|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/trac/__pycache__/ |
Upload File : |
o
�k�`Ƚ � @ s� d dl m Z d dlmZ d dlmZmZ d dlZd dlZd dlZd dl Z d dl
Z
d dl m Z m
Z
mZmZmZ d dlmZmZ d dlT d dlT d dlmZ d dlT d d lmZmZ d d
l m Z m Z m Z m Z m!Z! d d l"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z( d d l)m*Z* d d
l+m,Z,m-Z-m.Z.m/Z/m0Z0 d dl1m2Z2m3Z3 d dl4m5Z5m6Z6m7Z7 d dl8m9Z9m:Z:m;Z;m<Z<m=Z=m>Z> d dl?m@Z@ d dlAmBZB d dlCmDZD G dd� deE�ZFG dd� deE�ZGG dd� deE�ZHG dd� deI�ZJG d d � d eK�ZLG d d � d eI�ZMG d d!� d!eI�ZNdS )"� )�datetime)�
TemporaryFile)�ZipFile� ZIP_DEFLATEDN)�AdminCommandError�IAdminCommandProvider�
PrefixList�console_datetime_format� get_dir_list)�
BoolOption� IntOption)�*)�IPermissionPolicy)�
search_to_sql�shorten_result)�content_disposition�create_zipinfo� file_or_std�get_reporter_id�normalize_filename)� datetime_now�format_datetime�from_utimestamp� to_datetime�
to_utimestamp�utc)�tag)�exception_to_unicode�path_to_unicode� pretty_size� print_table�unicode_unquote)�_�tag_)�HTTPBadRequest�IRequestHandler� RequestDone)�INavigationContributor� add_ctxtnav�add_link�add_stylesheet� web_context� add_warning)�Href)�IWikiSyntaxProvider)� format_toc @ s( e Zd ZdZdd� Zdd� Zdd� ZdS ) �IAttachmentChangeListenerz�Extension point interface for components that require
notification when attachments are created, deleted, renamed
or reparented.
c C � dS )z#Called when an attachment is added.N� ��
attachmentr2 r2 �1/usr/lib/python3/dist-packages/trac/attachment.py�attachment_added: � z*IAttachmentChangeListener.attachment_addedc C r1 )z%Called when an attachment is deleted.Nr2 r3 r2 r2 r5 �attachment_deleted= r7 z,IAttachmentChangeListener.attachment_deletedc C r1 )z#Called when an attachment is moved.Nr2 )r4 �old_parent_realm�
old_parent_id� old_filenamer2 r2 r5 �attachment_moved@ r7 z*IAttachmentChangeListener.attachment_movedN)�__name__�
__module__� __qualname__�__doc__r6 r8 r< r2 r2 r2 r5 r0 4 s
r0 c @ s e Zd ZdZdd� Zdd� ZdS )�IAttachmentManipulatorz�Extension point interface for components that need to
manipulate attachments.
Unlike change listeners, a manipulator can reject changes being
committed to the database.c C r1 )zNNot currently called, but should be provided for future
compatibility.Nr2 )�reqr4 �fieldsr2 r2 r5 �prepare_attachmentL r7 z)IAttachmentManipulator.prepare_attachmentc C r1 )a� Validate an attachment after upload but before being stored
in Trac environment.
Must return a list of ``(field, message)`` tuples, one for
each problem detected. ``field`` can be any of
``description``, ``username``, ``filename``, ``content``, or
`None` to indicate an overall problem with the
attachment. Therefore, a return value of ``[]`` means
everything is OK.Nr2 )rB r4 r2 r2 r5 �validate_attachmentP r7 z*IAttachmentManipulator.validate_attachmentN)r= r> r? r@ rD rE r2 r2 r2 r5 rA E s rA c @ s e Zd ZdZdd� ZdS )� ILegacyAttachmentPolicyDelegatea Interface that can be used by plugins to seamlessly participate
to the legacy way of checking for attachment permissions.
This should no longer be necessary once it becomes easier to
setup fine-grained permissions in the default permission store.
c C r1 )a� Return the usual `True`/`False`/`None` security policy
decision appropriate for the requested action on an
attachment.
:param action: one of ATTACHMENT_VIEW, ATTACHMENT_CREATE,
ATTACHMENT_DELETE
:param username: the user string
:param resource: the `~trac.resource.Resource` for the
attachment. Note that when
ATTACHMENT_CREATE is checked, the
resource ``.id`` will be `None`.
:param perm: the permission cache for that username and resource
Nr2 )�action�username�resource�permr2 r2 r5 �check_attachment_permissiond r7 z;ILegacyAttachmentPolicyDelegate.check_attachment_permissionN)r= r> r? r@ rK r2 r2 r2 r5 rF \ s rF c @ s$ e Zd Zeeeee� dZdZ e
e �Z e
e
�ZdZedddd�Zedddd �Zedd
d d �Zd
d� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd� Zdd � Z d d � Z d d � Z d!d"� Z d#d$� Z d%d&� Z!d'd(� Z"d>d*d+�Z#d,d-� Z$d.d/� Z%d0d1� Z&d2d3� Z'd4d5� Z(d>d6d7�Z)d8d9� Z*d:d;� Z+d<d=� Z,d)S )?�AttachmentModuler4 F� �max_sizei z5Maximum allowed file size (in bytes) for attachments.� max_zip_sizei z�Maximum allowed total size (in bytes) for an attachment list to be
downloadable as a `.zip`. Set this to -1 to disable download as
`.zip`. (''since 1.0'')
�render_unsafe_content�falsea� Whether attachments should be rendered in the browser, or
only made downloadable.
Pretty much any file may be interpreted as HTML by the browser,
which allows a malicious user to attach a file containing cross-site
scripting attacks.
For public sites where anonymous users can create attachments it is
recommended to leave this option disabled.
c C s |j �d�S )N�realm)�args�get��selfrB r2 r2 r5 �get_active_navigation_item� s z+AttachmentModule.get_active_navigation_itemc C � g S �Nr2 rU r2 r2 r5 �get_navigation_items� � z%AttachmentModule.get_navigation_itemsc C sV t �d|j�}|r)|�� \}}}|r|d d� |jd< ||jd< |r'||jd< dS d S )Nz*/(raw-|zip-)?attachment/([^/]+)(?:/(.*))?$����formatrR �pathT)�re�match� path_info�groupsrS )rV rB r` r] rR r^ r2 r2 r5 �
match_request� s �
�z AttachmentModule.match_requestc
C s� |j �d�}|j �d�}|r|sttd���|dkr%ttdt�|�d���t|�}|j �dd�}|d kr=|� d
�d }}n |�
d
�}|d krL|d }}n|d |� ||d
d � }}||d�}t | j |�srt
tdt| j |�d���t| j |�} t| j ||j�}
t|d|
| � t|td| d�|
� |s�|j �d�dkr�| �||� n
|d kr�| �||�S t| j |�| j|��} |jdkr�|d kr�| �|| �} n-|dkr�| �|| � n"ttd���|dkr�| �|| �} n|d kr�| � || �} n| � || �} t |d� d| fS )NrR r^ z Bad requestr4 z%%(realm)s is not a valid parent realm�rR rG �view�new�/r\ � � ��idz(Parent resource %(parent)s doesn't exist��parent�upzBack to %(parent)sr] �zip�POST�deletezInvalid request arguments.zcommon/css/code.css�attachment.html) rS rT r$ r" � TracErrorr# r �code�Resource�rstrip�rfind�resource_exists�env�ResourceNotFound�get_resource_name�get_resource_url�hrefr) r( �_download_as_zip� _render_list�
Attachment�childrR �method�_do_save�
_do_delete�_render_confirm_delete� _render_form� _render_viewr* )
rV rB � parent_realmr^ rG � parent_id�filename�
last_slashrm � parent_name�
parent_urlr4 �datar2 r2 r5 �process_request� s` �
�� �
z AttachmentModule.process_requestc C rX rY r2 �rV r2 r2 r5 �get_wiki_syntax� r[ z AttachmentModule.get_wiki_syntaxc c s � d| j fV d| j fV d S )Nzraw-attachmentr4 )� _format_linkr� r2 r2 r5 �get_link_resolvers� s � z#AttachmentModule.get_link_resolversc C sB |j }g }t�| j|j|j�D ]}d|�|j �v r |�|� q|S )a Return the list of viewable attachments in the given context.
:param context: the `~trac.mimeview.api.RenderingContext`
corresponding to the parent
`~trac.resource.Resource` for the attachments
�ATTACHMENT_VIEW)rI r� �selectry rR rk rJ �append)rV �contextrm � attachmentsr4 r2 r2 r5 �viewable_attachments� s
�z%AttachmentModule.viewable_attachmentsc C st | � |�}|j}tdd� |D ��}|�| j�}t| j||j�|| jkr-t| j||jdd�ndd|� |�v ||jd�S )zmReturn a data dictionary describing the list of viewable
attachments in the current context.
c s � � | ]}|j V qd S rY ��size��.0r4 r2 r2 r5 � <genexpr> � � z3AttachmentModule.attachment_data.<locals>.<genexpr>ro �r] N�ATTACHMENT_CREATE)� attach_href�
download_href�
can_creater� rm )
r� rI �sumr� rR r| ry r} rO rJ )rV r� r� rm �
total_size�new_attr2 r2 r5 �attachment_data s
�
�� �z AttachmentModule.attachment_datac
c sT � | j �dt|�t|�|f�D ]\}}}}}}t|pd�} d|||| ||fV qdS )a Return an iterable of tuples describing changes to attachments on
a particular object realm.
The tuples are in the form (change, realm, id, filename, time,
description, author). `change` can currently only be `created`.
FIXME: no iterator
z�
SELECT type, id, filename, time, description, author
FROM attachment WHERE time > %s AND time < %s AND type = %s
r �createdN)ry �db_queryr r )
rV �start�stoprR �id_r� �ts� description�author�timer2 r2 r5 � get_history s �
�� �z AttachmentModule.get_historyc
c s` � | � |||j�D ]$\}}}}} }
} ||d��| j|�} d|�| �v r-d| | | |
f| fV q dS )z�Return an event generator suitable for ITimelineEventProvider.
Events are changes to attachments on resources of the given
`resource_realm.realm`.
rj r� r4 N)r� rR r� rJ )
rV rB �resource_realmr� r� �changerR r� r� r� �descrr� r4 r2 r2 r5 �get_timeline_events# s ����z$AttachmentModule.get_timeline_eventsc C s� |d \}}|dkr| � ||j�S |dkr8t| j|j�}t| j|j�}tdt�t j
� |j ��tj||dd�d�S |dkrHt
| jd |�|j�|�S d S ) N� �url�titlez'%(attachment)s attached to %(resource)sztrac-parent-resource)r� �class_)r4 rI r� )r| r} r{ ry rm �get_resource_summaryr# r �em�osr^ �basenamerk r/ r� )rV r� �field�eventr4 r� �namer� r2 r2 r5 �render_timeline_event/ s" ����z&AttachmentModule.render_timeline_eventc
c s� � | j j�N}t|g d�|�\}}|d| |jf| �D ]/\}}} }
} ||d��| j| �} d|�| �v rJt| j | |j�t| j | �t |�| t
|
|�fV qW d � dS 1 sVw Y dS )z�Return a search result generator suitable for ISearchSource.
Search results are attachments on resources of the given
`resource_realm.realm` whose filename, description or author match
the given terms.
)r� r� r� z|
SELECT id, time, filename, description, author
FROM attachment WHERE type = %s AND rj r� N) ry r� r rR r� rJ r| r} �get_resource_shortnamer r )
rV rB r� �terms�db� sql_queryrS rk r� r� �descr� r4 r2 r2 r5 �get_search_results> s( �
��
�
���"�z#AttachmentModule.get_search_resultsc c s � | j V d S rY rd r� r2 r2 r5 �get_resource_realmsU s � z$AttachmentModule.get_resource_realmsc K s� |j sdS |�d�}d}|dv r|�d� |d }tt| j|j dd�td���}|js5|||dfi |��S ||||jfi |��S )z�Return an URL to the attachment itself.
A `format` keyword argument equal to `'raw'` will be converted
to the raw-attachment prefix.
Nr] r4 )�rawro z -attachment)�versionrh )rm rT �popr! r| ry r- rk )rV rI r} �kwargsr] �prefix� parent_hrefr2 r2 r5 r| X s
�z!AttachmentModule.get_resource_urlNc K s� |j s
td|jd�S |dkrd|jt| j|j �f S |dkr%t| j|�jS |jr5td|jt| j|j �d�S tdt| j|j �d �S )
Nz Unparented attachment %(id)srj �compactz%s (%s)�summaryz!Attachment '%(id)s' in %(parent)s)rk rm zAttachments of %(parent)srl )rm r" rk r{ ry r� r� )rV rI r] r� r2 r2 r5 �get_resource_descriptionn s � � �z)AttachmentModule.get_resource_descriptionc C s2 zt | j|�}tj�|j�W S ty Y dS w )NF)r� ry r� r^ �existsrz )rV rI r4 r2 r2 r5 rx } s �z AttachmentModule.resource_existsc C s |� |j��d� |jj}d|jv r |�t| j||j�� |j� d�\}}}|s.t
t d���t d|d�}|dkr?t
t d�|��d| j krJ|k rXn n t
t d t
| j �d
�|��||_|j�d d �|_t|d
�|_d}| jD ](} | �||�D ] \}
} d}|
r�t|tdt�|
�| d�� qvt|td| d�� qvqn|s�t|t d�� | �||�} |j�d�| d< | S |j�d�r�z+t| j|j|d��}
|� |j�jdt d|d�d� |j�� s�|
jr�|
j|_|
� � W n t
y� Y nw |� |||� |�t| j|jd d�|j�� d S )Nr� �cancelr4 zNo file uploadedz Upload failed for %(filename)s�r� r zCan't upload empty filez Maximum attachment size: %(num)s��numr� rh r� TFz2Attachment field %(field)s is invalid: %(message)s)r� �messagez Invalid attachment: %(message)s)r� z"Note: File must be selected again.�replace�
is_replacerj �ATTACHMENT_DELETEz�You don't have permission to replace the attachment %(name)s. You can only replace your own attachments. Replacing other's attachments requires ATTACHMENT_DELETE permission.�r� ) rJ rI �requirerm rS �redirectr| ry r} �getfilers r" rN r r� rT r� r r� � manipulatorsrE r, r# r �strongr� r� �striprq �insert)rV rB r4 �parent_resourcer� �fileobj�filesize�
upload_failed�valid� manipulatorr� r� r� �old_attachmentr2 r2 r5 r� � s�
��
������
� ��
� �
�zAttachmentModule._do_savec C sP |� |j��d� t| j|jj|j�}d|jv r |�|� |� � |�|� d S )Nr� r� )
rJ rI r� r| ry rm r} rS r� rq )rV rB r4 r� r2 r2 r5 r� � s �
zAttachmentModule._do_deletec C s0 |� |j��d� dtdt| j|j�d�|d�S )Nr� rq z%(attachment)s (delete)r3 ��moder� r4 )rJ rI r� r" r{ ry �rV rB r4 r2 r2 r5 r� � s ���z'AttachmentModule._render_confirm_deletec C s& |� |j��d� dt|�|| jd�S )Nr� rf )r� r� r4 rN )rJ rI r� r rN r� r2 r2 r5 r� � s �z AttachmentModule._render_formc
s� |d u r | � t� |��}tdd� |D ��}|| jkr(ttdt| j�d�td���� �d� � �dd� d |j t
� d
d t |j
��f }� �d td
|�� � �� � fdd�}d}tddd��`}t|dt��D} |D ]9}
t|
j|
j|
jd�} z |
�� �} | �| | �� � W d � n1 s�w Y W n ty� Y qgw |||�}qgW d � n1 s�w Y |||� W d � t�1 s�w Y t�)Nc s r� rY r� r� r2 r2 r5 r� � r� z4AttachmentModule._download_as_zip.<locals>.<genexpr>z&Maximum total attachment size: %(num)sr� zDownload failed�� z Content-Typezapplication/zipzattachments-%s-%s.zipz[/\\:]�-�Content-Disposition�inlinec sb | � � }| �|d� || }|dkr)| �t|d��}� �|� |t|�8 }|dks| �|d� |S )Nr rM )�tell�seek�read�min�write�len)r� r� �end� remaining�chunk�rB r2 r5 �
write_partial� s
� z8AttachmentModule._download_as_zip.<locals>.write_partialr ztrac-z.zip)r� �suffix�w)�mtime�comment) r� r+ r� rO rs r" r �
send_response� send_headerrR r_ �sub�strrk r � end_headersr r r r r� �dater� �open�writestrr� rz r& )
rV rB rm r� r� r� r� �posr� �zipfiler4 �zipinfo�fdr2 r� r5 r~ � sV
��
�� �
�� � � �
��z!AttachmentModule._download_as_zipc C s dd | � t||��d�}d|fS )N�list)r� r4 r� rr )r� r+ )rV rB rm r� r2 r2 r5 r s
�z AttachmentModule._render_listc
C s� |� |j��d� d|� |j�v }|�|jt|�� dt| j|j�|d�}|�� ��}t | j�}|�
d�}|� d� |� |j
|�}|j�d�} | dkrU| �||jj|g� n/| d v r�| jsb|�d
d � | d krid
}n|smd}d|vr}|�||�}
|d |
}|�|j|� | jr�|r�|�d
�s�t| j|j|jd d�} t|d| td�|� t| j|j|jdd�} t|d| td�|� | j � d|j
|� |j t ||j�|t �!|�"� �j#||j
| dgd�|d< |W d � S 1 s�w Y d S )Nr� r� re r� i� r r] ro )r� �txtr� r4 r z
text/plainzapplication/octet-streamzcharset=z
; charset=r� � alternatez
Plain Textr� zOriginal Formatz.Rendering preview of file %s with mime-type %s�lineno)� annotations�preview)$rJ rI r� �check_modifiedr r r{ ry r �Mimeviewr� r� � get_mimetyper� rS rT r~ rm rP r � get_charset� send_filer^ �
startswithr| r} r) r" �log�debug� preview_datar+ r� �fstat�fileno�st_size)
rV rB r4 �
can_deleter� r
�mimeview�str_data� mime_typer] �charset�plaintext_href�raw_hrefr2 r2 r5 r� sp �
� ����
���
�$�z AttachmentModule._render_viewc C sl |� |�\}}}|�dd�}d } t|�dkrKt| j��� }
|d |
v r4t|d |d ��| j|d �} n |d |
v rJt|d |d ��| j|d �} n|j �| j|�} | r�d|�
| �v r�zt | j| � W n t ym Y nBw t
| j| |jdd�} t| j| �} |�d�r�tj|d | | | d
�S t
| j| |j�}
ttj|d | |
| d �tjd d
| | td�d
��S tj|dd�S )N�:� r� ri r r� r� r� r4 )r� r} r� )r� r� r} u z trac-rawlink�Downloadzmissing attachment)r� )�
split_link�splitr� �ResourceSystemry �get_known_realmsru r� rR rI rJ r� rz r| r} r{ r r �ar" )rV � formatter�ns�target�label�link�params�fragment�idsr4 � known_realmsr& r� r} r2 r2 r5 r� V sL � �� ��
� � ��z AttachmentModule._format_linkrY )-r= r> r? �
implementsr% r' r. �IResourceManagerrR �is_valid_default_handler�ExtensionPointr0 �change_listenersrA r� �
CHUNK_SIZEr rN rO r rP rW rZ rc r� r� r� r� r� r� r� r� r� r� r| r� rx r� r� r� r� r~ r r� r� r2 r2 r2 r5 rL t sV ���� =
D
- >rL c @ s� e Zd ZdZejZedd� �Z d+dd�Zdd� Z d d
� Z
d d � Z e d
d� �Z
e�d�Ze dd� �Zedd� �Zedd� �Zdd� Zd,dd�Zd-dd�Ze d d � �Ze d d � �Ze d d!� �Zd"d#� Z $d.d%d&�Zd'd(� Z d)d*� Z dS )/r� z+Represents an attachment (new or existing).c C s t | j| j��| j| j�S rY )ru r� r� r� rR r� r� r2 r2 r5 rI � s �zAttachment.resourceNc C s� t |t�r|}|jj| _t|jj�| _|j| _n || _t|�| _|| _|| _ | jr1| �
| j� d S d | _d | _ d | _ d | _
d | _d S rY )�
isinstanceru rm rR r� r rk r� r� ry �_fetchr� r� r r� )rV ry �#parent_realm_or_attachment_resourcer� r� rI r2 r2 r5 �__init__� s
zAttachment.__init__c C s d| j j| jf S )Nz<%s %r>)� __class__r= r� r� r2 r2 r5 �__repr__� s zAttachment.__repr__c C s6 || _ || _|r t|�nd| _t|pd�| _|| _d S )Nr )r� r� �intr� r r r� )rV r� r� r� r� r� r2 r2 r5 �_from_database� s
zAttachment._from_databasec C sN | j �d| jt| j�|f�D ] }| j|� d S || _ttd| j d�td���)Nz�
SELECT filename, description, size, time, author
FROM attachment WHERE type=%s AND id=%s AND filename=%s
ORDER BY time
z&Attachment '%(title)s' does not exist.�r� zInvalid Attachment)
ry r� r� r r� rE r� rz r" r� )rV r� �rowr2 r2 r5 r? � s �
��zAttachment._fetchc C s^ t j�||�}t�|�d���� }t j�||dd� |�}|r)t j�|| �|��}t j�|�S )z�Get the path of an attachment.
WARNING: This method is used by db28.py for moving attachments from
the old "attachments" directory to the "files" directory. Please check
all changes so that they don't break the upgrade.
�utf-8r r� ) r� r^ �join�hashlib�sha1�encode� hexdigest�_get_hashed_filename�normpath)�cls�attachments_dirr� r� r� r^ �hashr2 r2 r5 � _get_path� s zAttachment._get_pathz\.[A-Za-z0-9]+\Zc C s6 t �|�d���� }| j�|�}|r||�d� S |S )a Get the hashed filename corresponding to the given filename.
WARNING: This method is used by db28.py for moving attachments from
the old "attachments" directory to the "files" directory. Please check
all changes so that they don't break the upgrade.
rH r )rJ rK rL rM �
_extension_re�search�group)rP r� rR r` r2 r2 r5 rN � s z Attachment._get_hashed_filenamec C s | � | jj| j| j| j�S rY )rS ry rQ r� r� r� r� r2 r2 r5 r^ � s �zAttachment.pathc C s d| j | j| jf S )N� %s:%s: %s)r� r� r� r� r2 r2 r5 r� � s zAttachment.titlec C s� | j sJ d��| jj�C}|d| j| j| j f� | j}tj�|�rGzt�|� W n t yF } z| jj
� d|t |dd�� t
td���d}~ww W d � n1 sQw Y | jj
�d| j� t| j�jD ]}|�| � qedS ) z\Delete the attachment, both the record in the database and
the file itself.
z%Cannot delete non-existent attachmentz`
DELETE FROM attachment WHERE type=%s AND id=%s AND filename=%s
z'Failed to delete attachment file %s: %sT�� tracebackzCould not delete attachmentNzAttachment removed: %s)r� ry �db_transactionr� r� r^ r� �isfile�unlink�OSErrorr �errorr rs r" �infor� rL r< r8 )rV r� r^ �e�listenerr2 r2 r5 rq � s.
�
� ��� � �zAttachment.deletec C s | j |||dd� dS )z�Move the attachment, changing one or more of its parent realm,
parent id and filename.
The new parent resource must exist.
:since: 1.3.2
T)�new_parent_must_existN)�_move)rV � new_realm�new_id� new_filenamer2 r2 r5 �move s zAttachment.movec
C s� |rt |�nd| _d| _|du rtt�}n
t|t�s t|t�}|| _t | j
| j �}t | j
|�s;ttdt| j
|�d���| �| j�sMttd|| j
| j d���| j}t�|tj�s\t�|� | �||�\}}|�C | j
j�/}|d| j
| j || jt|�| j| j f� t � ||� || _| j
j � d| j!| j � W d � n1 s�w Y W d � n1 s�w Y t"| j
�j#D ]} | �$| � q�dS ) zBCreate a new Attachment record and save the file content.
r Nz1%(parent)s doesn't exist, can't create attachmentrl zACannot create attachment "%(att)s" as %(realm)s:%(id)s is invalid)�attrR rk z4INSERT INTO attachment VALUES (%s,%s,%s,%s,%s,%s,%s)zNew attachment: %s by %s)%rD r� r� r r r> r r r ru r� r� rx ry rz r" r{ �_is_valid_pathr^ rs r� �access�F_OK�makedirs�_create_unique_filerZ r r� r� �shutil� copyfileobjr r_ r� rL r< r6 )
rV r� r� r� �tr� �dir�
targetfiler� ra r2 r2 r5 r�
sR
�� �
�� � �� � �zAttachment.insertc c s< � |� d|t|�f�D ]}t|||�}|j|� |V q dS )z�Iterator yielding all `Attachment` instances attached to
resource identified by `parent_realm` and `parent_id`.
:return: a tuple containing the `filename`, `description`, `size`,
`time` and `author`.
z�
SELECT filename, description, size, time, author
FROM attachment WHERE type=%s AND id=%s ORDER BY time
N)r� r r� rE )rP ry r� r� rG r4 r2 r2 r5 r� 3 s �
�
�zAttachment.selectc C s� d}|j � | �|||�D ]
}tj�|j�}|�� q
W d � n1 s%w Y |rTzt�|� W dS tyS } z|j� d|t
|dd�� W Y d}~dS d}~ww dS )z4Delete all attachments of a given resource.
N�(Can't delete attachment directory %s: %sTrX ) rZ r� r� r^ �dirnamerq �rmdirr] r r^ r )rP ry r� r� �attachment_dirr4 r` r2 r2 r5 �
delete_allC s$
� �
����zAttachment.delete_allc C s� d}|j �! t| �|||��D ]}tj�|j�}|�||� qW d � n1 s)w Y |rXzt�|� W dS tyW } z|j �
d|t |dd�� W Y d}~dS d}~ww dS )zJReparent all attachments of a given resource to another resource.
Nrs TrX ) rZ r r� r� r^ rt rc ru r] r r^ r ) rP ry r� r� rd re rv r4 r` r2 r2 r5 � reparent_allT s$ � �
����zAttachment.reparent_allc C sH | j }| jj�d|� zt|d�}W |S ty# ttd| jd���w )Nz Trying to open attachment at %s�rbz#Attachment '%(filename)s' not foundr� ) r^ ry r r r �IOErrorrz r" r� )rV r^ r
r2 r2 r5 r e s ���zAttachment.openFc C s� | j s ttd���|du r| j}|du r| jnt|�}|du r"| j }|||f| j| j| j fkr5ttd���| �| jj|||�}d|||f }|r`t ||�}t
| j|�s_t tdt | j|�d���n|t
| j��� vrqt td|d���| �|�s�ttd| j |d���tj�|�r�ttd | j |d���| jj�[}|d
|||| j| j| j f� tj�|�} tj�| �s�t�| � | j}
tj�|
�r�zt�|
|� W n" ty� } z| jj�d |
t| d d
�� ttd| j d���d} ~ ww W d � n1 s�w Y | j} | j}
| j }|| _|| _|| _ | jj� d| j � | |k�p|
|k}t | j�j D ]!}t |d��r1|�!| | |
|� |�rAt |d��rA|�"| | |
� �q!dS )z~Move the attachment, changing one or more of its parent realm,
parent id and filename.
:since: 1.3.2
z%Cannot rename non-existent attachmentNzAttachment not modifiedrW z/%(target)s doesn't exist, can't move attachment)r1 z:Cannot move attachment "%(att)s" as "%(title)s" is invalid)rh r� zDCannot move attachment "%(att)s" to "%(title)s" as it already existsz~UPDATE attachment SET type=%s, id=%s, filename=%s
WHERE type=%s AND id=%s AND filename=%s
z%Failed to move attachment file %s: %sTrX z%Could not move attachment "%(title)s"rF zAttachment moved: %sr< �attachment_reparented)#r� rs r" r� r� r rS ry rQ ru rx rz r{ r, r- ri r� r^ r� rZ rt rl r[ �renamer] r r^ r r� r_ rL r< �hasattrr< r{ )rV rd re rf rb �new_path� new_title�new_parent_resourcer� rt r^ r` � old_realm�old_idr; �
reparentedra r2 r2 r5 rc o s� � �
�����
� �
��
����� � ��zAttachment._movec
C s� t j�|�}t jt j t j }tt d�r|t j7 }d} t j�|| � |��}z|t �
t � ||d�d�fW S t yf } z&|j
t
jkrC� |d7 }|dkrQtd| ��d|d ||d f }W Y d }~nd }~ww q ) N�O_BINARYri i� �wb�d z Failed to create unique name: z%s.%d%sr )r� r^ �splitext�O_CREAT�O_WRONLY�O_EXCLr} r� rI rN �fdopenr r] �errno�EEXIST� Exception)rV rq r� �parts�flags�idxr^ r` r2 r2 r5 rm � s&
"���z Attachment._create_unique_filec C s t j�| jj|g�}|| jjkS )zkReturn True if the path to the attachment is inside the
environment attachments directory.
)r� r^ � commonprefixry rQ )rV r^ r� r2 r2 r5 ri � s zAttachment._is_valid_path)NN)NNNrY )NNNF) r= r> r? r@ rL rR �propertyrI rA rC rE r? � classmethodrS r_ �compilerT rN r^ r� rq rg r� r� rw rx r rc rm ri r2 r2 r2 r5 r� � sD
�
)
�M r� c @ sR e Zd ZdZee� ee�Ze j
Z
dddd�dddd�d d
d d�d �Z d
d� Z dS )�LegacyAttachmentPolicyzuDefault permission policy for the attachment system.
Authenticated users can delete attachments they added.
�
TICKET_APPEND� WIKI_MODIFY�MILESTONE_MODIFY)�ticket�wiki� milestone� TICKET_VIEW� WIKI_VIEW�MILESTONE_VIEW� TICKET_ADMIN� WIKI_DELETE�MILESTONE_DELETE)r� r� r� c
C s� | j �|�}|r|r|j| jkrd S |jr*|dkr*|dkr*t| j|�}||jkr*dS |�|jj�}|rG|||j�v }|sE| j� d|||� |S | j
D ]} | � ||||�}|d ur\| S qJd S )N� anonymousr� Tz<LegacyAttachmentPolicy denied %s access to %s. User needs %s) �
_perm_mapsrT rR rk r� ry r� rm r r � delegatesrK )
rV rG rH rI rJ �perm_mapr4 �
legacy_action�decision�dr2 r2 r5 �check_permission� s0
�
���z'LegacyAttachmentPolicy.check_permissionN)
r= r> r? r@ r8 r r; rF r� rL rR r� r� r2 r2 r2 r5 r� � s ���� r� c @ s� e Zd ZdZee� dd� Zdd� Zdd� Zdd � Z d
d � Z
d d
� Z dd� Z dd� Z
dd� Zdd� Zd!dd�Zdd� Zd d � Zd"d d �Zd S )#�AttachmentAdminz:trac-admin command provider for attachment administration.c c sj � ddd| j | jfV ddd| j| jfV ddd | j| jfV d
d d | j| jfV d
dd| j| j fV d S )Nzattachment listz
<realm:id>zfList attachments of a resource
The resource is identified by its realm and identifier.zattachment addz(<realm:id> <path> [author] [description]z�Attach a file to a resource
The resource is identified by its realm and identifier. The
attachment will be named according to the base name of the
file.
zattachment removez<realm:id> <name>zlRemove an attachment from a resource
The resource is identified by its realm and identifier.zattachment movez/<realm:id> <name> <new_realm:new_id> <new_name>z�Rename or move an attachment to another resource
The resource is identified by its realm and identifier.
zattachment exportz <realm:id> <name> [destination]z�Export an attachment from a resource to file or stdout
The resource is identified by its realm and identifier. If no
destination is specified, the attachment is output to stdout.
)
�_complete_list�_do_list�
_complete_add�_do_add�_complete_remove�
_do_remove�_complete_move�_do_move�_complete_export�
_do_exportr� r2 r2 r5 �get_admin_commands s, �����
�z"AttachmentAdmin.get_admin_commandsc C s t | j�}tdd� |�� D ��S )Nc S s g | ]
}|d kr|d �qS )r4 r' r2 )r� �eachr2 r2 r5 �
<listcomp>4 s �z2AttachmentAdmin.get_realm_list.<locals>.<listcomp>)r, ry r r- )rV �rsr2 r2 r5 �get_realm_list2 s
z AttachmentAdmin.get_realm_listc C s, |� dd�}t|�dkrttd|d���|S )Nr' ri r( z$Invalid resource identifier '%(id)s'rj )r+ r� r r" )rV rI �resultr2 r2 r5 �split_resource7 s �z AttachmentAdmin.split_resourcec C s( | � |�\}}dd� t�| j||�D �S )Nc S s g | ]}|j �qS r2 r� �r� r. r2 r2 r5 r� @ s z7AttachmentAdmin.get_attachment_list.<locals>.<listcomp>)r� r� r� ry �rV rI rR r� r2 r2 r5 �get_attachment_list> s z#AttachmentAdmin.get_attachment_listc C s t |�dkr
| �� S d S )Nri )r� r� �rV rS r2 r2 r5 r� B s �z AttachmentAdmin._complete_listc C s0 t |�dkr
| �� S t |�dkrt|d �S d S )Nri r( )r� r� r
r� r2 r2 r5 r� F s
�z AttachmentAdmin._complete_addc C s2 t |�dkr
| �� S t |�dkr| �|d �S d S )Nri r( r �r� r� r� r� r2 r2 r5 r� L �
�z AttachmentAdmin._complete_removec C s2 t |�dv r
| �� S t |�dv r| �|d �S d S )N)ri r� )r( � r r� r� r2 r2 r5 r� R r� z AttachmentAdmin._complete_movec C s2 t |�dk r | �|�S t |�dkrt|d �S d S )Nr� r( )r� r� r
r� r2 r2 r5 r� X s
�z AttachmentAdmin._complete_exportc C sP | � |�\}}tdd� t�| j||�D �td�td�td�td�td�g� d S )Nc S s. g | ]}|j t|j�|jt|jt�|jf�qS r2 )r� r r� r� r r r r� r� r2 r2 r5 r� ` s �
�z,AttachmentAdmin._do_list.<locals>.<listcomp>�Name�Size�Author�Date� Description)r� r r� r� ry r" r� r2 r2 r5 r� ^ s ���zAttachmentAdmin._do_list�tracrh c
C s~ | � |�\}}t| j||�}||_||_ttj�|��}t |d��} |�
|| tj� |�� W d � d S 1 s8w Y d S )Nry ) r� r� ry r� r� r r� r^ r� r r� �getsize)
rV rI r^ r� r� rR r� r4 r� �fr2 r2 r5 r� g s "�zAttachmentAdmin._do_addc C s* | � |�\}}t| j|||�}|�� d S rY )r� r� ry rq )rV rI r� rR r� r4 r2 r2 r5 r� p s zAttachmentAdmin._do_removec
C s> | � |�\}}| � |�\}}t| j|||�} | �|||� d S rY )r� r� ry rg )
rV � old_resource�old_name� new_resource�new_namer� r� rd re r4 r2 r2 r5 r� u s zAttachmentAdmin._do_moveNc C s� | � |�\}}t| j|||�}|d ur0tj�|�r tj�||�}tj�|�r0tt dt
|�d���|� � �,}t |d��}t
�||� W d � n1 sKw Y W d � d S W d � d S 1 scw Y d S )NzFile '%(name)s' existsr� r� )r� r� ry r� r^ �isdirrI r[ r r" r r r rn ro ) rV rI r� � destinationrR r� r4 �input�outputr2 r2 r5 r� { s �
��"�zAttachmentAdmin._do_export)r� rh rY )r= r> r? r@ r8 r r� r� r� r� r� r� r� r� r� r� r� r� r� r� r2 r2 r2 r5 r� s" "
r� )Or �tempfiler r r r r� rJ r� r_ rn �
trac.adminr r r r r
� trac.configr r � trac.core�
trac.mimeview� trac.permr �
trac.resource� trac.searchr r � trac.utilr r r r r �trac.util.datefmtr r r r r r �trac.util.htmlr �trac.util.textr r r r r! �trac.util.translationr" r# �trac.webr$ r% r& �trac.web.chromer' r( r) r* r+ r, �
trac.web.hrefr- �
trac.wiki.apir. �trac.wiki.formatterr/ � Interfacer0 rA rF � ComponentrL �objectr� r� r� r2 r2 r2 r5 �<module> sL T2