%9jcdZddlmZddlmZddlmZddlmZm Z Gdde Z Gdd e Z Gd d e Z Gd d e ZGdde Zy)z%Manage access to objects and buckets.) _add_generation_match_parameters)create_trace_span)_DEFAULT_TIMEOUT) DEFAULT_RETRY)DEFAULT_RETRY_IF_METAGENERATION_SPECIFIEDcfeZdZdZdZdZdZddZdZdZ d Z d Z d Z d Z d ZdZdZdZdZy) _ACLEntityaClass representing a set of roles for an entity. This is a helper class that you likely won't ever construct outside of using the factor methods on the :class:`ACL` object. :type entity_type: str :param entity_type: The type of entity (ie, 'group' or 'user'). :type identifier: str :param identifier: (Optional) The ID or e-mail of the entity. For the special entity types (like 'allUsers'). READERWRITEROWNERNc@||_tg|_||_yN) identifiersetrolestype)self entity_typers T/var/www/html/truck-me/venv/lib/python3.12/site-packages/google/cloud/storage/acl.py__init__z_ACLEntity.__init__,s$W  ch|jst|jSdj|S)Nz{acl.type}-{acl.identifier})acl)rstrrformatrs r__str__z_ACLEntity.__str__1s+tyy> !077D7A ArcFd|ddj|jdS)Nz )joinrrs r__repr__z_ACLEntity.__repr__7s%tfBtyy'<&=R@@rc|jS)zGet the list of roles permitted by this entity. :rtype: list of strings :returns: The list of roles associated with this entity. )rrs r get_rolesz_ACLEntity.get_roles:s zzrc:|jj|y)zoAdd a role to the entity. :type role: str :param role: The role to add to the entity. N)raddrroles rgrantz_ACLEntity.grantBs trcX||jvr|jj|yy)zyRemove a role from the entity. :type role: str :param role: The role to remove from the entity. N)rremover%s rrevokez_ACLEntity.revokeJs' 4::  JJ  d # rcB|jtjy)z(Grant read access to the current entity.N)r'r READER_ROLErs r grant_readz_ACLEntity.grant_readS :))*rcB|jtjy)z)Grant write access to the current entity.N)r'r WRITER_ROLErs r grant_writez_ACLEntity.grant_writeWr.rcB|jtjy)z)Grant owner access to the current entity.N)r'r OWNER_ROLErs r grant_ownerz_ACLEntity.grant_owner[s :(()rcB|jtjy)z+Revoke read access from the current entity.N)r*r r,rs r revoke_readz_ACLEntity.revoke_read_ J**+rcB|jtjy)z,Revoke write access from the current entity.N)r*r r0rs r revoke_writez_ACLEntity.revoke_writecr7rcB|jtjy)z,Revoke owner access from the current entity.N)r*r r3rs r revoke_ownerz_ACLEntity.revoke_ownergs J))*rr)__name__ __module__ __qualname____doc__r,r0r3rrr r"r'r*r-r1r4r6r9r;rrr r sV KKJ B A$++*,,+rr c>eZdZdZdZdZdddddd d Zegd Z d Z d Z d Z d Z dZ efdZedZdZdZdZdZd%dZdZd%dZdZdZdZdZdZdZedZ dZ!d ee"fd Z#d d d d ee$fd!Z%d d d d d d ee$fd"Z&d d d d d ee$fd#Z'd d d d d ee$fd$Z(y )&ACLz7Container class representing a list of access controls.r predefinedAclprojectPrivate publicReadpublicReadWriteauthenticatedReadbucketOwnerReadbucketOwnerFullControl)zproject-privatez public-readzpublic-read-writezauthenticated-readzbucket-owner-readzbucket-owner-full-control)privaterDrErFrGrHrIFNci|_yr)entitiesrs rrz ACL.__init__s  rcB|js|j|yy)zLoad if not already loaded. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` )timeoutN)loadedreload)rrNs r_ensure_loadedzACL._ensure_loadeds{{ KKK (rcz|jj||}|r||jvrtd||S)a:Ensures predefined is in list of predefined json values :type predefined: str :param predefined: name of a predefined acl :type predefined: str :param predefined: validated JSON name of predefined acl :raises: :exc: `ValueError`: If predefined is not a valid acl zInvalid predefined ACL: )PREDEFINED_XML_ACLSgetPREDEFINED_JSON_ACLS ValueError)cls predefineds rvalidate_predefinedzACL.validate_predefinedsE,,00ZH *C,D,DD7 |DE ErcF|jjd|_y)z@Remove all entities from the ACL, and clear the ``loaded`` flag.FN)rLclearrOrs rresetz ACL.resets  rc#K|j|jjD]*}|jD]}|st ||d,yw)N)entityr&)rQrLvaluesr"r)rr^r&s r__iter__z ACL.__iter__s\ mm**, @F((* @%([$?? @ @s AAAc(|d}|d}|dk(r|j}nB|dk(r|j}n,d|vr(|jdd\}}|j||}t |t st d||j||S) aBuild an _ACLEntity object from a dictionary of data. An entity is a mutable object that represents a list of roles belonging to either a user or group or the special types for all users and all authenticated users. :type entity_dict: dict :param entity_dict: Dictionary full of data from an ACL lookup. :rtype: :class:`_ACLEntity` :returns: An Entity constructed from the dictionary. r^r&allUsersallAuthenticatedUsers-rrzInvalid dictionary: )allall_authenticatedsplitr^ isinstancer rVr')r entity_dictr^r&rrs rentity_from_dictzACL.entity_from_dictsX&6" Z XXZF . .++-F F]&,ll3&: #K[[[Z[PF&*-3K=AB B T rcP|jt||jvS)aReturns whether or not this ACL has any entries for an entity. :type entity: :class:`_ACLEntity` :param entity: The entity to check for existence in this ACL. :rtype: bool :returns: True of the entity exists in the ACL. )rQrrLrr^s r has_entityzACL.has_entitys# 6{dmm++rcl|j|jjt||S)aGets an entity object from the ACL. :type entity: :class:`_ACLEntity` or string :param entity: The entity to get lookup in the ACL. :type default: anything :param default: This value will be returned if the entity doesn't exist. :rtype: :class:`_ACLEntity` :returns: The corresponding entity or the value provided to ``default``. )rQrLrTr)rr^defaults r get_entityzACL.get_entitys+ }}  Vg66rcT|j||jt|<y)zAdd an entity to the ACL. :type entity: :class:`_ACLEntity` :param entity: The entity to add to this ACL. N)rQrLrrns r add_entityzACL.add_entitys" %+ c&k"rct||}|j|r|j|}|S|j||S)aFactory method for creating an Entity. If an entity with the same type and identifier already exists, this will return a reference to that entity. If not, it will create a new one and add it to the list of known entities for this ACL. :type entity_type: str :param entity_type: The type of entity to create (ie, ``user``, ``group``, etc) :type identifier: str :param identifier: The ID of the entity (if applicable). This can be either an ID or an e-mail address. :rtype: :class:`_ACLEntity` :returns: A new Entity or a reference to an existing identical entity. rf)r rorrrt)rrrr^s rr^z ACL.entitysD& K ??6 "__V,F  OOF # rc(|jd|S)zFactory method for a user Entity. :type identifier: str :param identifier: An id or e-mail for this particular user. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this user. userrr^rrs rrwzACL.users{{6j{99rc(|jd|S)zFactory method for a group Entity. :type identifier: str :param identifier: An id or e-mail for this particular group. :rtype: :class:`_ACLEntity` :returns: An Entity corresponding to this group. grouprxryrzs rr|z ACL.group*s{{7z{::rc(|jd|S)zFactory method for a domain Entity. :type domain: str :param domain: The domain for this entity. :rtype: :class:`_ACLEntity` :returns: An entity corresponding to this domain. domainrxry)rr~s rr~z ACL.domain5s{{8{77rc$|jdS)zFactory method for an Entity representing all users. :rtype: :class:`_ACLEntity` :returns: An entity representing all users. rbryrs rrgzACL.all@s {{:&&rc$|jdS)zFactory method for an Entity representing all authenticated users. :rtype: :class:`_ACLEntity` :returns: An entity representing all authenticated users. rcryrs rrhzACL.all_authenticatedHs {{233rch|jt|jjS)zGet a list of all Entity objects. :rtype: list of :class:`_ACLEntity` objects :returns: A list of all Entity objects. )rQlistrLr_rs r get_entitieszACL.get_entitiesPs( DMM((*++rct)z&Abstract getter for the object client.)NotImplementedErrorrs rclientz ACL.clientYs "!rc"| |j}|S)aCheck client or verify over-ride. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: the client to use. If not passed, falls back to the ``client`` stored on the current ACL. :rtype: :class:`google.cloud.storage.client.Client` :returns: The client passed in or the currently bound client. )r)rrs r_require_clientzACL._require_client^s >[[F rctd5|j}|j|}i}|j|j|d<|jj |j ||||}d|_|jddD]"}|j|j|$ dddy#1swYyxYw) aReload the ACL data from Cloud Storage. If :attr:`user_project` is set, bills the API request to that project. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: :class:`~google.api_core.retry.Retry` :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.reloadnameN userProject query_paramsrNretryTitemsr@) r reload_pathr user_projectrLr[ _get_resourcerOrTrtrl)rrrNrpathrfoundentrys rrPz ACL.reloadms$$8 9 >##D))&1FL  ,.2.?.? ]+ MM   !(() )E DK7B/ > 5 5e <= >% > > >s B(B??Cc |j|}ddi} |g}|| |j<|j|j| d<t| |||||j} |j | |j t|i| || } |jj| j|j dD]"} |j|j| $d|_ y) aHelper for :meth:`save` and :meth:`save_predefined`. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` projectionfullNr)if_generation_matchif_generation_not_matchif_metageneration_matchif_metageneration_not_matchrr@T)r_PREDEFINED_QUERY_PARAMrr save_path_patch_resource_URL_PATH_ELEMrrLr[rTrtrlrO)rrrXrrrrrrNrrrresultrs r_savez ACL._savesh%%f-$f-  !C9CL55 6    (*.*;*;L '(  3$;$;(C  ~~''   $s) ,% (  ZZ 3 3R8 :E OOD11%8 9 : rc td5||}|j} nd} | r|j|d||||||| dddy#1swYyxYw)a!Save this ACL for the current bucket. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.saverNTrrrrrNr)rrOr) rrrrrrrrNrsave_to_backends rsavezACL.savesjb$6 7 {"%**"& (;,C,C0K#    s 0AAc td5|j|}|jd|||||||| dddy#1swYyxYw)aSave this ACL for the current bucket using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.savePredefinedrNr)rrYr) rrXrrrrrrNrs rsave_predefinedzACL.save_predefined0s_h$@ A 11*=J JJ$7(?(?,G     s ,AA c xtd5|jg|||||||dddy#1swYyxYw)IRemove all ACL entries. If :attr:`user_project` is set, bills the API request to that project. Note that this won't actually remove *ALL* the rules, but it will remove all the non-default rules. In short, you'll still have access to a bucket that you created even after you clear ACL rules with this method. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.clearrrrrrrrNrN)rr)rrrrrrrNrs rr[z ACL.clearrsLb$7 8  II$7(?(?,G     s09r))r<r=r>r?rrrS frozensetrUrOrrrrrrQ classmethodrYr\r`rlrorrrtr^rwr|r~rgrhrpropertyrrrrPrrrrr[r@rrrBrBls`AN-,#.1.%=%  FKIL&6 )  @@ ,7",4 : ; 8'4,"" !*:-%>X! $ $$( 7Ur  $ $$( 7CP $ $$( 7@H $ $$( 7;rrBcbeZdZdZfdZedZedZedZedZ xZ S) BucketACLzAn ACL specifically for a bucket. :type bucket: :class:`google.cloud.storage.bucket.Bucket` :param bucket: The bucket to which this ACL relates. c8tt| ||_yr)superrrbucket)rr __class__s rrzBucketACL.__init__s i') rc.|jjS)z&The client bound to this ACL's bucket.)rrrs rrzBucketACL.clients{{!!!rcL|jjd|jS)3Compute the path for GET API requests for this ACL./)rrrrs rrzBucketACL.reload_paths'++""#1T%8%8$9::rc.|jjSz5Compute the path for PATCH API requests for this ACL.)rrrs rrzBucketACL.save_paths{{rc.|jjSz?Compute the user project charged for API requests for this ACL.)rrrs rrzBucketACL.user_projects{{'''r) r<r=r>r?rrrrrr __classcell__rs@rrrs] "";;  ((rrceZdZdZdZdZy)DefaultObjectACLz9A class representing the default object ACL for a bucket.defaultObjectAclpredefinedDefaultObjectAclN)r<r=r>r?rrr@rrrrsC'N:rrceZdZdZfdZedZedZedZedZ dddddde e ffd Z ddddde e ffd Z ddddde e ffd ZxZS) ObjectACLzAn ACL specifically for a Cloud Storage object / blob. :type blob: :class:`google.cloud.storage.blob.Blob` :param blob: The blob that this ACL corresponds to. c8tt| ||_yr)rrrblob)rrrs rrzObjectACL.__init__s i') rc.|jjS)z$The client bound to this ACL's blob.)rrrs rrzObjectACL.clientsyyrc4|jjdS)rz/aclrrrs rrzObjectACL.reload_paths))..!&&rc.|jjSrrrs rrzObjectACL.save_pathsyy~~rc.|jjSr)rrrs rrzObjectACL.user_projectsyy%%%rNc 4t |||||||||y)a!Save this ACL for the current object. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rrrrrrrNrN)rr) rrrrrrrrNrrs rrzObjectACL.saves/b   3$;$;(C  rc 4t |||||||||y)aSave this ACL for the current object using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rXrrrrrrNrN)rr) rrXrrrrrrNrrs rrzObjectACL.save_predefined2s0h ! 3$;$;(C rc 2t||||||||y)rrN)rr[) rrrrrrrNrrs rr[zObjectACL.clearqs,b   3$;$;(C  r)r<r=r>r?rrrrrrrrrrr[rrs@rrrs   ''&&  $ $$( : ~ $ $$( = B $ $$( 9 9 rrN)r?google.cloud.storage._helpersr+google.cloud.storage._opentelemetry_tracingrgoogle.cloud.storage.constantsrgoogle.cloud.storage.retryrrobjectr rBrrrr@rrrs],JI; O+O+dA &A H((@;y;S S r