OwlCyberSecurity - MANAGER
Edit File: sql_directory.pyc
� �t�ac @ s� d d l m Z m Z d d l m Z m Z d d l m Z d d l m Z m Z d d l m Z d d l m Z m Z d d l m Z d d l Z d d l Z e � Z d e e e j � f d � � YZ d e e e j � f d � � YZ d e e e j � f d � � YZ d e e e j � f d � � YZ d e e e j � f d � � YZ d e f d � � YZ d e f d � � YZ! d e f d � � YZ" d S( i����( t SerializableRecordt fromTable( t SavepointActiont Select( t Logger( t inlineCallbackst returnValue( t schema( t AllRetriesFailedt NotFoundError( t DelegatesNt GroupsRecordc B s, e Z d Z e d � � Z e d � � Z RS( s; @DynamicAttrs L{Record} for L{schema.GROUPS}. c C sC t j | t j j t j t j | j d � k d t j f �� � S( Ns utf-8t attributes( R t queryt groupIDt Int GroupMembershipRecordt queryExprt memberUIDt encode( t clst txnR ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt groupsForMember* s c C s+ t j | | j d k j | j | k � � S( Ni ( R R t extantt Andt modified( R R t since( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt groupsMissingSince7 s ( t __name__t __module__t __doc__t classmethodR R ( ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyR $ s R c B s e Z d Z RS( sE @DynamicAttrs L{Record} for L{schema.GROUP_MEMBERSHIP}. ( R R R ( ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyR @ s t DelegateRecordc B s e Z d Z RS( s> @DynamicAttrs L{Record} for L{schema.DELEGATES}. ( R R R ( ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyR H s t DelegateGroupsRecordc B s_ e Z d Z e d � � Z e d � � Z e d � � Z e d � � Z e e d � � � Z RS( sD @DynamicAttrs L{Record} for L{schema.DELEGATE_GROUPS}. c C s1 t j | t j j t j d d t j f �� � S( s7 Get the directly-delegated-to groups. R N( R R R R R! R t None( R R ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt allGroupDelegatesV s c C sa t j | t j j t j t j | j d � k j t j | rB d n d k � d t j f �� � S( s7 Get the directly-delegated-to groups. s utf-8i i R ( R R R R R! R t delegatorR R t readWrite( R R R$ R% ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt delegateGroupsf s c C sa | j | | j j t j t j | j d � k d t j f �� j | j | rT d n d k � � S( sZ Get delegators who have delegated to groups the delegate is a member of. s utf-8R i i ( R R R R R R R R R% ( R R t delegateR% ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt indirectDelegatorsx s c C sa t j | t j j t j t j | j d � k j t j | rB d n d k � d t j f �� � S( sO Get delegates who are in groups which have been delegated to. s utf-8i i R ( R R R R R! R R$ R R R% ( R R R$ R% ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt indirectDelegates� s c c sb t t t j � t t j � d t j j t j t j t j k � d t j | j d � k �j | � V} g } g t t j � D] } t j | ^ q~ } g t t j � D] } t j | ^ q� } t | � } x� | D]} } | | } t � } | j t | | � � | | _ | | } t � } | j t | | � � | | _ | j | | f � q� Wt | � d S( sH Get delegator/group pairs for the specified delegator. t Fromt Wheres utf-8N( R t listR! t tableR t joinR R$ R t ont __colmap__t lent _attributesFromRowt zipt transactiont appendR ( R R R$ t rowst resultst columnt delegatorNamest groupsNamest split_pointt rowt delegatorRowt delegatorRecordt groupsRowt groupsRecord( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt delegatorGroups� s( $ )) ( R R R R R# R& R( R) R RA ( ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyR! P s t ExternalDelegateGroupsRecordc B s e Z d Z RS( sM @DynamicAttrs L{Record} for L{schema.EXTERNAL_DELEGATE_GROUPS}. ( R R R ( ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyRB � s t GroupsAPIMixinc B sJ e Z d Z e d � � Z e d � Z e e d � � Z e d � � Z RS( sK A mixin for L{CommonStoreTransaction} that covers the groups API. c c s� | j � j | � V} | d k r/ t d � n t j | d | j d � d | j d � d | �V} | j | | � Vt | � d S( sp @type groupUID: C{unicode} @type name: C{unicode} @type membershipHash: C{str} t names utf-8t groupUIDt membershipHashN( t directoryServicet recordWithUIDR" R R t createR t refreshGroup( t selfRE RD RF t recordt group( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt addGroup� s c c sp t j j � } | j | d t �V} | d k rl | j d | j d � d | d | r[ d n d d | � Vn d S( s� @type groupUID: C{unicode} @type name: C{unicode} @type membershipHash: C{str} @type extant: C{boolean} RI RD s utf-8RF R i i R N( t datetimet utcnowt groupByUIDt FalseR" t updateR ( RK RE RD RF R t timestampRM ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt updateGroup� s c c s' t j | t j | j d � k � V} | r< t | d � n� | rt d � } | j | � VyA | j | d d � V} | d k r� | j | � Vt d � n Wn^ t k r� | j | � Vt j | t j | j d � k � V} t | r� | d n d � q#X| j | � Vt | � n t d � d S( s Return or create a record for the group UID. @type groupUID: C{unicode} @return: Deferred firing with tuple of group ID C{str}, group name C{unicode}, membership hash C{str}, modified timestamp, and extant C{boolean} s utf-8i RQ u t N( R R RE R R R t acquireRN R" t releaset Exceptiont rollback( RK RE RI R7 t savepointRM ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyRQ � s, c c s= t j | t j | k � V} | r3 t | d � n t � d S( s Given a group ID, return the group UID, or raise NotFoundError @type groupID: C{str} @return: Deferred firing with a tuple of group UID C{unicode}, group name C{unicode}, membership hash C{str}, and extant C{boolean} i N( R R R R R ( RK R R7 ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt groupByID s ( R R R R RN t TrueRU RQ R\ ( ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyRC � s 't GroupCacherAPIMixinc B s� e Z d Z d � Z d � Z e d � � Z e d � � Z e d � � Z e d � � Z e d � � Z e d � � Z e d � � Z e d � � Z RS( sQ A mixin for L{CommonStoreTransaction} that covers the group cacher API. c C s" t j | d | d | j d � �S( NR R s utf-8( R RI R ( RK R R ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt addMemberToGroup- s c C s" t j | d | d | j d � �S( NR R s utf-8( R t deletesimpleR ( RK R R ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt removeMemberFromGroup0 s c c sO t j | t j | k � V} t t g | D] } | j j d � ^ q) � � d S( s� Returns the cached set of UIDs for members of the given groupID. Sub-groups are not returned in the results but their members are, because the group membership has already been expanded/flattened before storing in the db. @param groupID: the group ID @type groupID: C{int} @return: the set of member UIDs @rtype: a Deferred which fires with a set() of C{str} UIDs s utf-8N( R R R R t setR t decode( RK R t membersRL ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt groupMemberUIDs5 s c c sC | d k r+ | j � V} | j } t } n t � } | j } t } t j � } x' t | � D] } | j t | � � q\ W| j � } | j | k r� t } t j d d | �n t } | s� | | j k r� | j d | d | d | r� d n d � Vn | r"| j | j t | � � V\ } } n d } } t | | | f � d S( s� @param group: the group record @type group: L{GroupsRecord} @param record: the directory record @type record: C{iDirectoryRecord} @return: Deferred firing with membershipChanged C{boolean} s Group '{group}' changedRM RD RF R i i N( R" t expandedMemberUIDst displayNameR] t frozensetRD RR t hashlibt md5t sortedRS t strt hexdigestRF t logt debugR t synchronizeMembersR Rb R ( RK RM RL t memberUIDsRD R t membershipHashContentR RF t membershipChangedt addedUIDst removedUIDs( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyRJ F s2 % c c s� | j | � V} | | } x | D] } | j | | � Vq! W| | } x | D] } | j | | � VqM W| j | | | � Vt | | f � d S( s+ Update the group membership table in the database to match the new membership list. This method will diff the existing set with the new set and apply the changes. It also calls out to a groupChanged() method with the set of added and removed members so that other modules that depend on groups can monitor the changes. @param groupID: group id of group to update @type groupID: L{str} @param newMemberUIDs: set of new member UIDs in the group @type newMemberUIDs: L{set} of L{str} N( Re Ra R_ t groupChangedR ( RK R t newMemberUIDst cachedMemberUIDst removedR t added( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyRp w s c c s t j | | | | � Vd S( sv Called when membership of a group changes. @param groupID: group id of group that changed @type groupID: L{str} @param addedUIDs: set of new member UIDs added to the group @type addedUIDs: L{set} of L{str} @param removedUIDs: set of old member UIDs removed from the group @type removedUIDs: L{set} of L{str} N( R Rv ( RK R Rt Ru ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyRv � s c c sj t � } | j | � V} x@ | D]8 } | j � j | � V} | d k r | j | � q q Wt | � d S( sF The members of the given group as recorded in the db N( Rb Re RG RH R" t addR ( RK R Rd Rq t uidRL ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt groupMembers� s c c sF t j | | � V} t t g | D] } | j j d � ^ q � � d S( s Returns the cached set of UIDs for the groups this given uid is a member of. @param uid: the uid @type uid: C{unicode} @return: the set of group IDs @rtype: a Deferred which fires with a set() of C{int} group IDs s utf-8N( R R R Rb RE Rc ( RK R| t groupsRM ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt groupUIDsFor� s c c sI t j | � V} t g | D] } | j j d � ^ q � } t | � d S( s� Return the UIDs of all groups. @returns: the UIDs of all groups @rtype: a Deferred resulting in a set s utf-8N( R t allRb RE Rc R ( RK R7 RL R~ ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt allGroups� s +c c sL t j | | � V} t g | D] } | j j d � ^ q � } t | � d S( s( @param since: datetime to compare against @type since: C{datetime.datetime} Return the UIDs of all groups marked as non-extant who have not been modified since the given datetime. @returns: UIDs @rtype: a Deferred resulting in a set s utf-8N( R R Rb RE Rc R ( RK R R7 RL R~ ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyR � s +( R R R R_ Ra R Re RJ Rp Rv R} R R� R ( ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyR^ ( s 1 t DelegatesAPIMixinc B s e Z d Z e d � � Z e e d � � Z d � Z d � Z d � Z d � Z e e d � � Z e d � � Z e d � � Z e d � � Z e d � � Z e d � � Z e d � � Z d � Z e d � � Z d � Z e d � � Z d � Z e d � � Z RS( sN A mixin for L{CommonStoreTransaction} that covers the delegates API. c # sK � � � f d � } y | j | d d d t �VWn t k rF n Xd S( s� Adds a row to the DELEGATES table. The delegate should not be a group. To delegate to a group, call addDelegateGroup() instead. @param delegator: the UID of the delegator @type delegator: C{unicode} @param delegate: the UID of the delegate @type delegate: C{unicode} @param readWrite: grant read and write access if True, otherwise read-only access @type readWrite: C{boolean} c s= t j | d � j d � d � j d � d � r6 d n d �S( NR$ s utf-8R' R% i i ( R RI R ( t subtxn( R' R$ R% ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt _addDelegate� s t retriesi t failureOKN( t subtransactionR] R ( RK R$ R' R% R� ( ( R' R$ R% s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt addDelegate� s c # sN � � � � f d � } y | j | d d d t �VWn t k rI n Xd S( s� Adds a row to the DELEGATE_GROUPS table. The delegate should be a group. To delegate to a person, call addDelegate() instead. @param delegator: the UID of the delegator @type delegator: C{unicode} @param delegateGroupID: the GROUP_ID of the delegate group @type delegateGroupID: C{int} @param readWrite: grant read and write access if True, otherwise read-only access @type readWrite: C{boolean} c sF t j | d � j d � d � d � r- d n d d � r? d n d �S( NR$ s utf-8R R% i i t isExternal( R! RI R ( R� ( t delegateGroupIDR$ R� R% ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt _addDelegateGroup s R� i R� N( R� R] R ( RK R$ R� R% R� R� ( ( R� R$ R� R% s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt addDelegateGroup� s c C s= t j | d | j d � d | j d � d | r6 d n d �S( s� Removes a row from the DELEGATES table. The delegate should not be a group. To remove a delegate group, call removeDelegateGroup() instead. @param delegator: the UID of the delegator @type delegator: C{unicode} @param delegate: the UID of the delegate @type delegate: C{unicode} @param readWrite: remove read and write access if True, otherwise read-only access @type readWrite: C{boolean} R$ s utf-8R' R% i i ( R R` R ( RK R$ R' R% ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt removeDelegate s c C s. t j | d | j d � d | r' d n d �S( sP Removes all rows for this delegator/readWrite combination from the DELEGATES table. @param delegator: the UID of the delegator @type delegator: C{unicode} @param readWrite: remove read and write access if True, otherwise read-only access @type readWrite: C{boolean} R$ s utf-8R% i i ( R R` R ( RK R$ R% ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt removeDelegates/ s c C s4 t j | d | j d � d | d | r- d n d �S( s� Removes a row from the DELEGATE_GROUPS table. The delegate should be a group. To remove a delegate person, call removeDelegate() instead. @param delegator: the UID of the delegator @type delegator: C{unicode} @param delegateGroupID: the GROUP_ID of the delegate group @type delegateGroupID: C{int} @param readWrite: remove read and write access if True, otherwise read-only access @type readWrite: C{boolean} R$ s utf-8R R% i i ( R! R` R ( RK R$ R� R% ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt removeDelegateGroup@ s c C s. t j | d | j d � d | r' d n d �S( sV Removes all rows for this delegator/readWrite combination from the DELEGATE_GROUPS table. @param delegator: the UID of the delegator @type delegator: C{unicode} @param readWrite: remove read and write access if True, otherwise read-only access @type readWrite: C{boolean} R$ s utf-8R% i i ( R! R` R ( RK R$ R% ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt removeDelegateGroupsT s c c s( t � } | j d � } t j | t j | k j t j | rB d n d k � � V} | j g | D] } | j j d � ^ q_ � | r� t j | | | � V} | j g | D]' } | j | k r� | j j d � ^ q� � nB t j | | | � V} | j g | D] } | j j d � ^ q� � t | � d S( s� Returns the UIDs of all delegates for the given delegator. If expanded is False, only the direct delegates (users and groups) are returned. If expanded is True, the expanded membership is returned, not including the groups themselves. @param delegator: the UID of the delegator @type delegator: C{unicode} @param readWrite: the access-type to check for; read and write access if True, otherwise read-only access @type readWrite: C{boolean} @returns: the UIDs of the delegates (for the specified access type) @rtype: a Deferred resulting in a set s utf-8i i N( Rb R R R R$ R R% RS R' Rc R! R) R R& RE R ( RK R$ R% t expandedt delegatest delegatorUR7 RL ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyR� e s ",>,c c s� t � } | j d � } t j | t j | k j t j | rB d n d k � � V} | j g | D] } | j j d � ^ q_ � t j | | | � V} | j g | D]' } | j | k r� | j j d � ^ q� � t | � d S( s Returns the UIDs of all delegators which have granted access to the given delegate, either directly or indirectly via groups. @param delegate: the UID of the delegate @type delegate: C{unicode} @param readWrite: the access-type to check for; read and write access if True, otherwise read-only access @type readWrite: C{boolean} @returns: the UIDs of the delegators (for the specified access type) @rtype: a Deferred resulting in a set s utf-8i i N( Rb R R R R' R R% RS R$ Rc R! R( R ( RK R' R% t delegatorst delegateUR7 RL ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyR� � s ",;c c ss t j | t j | k j t j | r* d n d k � � V} t g | D] } | j j d � ^ qD � } t | � d S( s Return the UIDs of those who have delegated to the given group with the given access level. @param delegateGroupID: the group ID of the delegate group @type delegateGroupID: C{int} @param readWrite: the access-type to check for; read and write access if True, otherwise read-only access @type readWrite: C{boolean} @returns: the UIDs of the delegators (for the specified access type) @rtype: a Deferred resulting in a set i i s utf-8N( R! R R R R% Rb R$ Rc R ( RK R� R% R7 RL R� ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt delegatorsToGroup� s "+c c sI t j | � V} t g | D] } | j j d � ^ q � } t | � d S( s Return the UIDs of all groups which have been delegated to. Useful for obtaining the set of groups which need to be synchronized from the directory. @returns: the UIDs of all delegated-to groups @rtype: a Deferred resulting in a set s utf-8N( R! R# Rb RE Rc R ( RK R7 RL R� ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyR# � s +c c s� i } t j | � V} x` | D]X } | j r> | j j d � n d | j r\ | j j d � n d f | | j j d � <q Wt | � d S( sY Returns a dictionary mapping delegate UIDs to (read-group, write-group) tuples, including only those assignments that originated from the directory. @returns: dictionary mapping delegator uid to (readDelegateUID, writeDelegateUID) tuples @rtype: a Deferred resulting in a dictionary s utf-8N( RB R� t groupUIDReadR R" t groupUIDWriteR$ R ( RK R� R7 RL ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt externalDelegates� s 8c c so t j | t j | k � V} t | � d k r; t d � n t | d j j d � | d j j d � f � d S( sA Returns a tuple containing the UIDs of the current external read-only and read-write delegates. @param delegatorUID: UID of the delegator @type delegatorUID: unicode @returns: external delegate UIDs (or empty strings if unassigned) @rtype: tuple of two unicodes i u i s utf-8N( u u ( RB R R$ R1 R R� Rc R� ( RK t delegatorUIDR7 ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt externalDelegatesForDelegator� s c c s� t j | d t | � �Vt j | d t | � �V| s@ | r� | rU | j d � n d } | rp | j d � n d } t j | d t | � d | d | �Vn | d k r� | j | | t d t �Vn | d k r� | j | | t d t �Vn d S( s� Update the external delegate group table so we can quickly identify diffs next time, and update the delegate group table itself @param delegator @type delegator: C{UUID} R$ s utf-8RV R� R� R� N( R! R` Rl RB R RI R" R� RR R] ( RK R$ t readDelegateGroupIDt writeDelegateGroupIDt readDelegateUIDt writeDelegateUIDt readDelegateForDBt writeDelegateForDB( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt assignExternalDelegates s( c C s t j | d | j d � �S( s] Get the L{DelegateRecord} for all delegates associated with this delegator. R$ s utf-8( R t querysimpleR ( RK R$ ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt dumpIndividualDelegatesLocalB s c c sF | j � j j | | � V} t g | D] } t j | � ^ q& � d S( s] Get the L{DelegateRecord} for all delegates associated with this delegator. N( t storet conduitt send_dump_individual_delegatesR R t deserialize( RK R$ t raw_resultsR< ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt dumpIndividualDelegatesExternalH s c C s t j | | � S( sy Get the L{DelegateGroupsRecord},L{GroupsRecord} for all group delegates associated with this delegator. ( R! RA ( RK R$ ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt dumpGroupDelegatesLocalP s c c s] | j � j j | | � V} t g | D], } t j | d � t j | d � f ^ q& � d S( ss Get the L{DelegateGroupsRecord},L{GroupsRecord} for all delegates associated with this delegator. i i N( R� R� t send_dump_group_delegatesR R! R� R ( RK R$ R� R< ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt dumpGroupDelegatesExternalV s c C s t j | d | j d � �S( sk Get the L{ExternalDelegateGroupsRecord} for all delegates associated with this delegator. R$ s utf-8( RB R� R ( RK R$ ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt dumpExternalDelegatesLocal^ s c c sF | j � j j | | � V} t g | D] } t j | � ^ q& � d S( sk Get the L{ExternalDelegateGroupsRecord} for all delegates associated with this delegator. N( R� R� t send_dump_external_delegatesR RB R� ( RK R$ R� R< ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt dumpExternalDelegatesExternald s ( R R R R R� RR R� R� R� R� R� R� R� R� R# R� R� R� R� R� R� R� R� R� ( ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyR� � s, -%2 (# t twext.enterprise.dal.recordR R t twext.enterprise.dal.syntaxR R t twext.python.logR t twisted.internet.deferR R t! txdav.common.datastore.sql_tablesR t txdav.common.icommondatastoreR R t txdav.who.delegatesR RO Ri Rn t GROUPSR t GROUP_MEMBERSHIPR t DELEGATESR t DELEGATE_GROUPSR! t EXTERNAL_DELEGATE_GROUPSRB t objectRC R^ R� ( ( ( s7 /opt/cpanel-ccs/txdav/common/datastore/sql_directory.pyt <module> s" " """j"f�