client` :returns: The client passed in or the currently bound client. )r)rrs r_require_clientzACL._require_client\s >[F rctd5|j}||}i}|j |j|d<|j|||||}d|_|ddD]*}| | |+ ddddS#1swxYwYdS) aReload the ACL data from Cloud Storage. If :attr:`user_project` is set, bills the API request to that project. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: :class:`~google.api_core.retry.Retry` :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.reloadnameN userProject query_paramsrNretryTitemsr@) r reload_pathr user_projectrLr[ _get_resourcerOrTrtrl)rrrNrpathrfoundentrys rrPz ACL.reloadks8$$8 9 9 9 > >#D))&11FL ,.2.? ]+ M   ! ! !(() )E DK7B// > > 5 5e < <==== >% > > > > > > > > > > > > > > > > > >sB*C  C C c ||}ddi} | g}|| |j<|j |j| d<t| |||||j} || |jt|i| || } |j | |jdD]*} | | | +d|_ dS) aHelper for :meth:`save` and :meth:`save_predefined`. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` projectionfullNr)if_generation_matchif_generation_not_matchif_metageneration_matchif_metageneration_not_matchrr@T)r_PREDEFINED_QUERY_PARAMrr save_path_patch_resource_URL_PATH_ELEMrrLr[rTrtrlrO)rrrXrrrrrrNrrrresultrs r_savez ACL._savesh%%f--$f-  !C9CL5 6   (*.*;L '(  3$;$;(C     ~''   $s)) ,% (   ZZ 3R88 : :E OOD11%88 9 9 9 9 rc td5| |}|j} nd} | r||d||||||| ddddS#1swxYwYdS)a!Save this ACL for the current bucket. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.saverNTrrrrrNr)rrOr) rrrrrrrrNrsave_to_backends rsavezACL.savesb$6 7 7 7  {"%*"&  (;,C,C0K#                     s/A  AAc td5||}|d|||||||| ddddS#1swxYwYdS)aSave this ACL for the current bucket using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.savePredefinedrNr)rrYr) rrXrrrrrrNrs rsave_predefinedzACL.save_predefined.sh$@ A A A  11*==J JJ$7(?(?,G                      s4AAAc td5|g|||||||ddddS#1swxYwYdS)IRemove all ACL entries. If :attr:`user_project` is set, bills the API request to that project. Note that this won't actually remove *ALL* the rules, but it will remove all the non-default rules. In short, you'll still have access to a bucket that you created even after you clear ACL rules with this method. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.clearrrrrrrrNrN)rr)rrrrrrrNrs rr[z ACL.clearpsb$7 8 8 8   II$7(?(?,G                      s<AAr))r<r=r>r?rrrS frozensetrUrOrrrrrrQ classmethodrYr\r`rlrorrrtr^rwr|r~rgrhrpropertyrrrrPrrrrr[r@rrrBrBjsAAN-,#.1.%=%9     FKIL&6 ) ) ) )[  @@@@ , , ,7777",,,4 : : : ; ; ; 8 8 8'''444,,,""X"   !*:-%>%>%>%>X! $ $$( 7UUUUr  $ $$( 7CCCCP $ $$( 7@@@@H $ $$( 7;;;;;;rrBczeZdZdZfdZedZedZedZedZ xZ S) BucketACLzAn ACL specifically for a bucket. :type bucket: :class:`google.cloud.storage.bucket.Bucket` :param bucket: The bucket to which this ACL relates. cdtt|||_dSr)superrrbucket)rr __class__s rrzBucketACL.__init__s* i''))) rc|jjS)z&The client bound to this ACL's bucket.)rrrs rrzBucketACL.clients{!!rc.|jjd|jS)3Compute the path for GET API requests for this ACL./)rrrrs rrzBucketACL.reload_paths +"::T%8:::rc|jjSz5Compute the path for PATCH API requests for this ACL.)rrrs rrzBucketACL.save_paths{rc|jjSz?Compute the user project charged for API requests for this ACL.)rrrs rrzBucketACL.user_projects{''r) r<r=r>r?rrrrrr __classcell__rs@rrrs ""X";;X;  X ((X(((((rrceZdZdZdZdZdS)DefaultObjectACLz9A class representing the default object ACL for a bucket.defaultObjectAclpredefinedDefaultObjectAclN)r<r=r>r?rrr@rrrrs!CC'N:rrceZdZdZfdZedZedZedZedZ dddddde e ffd Z ddddde e ffd Z ddddde e ffd ZxZS) ObjectACLzAn ACL specifically for a Cloud Storage object / blob. :type blob: :class:`google.cloud.storage.blob.Blob` :param blob: The blob that this ACL corresponds to. cdtt|||_dSr)rrrblob)rrrs rrzObjectACL.__init__s* i''))) rc|jjS)z$The client bound to this ACL's blob.)rrrs rrzObjectACL.clientsyrc |jjdS)rz/aclrrrs rrzObjectACL.reload_paths).&&&&rc|jjSrrrs rrzObjectACL.save_pathsy~rc|jjSr)rrrs rrzObjectACL.user_projectsy%%rNc Zt||||||||dS)a!Save this ACL for the current object. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rrrrrrrNrN)rr) rrrrrrrrNrrs rrzObjectACL.savesGb   3$;$;(C  rc Zt||||||||dS)aSave this ACL for the current object using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rXrrrrrrNrN)rr) rrXrrrrrrNrrs rrzObjectACL.save_predefined0sIh ! 3$;$;(C rc Xt|||||||dS)rrN)rr[) rrrrrrrNrrs rr[zObjectACL.clearosDb   3$;$;(C      r)r<r=r>r?rrrrrrrrrrr[rrs@rrrsR   X ''X'X&&X&  $ $$( : : : : : : ~ $ $$( = = = = = = B $ $$( 9 9 9 9 9 9 9 9 9 9 rrN)r?google.cloud.storage._helpersr+google.cloud.storage._opentelemetry_tracingrgoogle.cloud.storage.constantsrgoogle.cloud.storage.retryrrobjectr rBrrrr@rrrs`,+JJJJJJIIIIII;;;;;;444444PPPPPPO+O+O+O+O+O+O+O+dA A A A A &A A A H((((((((@;;;;;y;;;S S S S S S S S S S r