OwlCyberSecurity - MANAGER
Edit File: resource.pyc
� �mec @ s� d d l m Z d d d d d d d d d d d d d d g Z d d l Z d d l Z d d l m Z d d l m Z m Z d d l m Z d d l m Z m Z m Z m Z m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z d d l m Z m Z m Z d d l m! Z! d d l m" Z" m# Z# d d l m$ Z$ m% Z% d d l& m' Z' d d l( m) Z) m* Z* d d l+ m, Z, m- Z- m. Z. d d! l/ m0 Z0 d d" l1 m2 Z2 d d# l3 m4 Z4 d d$ l5 m6 Z6 d d% l7 m8 Z8 m9 Z9 d d& l: m; Z; d d' l< m= Z= m> Z> m? Z? d d( l@ mA ZA d d) lB mC ZC d d* lD mE ZE mF ZF mG ZG d d+ lH mI ZI d d, lJ mK ZK d d- lL mM ZM e � ZN d e8 f d. � � YZO d eO e9 f d/ � � YZP d eP e4 f d0 � � YZQ d eP f d1 � � YZR d eP f d2 � � YZS d eT f d3 � � YZU d4 � ZV d e f d5 � � YZW e$ eW � d6 d7 f e jX jY e" d8 f <d e f d9 � � YZZ e$ eZ � d e f d: � � YZ[ e$ e[ � d; e f d< � � YZ\ e$ e\ � e j] e jX e j^ e j_ � � e j` e ja e j_ � � � e jb � eW � � � Zc e j] e jX e j^ e j_ � � e j` e ja e jd � � � e jb � eW � � � Ze e jf e jg e ja e j_ � � e jh d= i d> d? 6� � � Zi e jf e jg e ja e j_ � � e jh d= i d> d? 6� e jg e ja e jd � � e jh d@ i d> d? 6� � e jg e ja e jj � � e jh dA i d> d? 6� e jg e ja e jk � � e jh dB i d> d? 6� � e jg e ja e jl � � e jh dC i d> d? 6� � e jg e ja e jm � � e jh dD i d> d? 6� � e jg e ja e jn � � e jh dE i d> d? 6� � � e jg e ja e jo � � e jh dF i d> d? 6� � e jg e ja e jp � � e jh dG i d> d? 6� � e jg e ja e jq � � e jh dH i d> d? 6� � e jg e ja e jr � � e jh dI i d> d? 6� � � � Zs e j^ e jt � � Zu dJ e f dK � � YZv d S(L i����( t print_functiont DAVPropertyMixInt DAVResourcet DAVLeafResourcet DAVPrincipalResourcet DAVPrincipalCollectionResourcet AccessDeniedErrort isPrincipalResourcet TwistedACLInheritablet TwistedGETContentMD5t TwistedQuotaRootPropertyt allACLt readonlyACLt davPrivilegeSett unauthenticatedPrincipalN( t implements( t LoginFailedt UnauthorizedLogin( t Failure( t Deferredt maybeDeferredt succeedt inlineCallbackst returnValue( t reactor( t Certificate( t Logger( t element( t encodeXMLName( t WebDAVElementt WebDAVEmptyElementt WebDAVTextElement( t dav_namespace( t twisted_dav_namespacet twisted_private_namespace( t registerElementt lookupElement( t responsecode( t TLSCredentialsFactoryt TLSCredentials( t HTTPErrort RedirectResponset StatusResponse( t generateContentType( t IResponse( t LeafResource( t NoURLForResourceError( t MetaDataMixint StaticRenderMixin( t UnauthorizedResponse( t IDAVResourcet IDAVPrincipalResourcet IDAVPrincipalCollectionResource( t NeedPrivilegesResponse( t NonePropertyStore( t unimplementedt parentForURLt joinURL( t PrincipalCredentials( t customxml( t lowerc B s� e Z d Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z e d � � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z RS( s< Mix-in class which implements the DAV property access API in L{IDAVResource}. There are three categories of DAV properties, for the purposes of how this class manages them. A X{property} is either a X{live property} or a X{dead property}, and live properties are split into two categories: 1. Dead properties. There are properties that the server simply stores as opaque data. These are store in the X{dead property store}, which is provided by subclasses via the L{deadProperties} method. 2. Live properties which are always computed. These properties aren't stored anywhere (by this class) but instead are derived from the resource state or from data that is persisted elsewhere. These are listed in the L{liveProperties} attribute and are handled explicitly by the L{readProperty} method. 3. Live properties may be acted on specially and are stored in the X{dead property store}. These are not listed in the L{liveProperties} attribute, but may be handled specially by the property access methods. For example, L{writeProperty} might validate the data and refuse to write data it deems inappropriate for a given property. There are two sets of property access methods. The first group (L{hasProperty}, etc.) provides access to all properties. They automatically figure out which category a property falls into and act accordingly. The second group (L{hasDeadProperty}, etc.) accesses the dead property store directly and bypasses any live property logic that exists in the first group of methods. These methods are used by the first group of methods, and there are cases where they may be needed by other methods. I{Accessing dead properties directly should be done with caution.} Bypassing the live property logic means that values may not be the correct ones for use in DAV requests such as PROPFIND, and may be bypassing security checks. In general, one should never bypass the live property logic as part of a client request for property data. Properties in the L{twisted_private_namespace} namespace are internal to the server and should not be exposed to clients. They can only be accessed via the dead property store. c C s� t d f t d f t d f t d f t d f t d f t d f t d f t d f t d f t d f t d f t d f t d f t d f t d f t d f t d f t d f f S( Nt resourcetypet getetagt getcontenttypet getcontentlengtht getlastmodifiedt creationdatet displaynamet supportedlocks supported-report-sets supported-privilege-sets current-user-privilege-sets current-user-principalt acls acl-restrictionss inherited-acl-sets principal-collection-sets quota-available-bytess quota-used-bytess resource-class( R R! ( t self( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt liveProperties� s& c C s t d f t d f f S( sn These are not live but are generated by the server not from the dead property store. s quota-available-bytess quota-used-bytes( R ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt dynamicProperties� s c C s( t | d � s! t | � | _ n | j S( s/ Provides internal access to the WebDAV dead property store. You probably shouldn't be calling this directly if you can use the property accessors in the L{IDAVResource} API instead. However, a subclass must override this method to provide it's own dead property store. This implementation returns an instance of L{NonePropertyStore}, which cannot store dead properties. Subclasses must override this method if they wish to store dead properties. @return: a dict-like object from which one can read and to which one can write dead properties. Keys are qname tuples (i.e. C{(namespace, name)}) as returned by L{WebDAVElement.qname()} and values are L{WebDAVElement} instances. t _dead_properties( t hasattrR6 RI ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt deadProperties� s c C s� t | � t k r | } n | j | j f } | d t k rG t t � S| \ } } | t k r� | d k r� | j | � } | j d � � | Sn t | | j � k p� | j � j | � � S( s2 See L{IDAVResource.hasProperty}. i s quota-available-bytess quota-used-bytesc S s | S( N( ( t result( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt <lambda>� t ( s quota-available-bytess quota-used-bytes( t typet tuplet namespacet nameR" R t FalseR t hasQuotat addCallbackRG RK t contains( RF t propertyt requestt qnameRQ RR t d( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt hasProperty� s c s" t � � � f d � � } | � S( s3 See L{IDAVResource.readProperty}. c 3 s t � � t k r' � } t � � � n � j � } � j � � | \ } } | t k r�| d k r� � j � j | � r� t � j � j | � � n � j � r� t t j j � n t t j j � n | d k r� j � V} | d k r� t d � n t t j | j � � � n | d k ra� j � } | d k rEt d � n t t j t | � � � n | d k r�� j � } | d k r�t t j d � � q�t t j t | � � � n | d k r� j � } | d k r�t d � n t t j j | � � n | d k rK� j � } | d k r2t d � n t t j j | � � n | d k r�� j � } | d k r|t d � n t t j | � � n | d k r�t t j t j! t j" j# t j$ j% � t j! t j" j& t j$ j% � � � n | d k r+t t j' g � j( � D] } t j) | � ^ q � � n | d k rNt � j* � � V� n | d k rmt t j+ � � n | d k r�t t j, � j- � � � n | d k r�t t j. g � j/ � D] } t j0 | j1 � � ^ q�� � n t2 � � � f d � � } | d k r>t2 � � f d � � } t | t j3 � f | � V� n | d k r�t2 � � f d � � } t | t j4 � f | � V� n | d k r�t t j5 � j6 � � j7 d � � n | d k r � j8 � � V} | d k r�t9 t: t; j< d � f � � � q t t j= t | d � � � n | d k r�� j8 � � V} | d k rht9 t: t; j< d � f � � � q�t t j> t | d � � � q�nb | t? k r�| d k r�t t@ � jA jB � � q�n. | tC k r�t9 t: t; jD d � f � � � n t � j � j | � � d S( NR= R> R? R@ RN RA RB RC RD s supported-report-sets supported-privilege-sets acl-restrictionss inherited-acl-sets principal-collection-setc 3 s` y � j � | � V| � V} Wn0 t k rQ t t t j d � f � � � n Xt | � d S( Ns( Access denied while reading property %s.( t checkPrivilegesR R( R* R% t UNAUTHORIZEDR ( t privilegest callbackRL ( RX RF t sname( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt ifAllowedF s s current-user-privilege-setc 3 s' � j � � V} t t j | � � d S( N( t currentPrivilegesR R t CurrentUserPrivilegeSet( t privs( RX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR_ T s RE c 3 s9 � j � � V} | d k r+ t j � } n t | � d S( N( t accessControlListt NoneR t ACLR ( RE ( RX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR_ ^ s s current-user-principali s quota-available-bytess Property %s does not exist.s quota-used-bytesi s resource-classs9 Properties in the %s namespace are private to the server.(E RO RP R RY R` R RK RV R t gett isCollectionR t ResourceTypet collectiont emptyt etagRf t GETETagt generatet contentTypet GETContentTypeR+ t contentLengtht GETContentLengtht strt lastModifiedt GETLastModifiedt fromDatet creationDatet CreationDatet displayNamet DisplayNamet SupportedLockt LockEntryt LockScopet exclusivet LockTypet writet sharedt SupportedReportSett supportedReportst SupportedReportt supportedPrivilegest ACLRestrictionst InheritedACLSett inheritedACLSett PrincipalCollectionSett principalCollectionst HReft principalCollectionURLR t ReadCurrentUserPrivilegeSett ReadACLt CurrentUserPrincipalt currentPrincipalt childrent quotaR( R* R% t NOT_FOUNDt QuotaAvailableBytest QuotaUsedBytesR! t ResourceClasst __class__t __name__R" t FORBIDDEN( RY RQ RR Rm t mimeTypet lengthRu Rx Rz t reportt principalCollectionRa R_ t qvalue( RW RX RF ( R` s& /opt/cpanel-ccs/txweb2/dav/resource.pyt defer� s� , 2 # ( R ( RF RW RX R� ( ( RW RX RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyt readProperty� s �c s> t � t � s" t d � f � � � � f d � } t | � S( s4 See L{IDAVResource.writeProperty}. s Not a property: %rc s{ � j r1 t t t j d � j � f � � � n � j t k rh t t t j d � j � f � � � n � j � j � � S( Ns% Protected property %s may not be set.s9 Properties in the %s namespace are private to the server.( t protectedR( R* R% R� R` RQ R" RK t set( ( RW RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s ( t isinstanceR t AssertionErrorR ( RF RW RX R� ( ( RW RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyt writeProperty� s c s � � f d � } t | � S( s5 See L{IDAVResource.removeProperty}. c s� t � � t k r' � } t � � } n � j � } � j � } | � j � k rs t t t j d | f � � � n | d t k r� t t t j d | d f � � � n � j � j | � S( Ns# Live property %s cannot be deleted.i s9 Properties in the %s namespace are private to the server.( RO RP R RY R` RG R( R* R% R� R" RK t delete( RY R` ( RW RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s ( R ( RF RW RX R� ( ( RW RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyt removeProperty� s c c s� t | j � � } xY | j � D]K } | j | | � V} | s] | | k rj | j | � qj q | j | � q WxF | j � j � D]2 } | | k r� | d t k r� | j | � q� q� Wt | � d S( s5 See L{IDAVResource.listProperties}. i N( R� RG RH R[ t removet addRK t listR" R ( RF RX t qnamest dqnamet hasRY ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt listProperties� s c C s) d � } | j | � } | j | � | S( s� Some DAV properties should not be returned to a C{DAV:allprop} query. RFC 3253 defines several such properties. This method computes a subset of the property qnames returned by L{listProperties} by filtering out elements whose class have the C{.hidden} attribute set to C{True}. @return: a list of qnames of properties which are defined and are appropriate for use in response to a C{DAV:allprop} query. c S s_ g } xR | D]J } y# t | � j s5 | j | � n Wq t k rV | j | � q Xq W| S( N( R$ t hiddent appendt KeyError( R� RL RY ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt doList� s ( R� RU ( RF RX R� RZ ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt listAllprop� s c C s: t | � t k r | } n | j � } | j � j | � S( s� Same as L{hasProperty}, but bypasses the live property store and checks directly from the dead property store. ( RO RP RY RK RV ( RF RW RY ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt hasDeadProperty� s c C s: t | � t k r | } n | j � } | j � j | � S( s� Same as L{readProperty}, but bypasses the live property store and reads directly from the dead property store. ( RO RP RY RK Rh ( RF RW RY ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt readDeadProperty s c C s | j � j | � d S( s+ Same as L{writeProperty}, but bypasses the live property store and writes directly to the dead property store. Note that this should not be used unless you know that you are writing to an overrideable live property, as this bypasses the logic which protects protected properties. The result of writing to a non-overrideable live property with this method is undefined; the value in the dead property store may or may not be ignored when reading the property with L{readProperty}. N( RK R� ( RF RW ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt writeDeadProperty s c C sP | j | � rL t | � t k r* | } n | j � } | j � j | � n d S( s� Same as L{removeProperty}, but bypasses the live property store and acts directly on the dead property store. N( R� RO RP RY RK R� ( RF RW RY ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt removeDeadProperty" s c C sK | j t j d f � r4 | j t j d f � j � St t | � j � Sd S( NR? ( R� R R R� R� t superR Rp ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRp 3 s c C sK | j t j d f � r4 t | j t j d f � � St t | � j � Sd S( NRC ( R� R R Rt R� R� R Rz ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRz ; s ( R� t __module__t __doc__RG RH RK R[ R� R� R� R R� R� R� R� R� R� Rp Rz ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR X s 0 � c B s+ e Z d Z e e � d2 d � Z d � Z d � Z d2 d2 d � Z e d � � Z e d � � Z d � Z d � Z e d � Z d � Z d � Z d � Z d � Z d � Z d � Z e d � � Z d � Z d � Z e e d2 d2 d � � Z d � Z d � Z e e e d2 d � � Z d � Z d � Z e d � � Z! e d � � Z" d � Z# d � Z$ d � Z% e d � � Z& d � Z' d � Z( d! � Z) e d" � � Z* d# � Z+ d$ � Z, d% � Z- d& � Z. d' � Z/ d( � Z0 e d) � � Z1 d* � Z2 d+ � Z3 d, � Z4 d- � Z5 d. � Z6 d/ � Z7 d0 � Z8 d1 � Z9 RS(3 s WebDAV resource. c C s; | d k r7 t g | D] } t | � ^ q � | _ n d S( s� @param principalCollections: an iterable of L{IDAVPrincipalCollectionResource}s which contain principals to be used in ACLs for this resource. N( Rf t frozensetR4 t _principalCollections( RF R� R� ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt __init__J s c C s t | � d S( s� This implementation raises L{NotImplementedError}. @return: a sequence of strings denoting WebDAV compliance classes. For example, a DAV level 2 server might return ("1", "2"). N( R7 ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt davComplianceClassesZ s c C s t | � d S( s� See L{IDAVResource.isCollection}. This implementation raises L{NotImplementedError}; a subclass must override this method. N( R7 ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRi c s c s� � d k s t d � f � � � d k s8 � j � rB t d � St � � � j � � � g � � f d � � � � � f d � � � � � � � f d � � � � � � � � � � f d � � � � f d � } t � j � j | � j � j � � S( s� See L{IDAVResource.findChildren}. This implementation works for C{depth} values of C{"0"}, C{"1"}, and C{"infinity"}. As long as C{self.listChildren} is implemented t 0t 1t infinitys Invalid depth: %sc s! | j t � t j d � � d S( Ni ( t trapR R t callLater( t failure( t getChild( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt checkPrivilegesError� s c sb � d k s t � d � r d S� d k r0 � S� j � � d � �} | j � f d � � | S( NR\ t inherited_acesc s � S( N( ( t _( t child( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRM � RN ( Rf RJ R\ RU ( R� RZ ( R� R^ RX ( R� s& /opt/cpanel-ccs/txweb2/dav/resource.pyR\ � s c s� | d k r � d | d � nk | j � r~ � | | d � � d k r� | j � � � � � } | j � f d � � | Sn � | | � t j d � � d S( Nt /R� c s t j d � � S( Ni ( R R� ( t x( R� ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRM � RN i ( Rf Ri t findChildrenRU R R� ( R� t childpathRZ ( R_ t depthR� R^ RX ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt gotChild� s c s� y � j � } Wn t k r0 � j d � n^ Xt � t j | � � } � j � | � } | j � � | j � � | f � | j � j � d S( N( t popt IndexErrorR_ Rf R9 t urllibt quotet locateChildResourceRU t addCallbackst addErrbackt errback( t childnameR� RZ ( t basepathR\ R� R� t completionDeferredR� RX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c s t | � � (� � d S( N( R� ( t listChildrenResult( R� R� ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt gotChildren� s ( R� R� R� N( R� Ri R Rf R t urlForResourceR t listChildrenRU R� R� ( RF R� RX R_ R^ R� R� ( ( R� R_ R\ R� R� R� R� R� R� R� R^ RX RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� l s $ "c c s6 | d k s t d | f � � | d k s8 | j � rE t d � n g } g } g } | r� xK | D]@ } | j d � j d � d k r� | n | j | j d � � qd Wn g } | j | � } t | j � V� } x | D]} t | t j | � � } y | j | | � V} WnC t k rT} t j d t | � f � | r� | | � q� q� n X| d k r� | j � r�| j | | d f � n | r�| | k r�q� n | j � r�| j | | d f � q�| j | | f � q� q� W| r%x= t | � t | � D]" } | t | t j | � � � q�Wn i } x{ | D]s \ } } | j | d t d | �V} | j | � V} | j t j | � | f | | g f � d j | | f � q2Wx� | j � D]� } | j | | d | d | | � V} | rxb | d D]" \ } } | r�| | | � q�q�Wq�| r�x( | d D] \ } } | | | � q+Wq�q�W| d k r(i } x? | D]7 } | j d d � \ } } | j | g � j | � qhWx� | D]w \ } } | j d � d } | | k r�| j | � V} | j | | | | | | | r | | n d | d | �Vq�q�Wn t d � d S( sj See L{IDAVResource.findChildren}. This implementation works for C{depth} values of C{"0"}, C{"1"}, and C{"infinity"}. As long as C{self.listChildren} is implemented @param depth: a C{str} for the depth: "0", "1" and "infinity" only allowed. @param request: the L{Request} for the current request in progress @param okcallback: a callback function used on all resources that pass the privilege check, or C{None} @param badcallback: a callback function used on all resources that fail the privilege check, or C{None} @param missingcallback: a callback function used on all resources that are missing, or C{None} @param names: a C{list} of C{str}'s containing the names of the child resources to lookup. If empty or C{None} all children will be examined, otherwise only the ones in the list. @param privileges: a list of privileges to check. @param inherited_aces: the list of parent ACEs that are inherited by all children. R� R� R� s Invalid depth: %sR� i����s Resource cannot be located: %st inheritanceR� i i i i����N( R� R� R� ( R� Ri R Rf t rstript findR� R� R� R� R9 R� R� R� R( t logt errorRt R� Re RS R� t setdefaultt picklet dumpst itervaluest checkACLPrivileget splitt inheritedACEsforChildrent findChildrenFaster( RF R� RX t okcallbackt badcallbackt missingcallbackt unavailablecallbackt namesR^ R� t names1t namesDeept collections1RR R� R� t childnamesR� R� R� t et aclmapt resourcet urlRE t supportedPrivst itemst checkedt child_collectionsRk t collection_namet collection_inherited_aces( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s� A # c c sQ | d k r t t � n | j | � } | j d j d k sQ t d | f � � | j | | � } t | � } g } x� | j D]� } x� t | � D]� } | j t j | � | j | � s� q� n | j | | j | � V} | r� | j r� q� q� n | j s� q� n | j | � | j s� | j | � q� q� Wq Wt t | � t | � d k � d S( Ni t unauthenticatedt hrefs Principal is not an actor: %r( R R ( Rf R RS R� R� RR R� t fullAccessControlListR� RP t matchPrivilegeR t PrivilegeR^ t matchPrincipalt principalt invertR� t allowR� t len( RF RX RE t privysetR^ R� R t pendingt deniedt acet privileget match( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� / s0 c C s> | r t | j � } n g } | j | � t j | � } | S( sa See L{IDAVResource.accessControlList}. This implementation looks up the ACL in the private property C{(L{twisted_private_namespace}, "acl")}. If no ACL has been stored for this resource, it returns the value returned by C{defaultAccessControlList}. If access is disabled it will return C{None}. ( R� R� t extendR Rg ( RF RE R� t aces( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR \ s c C s� g } | j t j t j � � � | j t j t j � � � | j t j t j � � � | j t j t j � � � | j t j t j � � � | S( s� See L{IDAVResource.supportedReports}. This implementation lists the three main ACL reports and expand-property. ( R� R t Reportt ACLPrincipalPropSett PrincipalMatcht PrincipalPropertySearcht ExpandPropertyR; t CalendarServerPrincipalSearch( RF RL ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c sJ � � � � � f d � } � f d � � � j � � } | j | � | S( s0 See L{IDAVResource.authorize}. c s" � j � � � � } | j � � S( N( R\ R� ( RL t privilegeCheck( R^ t recurseRX RF t whenAccessDenied( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt whenAuthenticated� s c sd | j t � d � } � j d k rD t j � j � j � j | � S| t � j | j j � � Sd S( Nc S s t t | � � S( N( R R( ( t response( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt translateError� s ( R� R t authnUserRf R1 t makeResponset credentialFactoriest remoteAddrRU R5 t urit valuet errors( t fR ( RX ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR � s ( t authenticateRU ( RF RX R^ R R RZ ( ( R^ R RX RF R s& /opt/cpanel-ccs/txweb2/dav/resource.pyt authorize� s c s$ t � d d � d k rF t � d d � d k rF t � j � j f � St � d � op t � d � op t � d � s� d � _ d � _ t � j � j f � S� j � d k r� t j � j � f } n� � j j t j d g � d } � j j t j d g � d } | d k rky+ t j | j d d � j d d � � } Wn t t j � � n Xt j t | � f } n< | d k r�t j t d d | �f } n � j j d � } | d k r�| d � j k rt j d | d � j j � f � t j � j � j � } | j d � � S� j | d } � � � f d � } d � � � f d � } � f d � } � f d � } | j | d � � } | j | � | j | � | j | | � | Snk t � d � r�t � d � r�t � d � r�t � j � j f � Sd � _ d � _ t � j � j f � Sd S( s� Authenticate the given request against the portal, setting both C{request.authzUser} (a L{DAVPrincipalResource}, the user for the purposes of authorization) and C{request.authnUser} (a L{DAVPrincipalResource}, the user for the purposes of authentication) when it has been authenticated. In order to authenticate, the request must have been previously prepared by L{txweb2.dav.auth.AuthenticationWrapper.hook} to have the necessary authentication metadata. If the request was not thusly prepared, both C{authzUser} and C{authnUser} will be None. @param request: the request which may contain authentication information and a reference to a portal to authenticate against. @type request: L{txweb2.iweb.IRequest}. @return: a L{Deferred} which fires with a 2-tuple of C{(authnUser, authzUser)} if either the request is unauthenticated OR contains valid credentials to authenticate as a principal, or errbacks with L{HTTPError} if the authentication scheme is unsupported, or the credentials provided by the request are not valid. R t authzUsert portalR t loginInterfacest *i s \rs s \ns t usernamet authorizations< Client authentication scheme %s is not provided by server %sc S s t t | � � S( N( R R( ( R ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRM RN c s/ � j � | j j � � } | j � | � | S( N( t principalsForAuthIDR, R< RU ( t credsRZ ( t gotDetailsRX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt gotCreds s c S sf | d k r6 t j d | j f � t t t j � � St | d � } t | d � } t | | | � S( Ns5 Could not find the principal resource for user id: %si i ( NN( Rf R� t infoR, R R( R% R] R3 R: ( t detailsR/ t authnPrincipalt authzPrincipal( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR0 s c s � j j | d � j � S( N( R) t loginRf R* ( t pcreds( RX ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR6 s c s* | d � _ | d � _ � j � j f S( Ni i ( R R( ( RL ( RX ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt gotAuth# s c s� | j t t � � j j g } � j j d d � } x$ | D] } | j d j | � � q; Wd j | � } t j d | j | f � t j � j � j � } | j d � � | S( Ns x-forwarded-forRN s fwd={}s , s% Authentication failed: %s, client: %sc S s t t | � � S( N( R R( ( R ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRM 3 RN ( R� R R R! t hostt headerst getRawHeadersR� t formatt joinR� R2 R# R1 R R RU ( R% t ipst fwdHeaderst hdrRZ ( RX ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt translateUnauthenticated( s i t checkedWikiN( t getattrRf R R R( RJ t clientCredentialsR& t schemeR: R; R' t CERTIFICATE_HEADERt USERNAME_HEADERR t loadPEMt replaceR( R% t BAD_REQUESTt getHeaderR R� t debugt keysR1 R R! RU t decodeR� ( RF RX t authHeadert rproxy_certt rproxy_usert certRZ t factoryR1 R6 R8 RA ( ( R0 RX RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyR& � sf + c C s- t | d d � d k r% | j j � St Sd S( s� @param request: the request being processed. @return: the current authorized principal, as derived from the given request. R( N( RC Rf R( t principalElementR ( RF RX ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� L s c C s t | d � r | j Sd Sd S( s; See L{IDAVResource.principalCollections}. R� N( ( RJ R� ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� W s c C s t S( s @return: the L{element.ACL} element containing the default access control list for this resource. ( R ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt defaultRootAccessControlList` s c C s t t j � � S( s @return: the L{element.ACL} element containing the default access control list for this resource. ( R R Rg ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt defaultAccessControlListl s c C s | j | � d S( s� See L{IDAVResource.setAccessControlList}. This implementation stores the ACL in the private property C{(L{twisted_private_namespace}, "acl")}. N( R� ( RF RE ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt setAccessControlListw s c # sA | j | d t �V} | d k r/ t d � n g � � � f d � � | j | � V} x@ | j D]5 } t | t j � s� t d | f � � � | � qa Wt } x�| j D]�} x\ | j D]Q } | j | j k r� | j r t j d | | f � t t j d f � q q� q� W| j rK| rKt j d | | f � t t j d f � n | j } x[ | j D]P } | j d � k r_t j d | j d | | f � t t j d f � q_q_W| j r�t j d | | f � t t j d f � n | j r t j d | | f � t t j d f � n | j | j | � V} | s� t j d | j | | f � t t j d f � q� q� Wg | j D] } | ^ q|} g } x� | j D]v } xm t | � D]< \ } } | j | j | j � r�| j | � | | =Pq�q�W| j r�| j r�| j | � q�q�W| j | � | j | � Vt d � d S( s� Merges the supplied access control list with the one on this resource. Merging means change all the non-inherited and non-protected ace's in the original, and do not allow the new one to specify an inherited or protected access control entry. This is the behaviour required by the C{ACL} request. (RFC 3744, section 8.1). @param new_acl: an L{element.ACL} element @param request: the request being processed. @return: a tuple of the C{DAV:error} precondition element if an error occurred, C{None} otherwise. This implementation stores the ACL in the private property t expandingc s` xY | j D]N } t | t j � r9 � j | j d � q t | t j � r � | � q q Wd S( s� Add the element in any DAV:Privilege to our list and recurse into any DAV:SupportedPrivilege's i N( R� R� R R R� t SupportedPrivilege( t spt item( t addSupportedPrivileget supported( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR\ � s s Not a SupportedPrivilege: %rs4 Attempt to overwrite protected ace %r on resource %rs no-protected-ace-conflicts9 Attempt to set grant ace %r after deny ace on resource %rs deny-before-granti s@ Attempt to use unsupported privilege %r in ace %r on resource %rs not-supported-privileges1 Attempt to create protected ace %r on resource %rs no-ace-conflicts1 Attempt to create inherited ace %r on resource %rsA Attempt to use unrecognized principal %r in ace %r on resource %rs recognized-principalN( Re t TrueRf R R� R� R� R RY R� RS R R� R� R� R R R^ t inheritedt validPrincipalt enumeratet samePrincipalR� R t writeNewACEs( RF t new_aclRX t old_aclR� R[ t got_denyR t old_aceR t validt new_acest new_sett it new_ace( ( R\ R] s& /opt/cpanel-ccs/txweb2/dav/resource.pyt mergeAccessControlList� sr % c C s | j t j | � � S( s& Write a new ACL to the resource's property store. This is a separate method so that it can be overridden by resources that need to do extra processing of ACLs being set via the ACL command. @param new_aces: C{list} of L{ACE} for ACL being set. ( RW R Rg ( RF Ri ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRc & s c C s7 x0 | D]( } | | k s+ | j | | � r t Sq Wt S( N( t isAggregateOfR^ RS ( RF R t ace_privilegesR� t ace_privilege( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR 0 s c # s� | d k r | j | � } n | j | � V} | j d j d k sW t d | f � � g } | d f g � | r� | j d | � f d � � Vn xE� D]=\ } } | j | d | �V} | d k r� | j | t | � f � q� n t | � } g } x� | j D]� } x� t | � D]� } | j t j | � | j | � sBqn | j | | j | � V} | rs| j r�qq�n | j s�qn | j | � | j s| j | � qqWqW| | 7} | r� | j | | f � q� q� W| r�t | � � n t d � d S( s� Check whether the given principal has the given privileges. (RFC 3744, section 5.5) @param request: the request being processed. @param privileges: an iterable of L{WebDAVElement} elements denoting access control privileges. @param recurse: C{True} if a recursive check on all child resources of this resource should be performed as well, C{False} otherwise. @param principal: the L{element.Principal} to check privileges for. If C{None}, it is deduced from C{request} by calling L{currentPrincipal}. @param inherited_aces: a list of L{element.ACE}s corresponding to the pre-computed inheritable aces from the parent resource hierarchy. @return: a L{Deferred} that callbacks with C{None} or errbacks with an L{AccessDeniedError} i R R s Principal is not an actor: %rR� c s � j | | f � S( N( R� ( R� t y( t resources( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRM d RN R� N( R R ( Rf R� R� R� RR R� R� Re R� R� RP R R R R^ R R R R� R R R ( RF RX R^ R R R� R� R$ R� R" RE R R R R R ( ( Rr s& /opt/cpanel-ccs/txweb2/dav/resource.pyR\ : sR c C s t t � S( s� See L{IDAVResource.supportedPrivileges}. This implementation returns a supported privilege set containing only the DAV:all privilege. ( R R ( RF RX ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c C s | j | � } | j | | � S( s� See L{IDAVResource.currentPrivileges}. This implementation returns a current privilege set containing only the DAV:all privilege. ( R� t privilegesForPrincipal( RF RX t current( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRb � s c # sp d } � � f d � } y � j t j � } Wn� t k r� } | j j t j k st t d t j | j j f � � | d k r� | � } n | d k r� � j � } q� � j � V} n X| rbt | j � } | d k r� | � } n | d k r�| d k r t | � } � j | � V} | r�| j � d t d t �V} | d k rTt d � n x� | j D]� } | j r}| j | � q^t � | j k r^t | j � } | j t � � | j t j t j | � � � | j t j | � � q^q^Wq�q n | j | � | sPg | D]: } t j g | j D] } | t � k r#| ^ q#� ^ q } n t j | � } n t | � d S( sc See L{IDAVResource.accessControlList}. This implementation looks up the ACL in the private property C{(L{twisted_private_namespace}, "acl")}. If no ACL has been stored for this resource, it returns the value returned by C{defaultAccessControlList}. If access is disabled it will return C{None}. c s2 � j � � } | d k s. t d � f � � | S( Ns2 urlForResource(self) returned None for resource %s( R� Rf R� ( R� ( RX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt getMyURL� s s> Expected %s response from readDeadProperty() exception, not %sR� R� RX N( Rf R� R Rg R( R t codeR% R� R� RU RV R� R� R8 t locateResourceRe R^ R R_ R� R R� t InheritedR� t ACER ( RF RX R� RX R� t myURLRu RE R� R t parentURLt parentt parent_aclR R� t c( ( RX RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyRe � sR & Gc s> � � f d � } � j � d t d t �} | j | � | S( sw Do some optimisation of access control calculation by determining any inherited ACLs outside of the child resource loop and supply those to the checkPrivileges on each child. @param request: the L{IRequest} for the request in progress. @return: a C{list} of L{Ace}s that child resources of this one will inherit. c s� | d k r d Sg } x� | j D]� } | j r? | j | � q t � | j k r t | j � } | j t � � | j t j t j � j � � � � � | j t j | � � q q W| S( N( Rf R� R_ R� R R� R� R Rx R� R� Ry ( R} R R R� ( RX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt gotACL+ s R� RX ( Re R^ RU ( RF RX R RZ ( ( RX RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� s c C s g S( s� @return: a sequence of L{element.HRef}s from which ACLs are inherited. This implementation returns an empty set. ( ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� F s c c sS | j | � V} | d k r) t d � n | j | | | � V} t | | f � d S( sv Return authentication and authorization principal identifiers for the authentication identifier passed in. In this implementation authn and authz principals are the same. @param request: the L{IRequest} for the request in progress. @param authid: a string containing the authentication/authorization identifier for the principal to lookup. @return: a deferred tuple of two tuples. Each tuple is C{(principal, principalURI)} where: C{principal} is the L{Principal} that is found; {principalURI} is the C{str} URI of the principal. The first tuple corresponds to authentication identifiers, the second to authorization identifiers. It will errback with an HTTPError(responsecode.FORBIDDEN) if the principal isn't found. N( NN( t findPrincipalForAuthIDRf R t authorizationPrincipal( RF RX t authidR4 R5 ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR. O s c c sN x= | j � D]/ } | j | � V} | d k r t | � q q Wt d � d S( s; Return authentication and authorization principal identifiers for the authentication identifier passed in. In this implementation authn and authz principals are the same. @param authid: a string containing the authentication/authorization identifier for the principal to lookup. @return: a tuple of C{(principal, principalURI)} where: C{principal} is the L{Principal} that is found; {principalURI} is the C{str} URI of the principal. If not found return None. N( R� t principalForUserRf R ( RF R� Rk R ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� k s c C s t | � S( s� Determine the authorization principal for the given request and authentication principal. This implementation simply uses that authentication principal as the authorization principal. @param request: the L{IRequest} for the request in progress. @param authid: a string containing the authentication/authorization identifier for the principal to lookup. @param authnPrincipal: the L{IDAVPrincipal} for the authenticated principal @return: a deferred result C{tuple} of (L{IDAVPrincipal}, C{str}) containing the authorization principal resource and URI respectively. ( R ( RF RX R� R4 ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c C s� | j d } | j d } t | � t | � k r� t | t j � rh t | j d � t | j d � k St | t j � r� t | j d � t | j d � k St Sn t Sd S( s Check whether the two principals are exactly the same in terms of elements and data. @param principal1: a L{Principal} to test. @param principal2: a L{Principal} to test. @return: C{True} if they are the same, C{False} otherwise. i N( R� RO R� R t PropertyR� Rt R^ RS ( RF t principal1t principal2( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRb � s c s� � j d � � j d � t � d � s5 i � _ n t � � t � � f � � j j � d � } | d k rx t | � S� � � � f d � } � � f d � } | � } | j | � | S( s� Check whether the principal1 is a principal in the set defined by principal2. @param principal1: a L{Principal} to test. C{principal1} must contain a L{element.HRef} or L{element.Unauthenticated} element. @param principal2: a L{Principal} to test. @param request: the request being processed. @return: C{True} if they match, C{False} otherwise. i t matchPrincipalsc s' t � t j � r t t � St � t j � rs t � t j � rJ t t � St � t j � rf t t � St t � SnW t � t j � r� t � t j � r� t t � St t � Sn t � t j � r� t t � St � t j � s� t d � f � � � � � f d � } � j � � � } | j | � | S( Ns Not an HRef: %rc sG | d k s t d � � � | k r( t S� j t � � t | � � � S( Ns principal2 is None( Rf R� R^ t principalIsGroupMemberRt ( R� ( R� RX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt resolved� s ( R� R t AllR R^ t Authenticatedt UnauthenticatedRS R� R� t resolvePrincipalRU ( R� RZ ( R� R� RX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt doMatch� s( c s | � j � <| S( N( R� ( R ( t cache_keyRX ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt cache� s N( R� RJ R� Rt Rh Rf R RU ( RF R� R� RX R R� R� RZ ( ( R� R� R� RX RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyR � s ( c c s` | j | � V} | j | � V} | rR t | t � rR | j | � V} t | � n t t � d S( s� Check whether one principal is a group member of another. @param principal1: C{str} principalURL for principal to test. @param principal2: C{str} principalURL for possible group principal to test against. @param request: the request being processed. @return: L{Deferred} with result C{True} if principal1 is a member of principal2, C{False} otherwise N( Rw R� R t containsPrincipalR RS ( RF R� R� RX t resource1t resource2t isContained( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c s � � � f d � } t | � S( s� Check whether the supplied principal is valid for this resource. @param ace_principal: the L{Principal} element to test @param request: the request being processed. @return C{True} if C{ace_principal} is valid, C{False} otherwise. This implementation tests for a valid element type and checks for an href principal that exists inside of a principal collection. c s] � j d } t | t j � r7 t j d | f � t St | t j � rY � j | � � St S( Ni sG Encountered a property principal (%s), but handling is not implemented.( R� R� R R� R� R� RS R� t validHrefPrincipalR^ ( t real_principal( t ace_principalRX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� s ( R ( RF R� RX R� ( ( R� RX RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyR` s c s5 � f d � } | j t � � � } | j | � | S( s� Check whether the supplied principal (in the form of an Href) is valid for this resource. @param href_principal: the L{Href} element to test @param request: the request being processed. @return C{True} if C{href_principal} is valid, C{False} otherwise. This implementation tests for a href element that corresponds to a principal resource and matches the principal-URL. c s" t | � o! | j � t � � k S( N( R t principalURLRt ( R� ( t href_principal( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt _matchPrincipalURLA s ( Rw Rt RU ( RF R� RX R� RZ ( ( R� s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� 0 s c sS t | t j � r� t j d | f � t d � S| j j d g t � � | j d � � � f d � } | j � � f | � } | j | � | St | t j � r� y t | � } Wn, t k r� t j d | f � t d � SXt j | j � � } n t | t j � rt | � St | t j t j t j f � sIt d | f � � t d � S( s� Resolves a L{element.Principal} element into a L{element.HRef} element if possible. Specifically, the given C{principal}'s contained element is resolved. L{element.Property} is resolved to the URI in the contained property. L{element.Self} is resolved to the URI of this resource. L{element.HRef} elements are returned as-is. All other principals, including meta-principals (eg. L{element.All}), resolve to C{None}. @param principal: the L{element.Principal} child element to resolve. @param request: the request being processed. @return: a deferred L{element.HRef} element or C{None}. s\ Encountered a property principal (%s), but handling is not implemented; invalid for ACL use.RQ RR c s� y | j � } WnH t k rZ } | j j t j k sV t d | j j t j f � � d SXt | t j � s� t j d t � � � f � d St | j � d k r� d S| j d } d S( Ns/ %s (!= %s) status from readProperty() exceptionsD Non-principal value in property %s referenced by property principal.i i ( t getResultR( R Rv R% R� R� Rf R� R t PrincipalR� R� R R R� ( R R� ( RR RQ ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt gotPrincipalv s s0 DAV:self ACE is set on non-principal resource %rs Not a meta-principal: %rN( R� R R� R� R� R Rf t attributesRh R R� RU t SelfR3 t TypeErrorR� R� R� R� R� R� ( RF R RX R� RZ ( ( RR RQ s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� K s4 c # s9 | j | � V} | d k r) t d � n g } g � x� | j D]� } | j | | j | � V} | r? g } | j | � V} x' | j D] } | j | j | � � q� W| j r� | j g | D] } | | k r� | ^ q� � q � j g | D] } | � k r� | ^ q� � q? q? Wt � f d � | D� � } t | � d S( s= See L{IDAVResource.privilegesForPrincipal}. c 3 s! | ] } | � k r | Vq d S( N( ( t .0t p( R ( s& /opt/cpanel-ccs/txweb2/dav/resource.pys <genexpr>� s N( ( Re Rf R R� R R R� R^ R t expandAggregateR RP ( RF R RX RE t grantedR R t psR� R� t allowed( ( R s& /opt/cpanel-ccs/txweb2/dav/resource.pyRs � s" /3 c C s4 x- | j D]" } | j | j | j � r | Sq Wd S( s� Find an ACE in the ACL that matches the supplied ACE's principal. @param acl: the L{ACL} to look at. @param ace: the L{ACE} to try and match @return: the L{ACE} in acl that matches, None otherwise. N( R� Rb R Rf ( RF RE R t a( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt matchACEinACL� s c C s d S( sk @return: a L{element.PrincipalSearchPropertySet} element describing the principal properties that can be searched on this principal collection, or C{None} if this is not a principal collection. This implementation returns None. Principal collection resources must override and return their own suitable response. N( Rf ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt principalSearchPropertySet� s c sm t � d � r2 � � j k r; t � j � � Sn i � _ � � f d � } � j � � } | j | � | S( sX Get current available & used quota values for this resource's quota root collection. @return: an L{Deferred} with result C{tuple} containing two C{int}'s the first is quota-available-bytes, the second is quota-used-bytes, or C{None} if quota is not defined on the resource. R� c sj | rY | j � � � � d k rY � � � f d � } | j � � } | j | � | Sn d � j � <d S( Nc s< � | } | d k r d } n | | f � j � <| | f S( Ni ( R� ( t usedt available( t qrootRX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt gotUsage s ( t quotaRootRf t currentQuotaUseRU R� ( t qroot_resourceR� RZ ( RX RF ( R� s& /opt/cpanel-ccs/txweb2/dav/resource.pyt gotQuotaRootResource s ( RJ R� R t quotaRootResourceRU ( RF RX R� RZ ( ( RX RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� s c C s) d � } | j | � } | j | � | S( s� Check whether this resource is under quota control by checking each parent to see if it has a quota root. @return: C{True} if under quota control, C{False} if not. c S s | d k S( N( Rf ( R� ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� 3 s ( R� RU ( RF RX R� RZ ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRT + s c C s | j t � S( sY @return: a C{True} if this resource has quota root, C{False} otherwise. ( R� R ( RF RX ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt hasQuotaRoot; s c C s0 | j t � r( t t | j t � � � Sd Sd S( s� @return: a C{int} containing the maximum allowed bytes if this collection is quota-controlled, or C{None} if not quota controlled. N( R� R t intRt R� Rf ( RF RX ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� A s c c s� | j | � r t | � n y | j | � } Wn t k rL t d � n Xxh | d k r� t | � } | d k rx Pn | j | � V} | d k r� Pn | j | � rP t | � qP qP Wt d � d S( sf Return the quota root for this resource. @return: L{DAVResource} or C{None} R� N( R� R R� R. Rf R8 Rw ( RF RX R� R| ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� L s c C s� | j � s t d � � | d k s? t | t � s? t d � � | d k rg | j t t | � � � n | j t � | j t � d S( s� @param maxsize: a C{int} containing the maximum allowed bytes for the contents of this collection, or C{None} to remove quota restriction. s& Only collections can have a quota roots maxsize must be an int or NoneN( Ri R� Rf R� R� R� R Rt R� t TwistedQuotaUsedProperty( RF RX t maxsize( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt setQuotaRooth s c C s t | � d S( s� Get the size of this resource (if its a collection get total for all children as well). TODO: Take into account size of dead-properties. @return: a C{int} containing the size of the resource. N( R7 ( RF RX ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt quotaSizez s c s2 � � f d � } | j � � } | j | � | S( s� Check to see whether all quota roots have sufficient available bytes. We currently do not use hierarchical quota checks - i.e. only the most immediate quota root parent is checked for quota. @param available: a C{int} containing the additional quota required. @return: C{True} if there is sufficient quota remaining on all quota roots, C{False} otherwise. c s? | r; | j � � } | d k r; � | d k r8 t Sq; n t S( Ni ( R� Rf RS R^ ( t quotarootR� ( R� RX ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt _defer� s ( R� RU ( RF RX R� R� RZ ( ( R� RX s& /opt/cpanel-ccs/txweb2/dav/resource.pyt checkQuota� s c s2 � � f d � } | j � � } | j | � | S( s Update the quota used value on all quota root parents of this resource. @param adjust: a C{int} containing the number of bytes added (positive) or removed (negative) that should be used to adjust the cached total. c s | r | j � � � Sd S( N( t updateQuotaUse( R� ( t adjustRX ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s ( R� RU ( RF RX R� R� RZ ( ( R� RX s& /opt/cpanel-ccs/txweb2/dav/resource.pyt quotaSizeAdjust� s c s� � j � s t d � � � j | � s3 t d � � � j t � ra t t t � j t � � � � S� f d � } � j | � } | j | � | Sd S( s7 Get the cached quota use value, or if not present (or invalid) determine quota use by brute force. @return: an L{Deferred} with a C{int} result containing the current used byte if this collection is quota-controlled, or C{None} if not quota controlled. s& Only collections can have a quota roots' Quota use only on quota root collectionc s � j t t | � � � | S( N( R� R� Rt ( RL ( RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s N( Ri R� R� R� R� R R� Rt R� R� RU ( RF RX R� RZ ( ( RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c sM � j � s t d � � � � � f d � } � j � � } | j | � | S( s� Update the quota used value on this resource. @param adjust: a C{int} containing the number of bytes added (positive) or removed (negative) that should be used to adjust the cached total. @return: an L{Deferred} with a C{int} result containing the current used byte if this collection is quota-controlled, or C{None} if not quota controlled. s& Only collections can have a quota rootc sg | � 7} | d k r2 � j t t | � � � n1 t j d | � f � � j t � � j � � Sd S( Ni sB Attempt to set quota used to a negative value: %s (adjustment: %s)( R� R� Rt R� R2 R� R� ( t size( R� RX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s ( Ri R� R� RU ( RF RX R� R� RZ ( ( R� RX RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c sx � j � r, � j d d k r, � j � � S� � f d � � � f d � } t t t � � j � � } | j � | � S( Ni����R� c s� t | � } � j d k r7 | j j d � j � � n � j � r� � j d d k r� | j j d � r� | j j d � j d � n | S( Nt OPTIONSt davi����R� s content-location( R, t methodR: t setHeaderR� Ri t patht hasHeader( R ( RX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt setHeaders� s 2 c s | j t � � | j j � S( N( R� R( R# R ( R% ( R� ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt onError s ( Ri R� t handleMissingTrailingSlashR R� R t renderHTTPR� ( RF RX R� RZ ( ( RX RF R� s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c C s5 t | j d t j t j | j � d d �d � � S( NR� t safes :/R� ( R) t unparseURLR� R� t unquoteR� ( RF RX ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� s N(: R� R� R� R R2 Rf R� R� Ri R� R R� R� R R� RS R' R& R� R� RU RV RW Rm Rc R R\ R� Rb R^ Re R� R� R. R� R� Rb R R� R` R� R� Rs R� R� R� RT R� R� R� R� R� R� R� R� R� R� R� ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR D sn Ix- % # � � \ n ) K ! [+ $ ) % (c B s e Z d Z d d d � Z RS( s( DAV resource with no children. c C s t d � S( N( R Rf ( RF R� RX R_ R^ R� ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� + s N( R� R� R� Rf R� ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR & s c B s� e Z d Z e e � d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z e d � � Z RS( sJ Resource representing a WebDAV principal. (RFC 3744, section 2) c C s; t t | � j � t d f t d f t d f t d f f S( Ns alternate-URI-sets principal-URLs group-member-sets group-membership( R� R RG R ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRG < s c C s d S( NR� s access-control( R� s access-control( ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� E s c C s t S( N( RS ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRi H s c s � � � f d � } t | � S( Nc sl t � � t k r � } n � j � } | \ } } | t k rS| d k rz t j g � j � D] } t j | � ^ q^ � S| d k r� t j t j � j � � � S| d k r� d � } � j � } | j | � | S| d k rd � } � j � } | j | � | S| d k rS� j � r:t j t j � t j � � St j t j � � SqSn t t � � j | � � S( Ns alternate-URI-sets principal-URLs group-member-setc S s/ t j g | D] } t j | j � � ^ q � S( N( R t GroupMemberSetR� R� ( t membersR� ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR_ ` s s group-membershipc S s/ t j g | D] } t j | j � � ^ q � S( N( R t GroupMembershipR� R� ( t membershipst g( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR_ k s R= ( RO RP RY R R t AlternateURISett alternateURIsR� t PrincipalURLR� t groupMembersRU t groupMembershipsRi Rj t CollectionR� R� R R� ( RY RQ RR t uR_ RZ ( RW RX RF ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� L s: ) ( R ( RF RW RX R� ( ( RW RX RF s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� K s 6c C s d S( s� See L{IDAVPrincipalResource.alternateURIs}. This implementation returns C{()}. Subclasses should override this method to provide alternate URIs for this resource if appropriate. ( ( ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c C s t | � d S( s� See L{IDAVPrincipalResource.principalURL}. This implementation raises L{NotImplementedError}. Subclasses must override this method to provide the principal URL for this resource. N( R7 ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c C s t j t j j | j � � � S( s� See L{IDAVPrincipalResource.principalURL}. This implementation raises L{NotImplementedError}. Subclasses must override this method to provide the principal URL for this resource. ( R R� R� t fromStringR� ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRT � s c C s t d � S( s. This implementation returns a Deferred which fires with C{()}, which is appropriate for non-group principals. Subclasses should override this method to provide member URLs for this resource if appropriate. @see: L{IDAVPrincipalResource.groupMembers}. ( ( R ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c C s t d � S( s> This implementation returns a Deferred which fires with C{()}, which is appropriate for non-group principals. Subclasses should override this method to provide expanded member URLs for this resource if appropriate. @see: L{IDAVPrincipalResource.expandedGroupMembers} ( ( R ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt expandedGroupMembers� s c C s t | � d S( s� See L{IDAVPrincipalResource.groupMemberships}. This implementation raises L{NotImplementedError}. Subclasses must override this method to provide the group URLs for this resource. N( R7 ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c sR t | � � | j � � k r( t t � S| j � } | j � f d � � | Sd S( s� Check whether the supplied principal matches this principal or is a member of this principal resource. @param href: the L{HRef} to test. @return: True if there is a match, False otherwise. c s# � g | D] } | j � ^ q k S( N( R� ( R� t member( R" ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyRM � s N( Rt R� R R^ R� RU ( RF R RZ ( ( R" s& /opt/cpanel-ccs/txweb2/dav/resource.pyt principalMatch� s c c s! | j � V} t | | k � d S( s$ Is the given principal contained within our expanded group membership? @param principal: The principal to check @type principal: L{DirectoryCalendarPrincipalResource} @return: True if principal is a member, False otherwise @rtype: C{boolean} N( R� R ( RF R R� ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s ( R� R� R� R R3 RG R� Ri R� R� R� RT R� R� R� R� R R� ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR 2 s = c B s6 e Z d Z e e � d d � Z d � Z d � Z RS( s� WebDAV principal collection resource. (RFC 3744, section 5.8) This is an abstract class; subclasses must implement C{principalForUser} in order to properly implement it. c C s; t j | d | �| j d � s. t d � � | | _ d S( s2 @param url: This resource's URL. R� R� s Collection URL must end in '/'N( R R� t endswithR� t _url( RF R� R� ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c C s | j S( s? Return the URL for this principal collection. ( R� ( RF ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s c C s t d | j � � d S( s� Subclasses must implement this method. @see: L{IDAVPrincipalCollectionResource.principalForUser} @raise: L{NotImplementedError} s% %s did not implement principalForUserN( t NotImplementedErrorR� ( RF t user( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s ( ( R� R� R� R R4 R� R� R� ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR � s c B s e Z d � Z RS( c C s$ t j | d | f � | | _ d S( s An error to be raised when some request fails to meet sufficient access privileges for a resource. @param errors: sequence of tuples, one for each resource for which one or more of the given privileges are not granted, in the form C{(uri, privileges)}, where uri is a URL path relative to resource or C{None} if the error was in this resource, privileges is a sequence of the privileges which are not granted a subset thereof. s$ Access denied for some resources: %rN( t ExceptionR� R$ ( RF R$ ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� s ( R� R� R� ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR s c C s- y t | � } Wn t k r$ t SXt Sd S( N( R3 R� RS R^ ( R� ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR # s c B s e Z d Z e Z d Z RS( s� When set on an ACE, this indicates that the ACE privileges should be inherited by all child resources within the resource with this ACE. t inheritable( R� R� R� R! RQ RR ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR , s i i R� c B s e Z d Z e Z d Z RS( s+ MD5 hash of the resource content. t getcontentmd5( R� R� R� R! RQ RR ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR 9 s c B s e Z d Z e Z d Z RS( s When set on a collection, this property indicates that the collection has a quota limit for the size of all resources stored in the collection (and any associate meta-data such as properties). The value is a number - the maximum size in bytes allowed. s quota-root( R� R� R� R" RQ RR ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR C s R� c B s e Z d Z e Z d Z RS( s� When set on a collection, this property contains the cached running total of the size of all resources stored in the collection (and any associate meta-data such as properties). The value is a number - the size in bytes used. s quota-used( R� R� R� R" RQ RR ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� Q s s all privilegest ens xml:langs read resources write resources write resource propertiess write resource contents add child resources remove child resources) unlock resource without ownership of locks! read resource access control lists" write resource access control lists% read privileges for current principalR� c B s e Z e Z d Z e Z RS( s resource-class( R� R� R! RQ RR RS R� ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyR� � s (w t __future__R t __all__t cPickleR� R� t zope.interfaceR t twisted.cred.errorR R t twisted.python.failureR t twisted.internet.deferR R R R R t twisted.internetR t twisted.internet._sslverifyR t twext.python.logR t txdav.xmlR t txdav.xml.baseR t txdav.xml.elementR R R R R! R" R# R$ t txweb2R% t txweb2.auth.tlsR& R' t txweb2.httpR( R) R* t txweb2.http_headersR+ t txweb2.iwebR, t txweb2.resourceR- t txweb2.serverR. t txweb2.staticR/ R0 t txweb2.auth.wrapperR1 t txweb2.dav.idavR2 R3 R4 t txweb2.dav.httpR5 t txweb2.dav.nonepropsR6 t txweb2.dav.utilR7 R8 R9 t txweb2.dav.authR: t twistedcaldavR; t stringR< R� R R R R R R� R R R Ry t allowed_childrenR R R� Rg R� R� t GrantR t ProtectedR t ReadR t SupportedPrivilegeSetRY t Descriptiont allPrivilegeSett Writet WritePropertiest WriteContentt Bindt Unbindt UnlockR� t WriteACLR� R R� R R� ( ( ( s& /opt/cpanel-ccs/txweb2/dav/resource.pyt <module> s ( � �� � � � � � � �&