|
Server : Apache System : Linux iad1-shared-b8-43 6.6.49-grsec-jammy+ #10 SMP Thu Sep 12 23:23:08 UTC 2024 x86_64 User : dh_edsupp ( 6597262) PHP Version : 8.2.26 Disable Function : NONE Directory : /lib/python3/dist-packages/trac/versioncontrol/__pycache__/ |
Upload File : |
o
�k�`�$ � @ s� d dl Zd dlmZmZmZmZmZ d dlm Z m
Z
m Z d dl m
Z
d dlmZmZ d dlmZ d dlmZ dd � Zd
d � ZG d d
� d
e �ZdS )� N)�ConfigurationError�Option� ParsingError�
PathOption�UnicodeConfigParser)� Component� TracError�
implements)�IPermissionPolicy)�pathjoin�to_list)�exception_to_unicode)�RepositoryManagerc c sD � | V | dkr d S | d d� } | V | � d�}| d |d � } q)N� �/���)�rfind)�path�idx� r �?/usr/lib/python3/dist-packages/trac/versioncontrol/svn_authz.py� parent_iter s �
�r c
sl t dd�}|�| � i �i � i }|�� D ]d��dkr1|���D ]\}}��|t� ��t|�� q q�dkrF|���D ]
\}}|�� � |< q:q|���D ],\}}�� dd�}t
|�dkr_|d nd|d }}||v rw|�||fg �� ||f� qKq� ��fd
d ��i } |�� D ],\\}}}
| �|i ��|i ��|
D ]\} } d | v �����fd
d��| t� �D �� q�q�| S )z�Parse a Subversion authorization file.
Return a dict of modules, each containing a dict of paths, each containing
a dict mapping users to permissions. Only modules contained in `modules`
are retained.
F)�ignorecase_option�groups�aliases�:r r � r c 3 st � | � d�r%|�| � �| dd � | D ]
}�||�D ]}|V q qd S | � d�r5� | dd � V d S | V d S )N�@r �&)�
startswith�add)�subject�done�members�each)r r �resolver r r% E s �
��
zparse.<locals>.resolve�rc 3 s" � | ] }�� |�s|� fV qd S �N��get)�.0�user)�readable�sectionr r � <genexpr>V s
� �zparse.<locals>.<genexpr>) r �read�sections�items�
setdefault�set�updater �strip�split�len�append)
�
authz_file�modules�parserr0 �name�value�parts�moduler �authzr1 r! �permsr )r r r, r% r- r �parse) sB
�� " ��
��rB c @ s` e Zd ZdZee� eddddddid�Zedd dd
�Z e
g d ��Z d d
� Z dd� Z
dd� ZdS )�AuthzSourcePolicya^ Permission policy for `source:` and `changeset:` resources using a
Subversion authz file.
`FILE_VIEW` and `BROWSER_VIEW` permissions are granted as specified in the
authz file.
`CHANGESET_VIEW` permission is granted for changesets where `FILE_VIEW` is
granted on at least one modified file, as well as for empty changesets.
�svnr9 r a8 The path to the Subversion
[%(svnbook)s authorization (authz) file].
To enable authz permission checking, the `AuthzSourcePolicy`
permission policy must be added to `[trac] permission_policies`.
Non-absolute paths are relative to the Environment `conf`
directory.
�svnbookzGhttp://svnbook.red-bean.com/en/1.7/svn.serverconfig.pathbasedauthz.html)�doc_args�authz_module_namez�The module prefix used in the `authz_file` for the default
repository. If left empty, the global section is used.
))N� BROWSER_VIEW)N�CHANGESET_VIEW)N� FILE_VIEW)N�LOG_VIEW)�sourcerH )rL rJ )rL rK )� changesetrI c C s d| _ i | _t� | _d S )Nr )�_mtime�_authzr3 �_users)�selfr r r �__init__� s zAuthzSourcePolicy.__init__c sB |r|j nd }||f| jv r�| �� \� }� d u rdS |dkr!d�n|ddf�|d u r4|t��@ r2dS d S t| j�}z |�|jj��W n
t yL Y dS w �d u rSdS |jjpY| j
g��d rd�� d� � ��fd d
��� ���fd d ��|d
kr~�|j�S |dkr�t ��
|j��� �}|r�t�fdd�|D ��r�dS d S d S d S )NF� anonymous)z
$anonymous�*z$authenticatedrT Tr r c sf �� fdd��D �}dd� |D �}d}�D ]}|D ]}||v r+|| r' dS d} nqq|r1dS d S )Nc s g | ] }� � |i �� ���qS r r( �r* r? )r@ �spathr r �
<listcomp>� s �zLAuthzSourcePolicy.check_permission.<locals>.check_path_0.<locals>.<listcomp>c S s g | ]}|r|�qS r r )r* r- r r r rW � s FTr )rV r0 �deniedr+ r- )r@ r: � usernames)rV r � check_path_0� s" ����z8AuthzSourcePolicy.check_permission.<locals>.check_path_0c s� dt �j| � } | dkr| d7 } tt� fdd��D �g ��D ]}|�| �r0�|�}|du r0 dS q t| �D ]}�|�}|d urC| S q5d S )Nr c 3 s � | ] }t � �|i ��V qd S r' )�listr) rU )r@ r r r. � s � �zIAuthzSourcePolicy.check_permission.<locals>.check_path.<locals>.<genexpr>T)r �scoper3 �sumr r )r rV �result)r@ rZ r: �reposr r �
check_path� s& �
�
� ��z6AuthzSourcePolicy.check_permission.<locals>.check_pathrL rM c 3 s � | ] }� |d �V qdS )r Nr )r* �change)r` r r r. � s � �z5AuthzSourcePolicy.check_permission.<locals>.<genexpr>)�realm�_handled_perms�_get_authz_infor3 r �env�get_repository�parent�idr rG r8 r[ �
get_changeset� get_changes�any) rQ �action�username�resource�permrb �users�rm�changesr )r@ r` rZ r: r_ rY r �check_permission� sD
�
��?z"AuthzSourcePolicy.check_permissionc
C s& | j s | j�d� t� �z tj�| j �}W n ty- } z | j�dt|�� t� �d }~ww || j kr�|| _ t
| j �}t dd� |�
� D ��}d|v rS| jrS|�| j� |�d� | j�d| j � z t| j |�| _W n ty� } z | j�dt|�� t� �d }~ww dd � | j�� D �| _| j| jfS )
NzMThe [svn] authz_file configuration option in trac.ini is empty or not definedz4Error accessing svn authz permission policy file: %sc s s � | ]}|j V qd S r' )�reponame)r* r_ r r r r. � s � �z4AuthzSourcePolicy._get_authz_info.<locals>.<genexpr>r zParsing authz file: %sz2Error parsing svn authz permission policy file: %sc S s4 h | ]}|� � D ]}|�� D ]\}}|r|�qqqS r )�valuesr1 )r* �pathsr r+ r^ r r r � <setcomp>� s ���z4AuthzSourcePolicy._get_authz_info.<locals>.<setcomp>)r9 �log�errorr �osr �getmtime�OSErrorr
rN r re r3 �get_real_repositoriesrG r �inforB rO r ru rP )rQ �mtime�erq r: r r r rd � sF ���
�
���� z!AuthzSourcePolicy._get_authz_infoN)�__name__�
__module__� __qualname__�__doc__r r
r r9 r rG � frozensetrc rR rs rd r r r r rC \ s
� � GrC )�os.pathrz � trac.configr r r r r � trac.corer r r � trac.permr
� trac.utilr r �trac.util.textr
�trac.versioncontrol.apir r rB rC r r r r �<module> s 3