CURRENT PATH:
/
opt
/
gsutil
/
gslib
/
commands
/
__pycache__
/
[ ⬅ KEMBALI ]
|
[ HOME ]
Upload File:
Upload Ke Sini
Dir Baru
File Baru
Editing:
defacl.cpython-39.pyc
a +(Wg : � @ s� d Z ddlmZ ddlmZ ddlmZ ddlmZ ddlZddlmZ ddlm Z dd l m Z dd l m Z dd l m Z dd l mZ dd lmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlmZ ddlm Z ddlm Z ddl m Z ddl!m"Z" ddl#m$Z$ ddl%m&Z& ddl'm(Z( ddl'm)Z) dd l*m+Z+ d Z,d Z-d Z.d Z/d!Z0d"Z1e,e-�2d#� e.�2d#� d$ Z3d%d#�4e/e0 e1 g� Z5ee3e5�Z6ee-e0�Z7ee,e/�Z8ee.e1�Z9G d&d'� d'e�Z:dS )(zFImplementation of default object acl command for Google Cloud Storage.� )�absolute_import)�print_function)�division)�unicode_literalsN)� gcs_json_api)�metrics)�AccessDeniedException)�BadRequestException)� Preconditions)�ServiceException)�Command)�SetAclExceptionHandler)�SetAclFuncWrapper)�CommandArgument)� ApiSelector)�CommandException)�CreateHelpText)�StorageUrlFromString)�UrlsAreForSingleProvider)�storage_v1_messages)� acl_helper)�NO_MAX)�Retry)�GcloudStorageFlag)�GcloudStorageMap)�PRIVATE_DEFAULT_OBJ_ACLzJ gsutil defacl set (<file-path>|<predefined-acl>) gs://<bucket_name>... z( gsutil defacl get gs://<bucket_name> zF gsutil defacl ch [-f] -u|-g|-d|-p <grant>... gs://<bucket_name>... a[ <B>SET</B> The ``defacl set`` command sets default object ACLs for the specified buckets. If you specify a default object ACL for a certain bucket, Cloud Storage applies the default object ACL to all new objects uploaded to that bucket, unless an ACL for that object is separately specified during upload. Similar to the ``acl set`` command, the ``defacl set`` command specifies either a predefined ACL or the path to a file that contains ACL text. See "gsutil help acl" for examples of editing and setting ACLs via the acl command. See `Predefined ACLs <https://cloud.google.com/storage/docs/access-control/lists#predefined-acl>`_ for a list of predefined ACLs. Setting a default object ACL on a bucket provides a convenient way to ensure newly uploaded objects have a specific ACL. If you don't set the bucket's default object ACL, it will default to project-private. If you then upload objects that need a different ACL, you will need to perform a separate ACL update operation for each object. Depending on how many objects require updates, this could be very time-consuming. z{ <B>GET</B> Gets the default ACL text for a bucket, which you can save and edit for use with the "defacl set" command. a� <B>CH</B> The "defacl ch" (or "defacl change") command updates the default object access control list for a bucket. The syntax is shared with the "acl ch" command, so see the "CH" section of "gsutil help acl" for the full help description. <B>CH EXAMPLES</B> Grant anyone on the internet READ access by default to any object created in the bucket example-bucket: gsutil defacl ch -u AllUsers:R gs://example-bucket NOTE: By default, publicly readable objects are served with a Cache-Control header allowing such objects to be cached for 3600 seconds. If you need to ensure that updates become visible immediately, you should set a Cache-Control header of "Cache-Control:private, max-age=0, no-transform" on such objects. For help doing this, see "gsutil help setmeta". Add the user john.doe@example.com to the default object ACL on bucket example-bucket with READ access: gsutil defacl ch -u john.doe@example.com:READ gs://example-bucket Add the group admins@example.com to the default object ACL on bucket example-bucket with OWNER access: gsutil defacl ch -g admins@example.com:O gs://example-bucket Remove the group admins@example.com from the default object ACL on bucket example-bucket: gsutil defacl ch -d admins@example.com gs://example-bucket Add the owners of project example-project-123 to the default object ACL on bucket example-bucket with READ access: gsutil defacl ch -p owners-example-project-123:R gs://example-bucket NOTE: You can replace 'owners' with 'viewers' or 'editors' to grant access to a project's viewers/editors respectively. <B>CH OPTIONS</B> The "ch" sub-command has the following options -d Remove all roles associated with the matching entity. -f Normally gsutil stops at the first error. The -f option causes it to continue when it encounters errors. With this option the gsutil exit status will be 0 even if some ACLs couldn't be changed. -g Add or modify a group entity's role. -p Add or modify a project viewers/editors/owners role. -u Add or modify a user entity's role. � z z. The defacl command has three sub-commands: c s� e Zd ZdZejdg d�ededdddej ej gej e � � e � � ge �d�ge � � gd�d � Zejdg d �d d eeeed �d�Z� fdd�Zdd� Zdd� Zdd� Zdd� Zee ddd�dd � �Z d d � Z d d � Z � Z S )!� DefAclCommandz(Implementation of gsutil defacl command.�defacl)� setdefacl� getdefacl�chdefacl� z fg:u:d:p:F� )�set�get�ch) �command_name_aliases�usage_synopsis�min_args�max_args�supported_sub_args� file_url_ok�provider_url_ok�urls_start_arg�gs_api_support�gs_default_api�argparse_arguments)z default aclr r r! � command_helpz*Get, set, or change default ACL on buckets)r% r$ r& )� help_name�help_name_aliases� help_type�help_one_line_summary� help_text�subcommand_help_textc s� | j �d�}|dkr&tg d�i d�}n�|dkr�| j �d�}tj�|�r`tdddd | gi d�}q�|tjv rvtj| }n|}tdddd | gi d�}nN|d kr�| �� t � | j �| _ tg d �t d �t d �t d �t d�t d�d�d�}t � �|�S )Nr r% )�storage�buckets�describez,--format=multi(defaultObjectAcl:format=json)z--raw)�gcloud_command�flag_mapr$ r9 r: �updatez--default-object-acl-file=z --predefined-default-object-acl=r& )r9 r: r> z --add-default-object-acl-grantz!--remove-default-object-acl-grantz--continue-on-error)�-g�-p�-u�-dz-f)�args�popr �os�path�isfiler �+FULL_PREDEFINED_ACL_XML_TO_JSON_TRANSLATION� ParseSubOptsr �translate_sub_opts_for_shim�sub_optsr �super�get_gcloud_storage_args)�self� sub_command�gcloud_storage_map�acl_file_or_predefined_acl�predefined_acl�� __class__� �$/opt/gsutil/gslib/commands/defacl.pyrM � sT � ��������� z%DefAclCommand.get_gcloud_storage_argsc C s6 | j s| �� | j d �� dks*| jdkr.dS dS d S )Nr r$ r r# )rC �$RaiseWrongNumberOfArgumentsException�lower�command_alias_used�rN rU rU rV �_CalculateUrlsStartArg� s �z$DefAclCommand._CalculateUrlsStartArgc C sR t | jd ��� s td| j ��z| �tt� W n tyL | � � � Y n0 d S )N����)URL must name a bucket for the %s command) r rC �IsBucketr � command_name�SetAclCommandHelperr r r �_WarnServiceAccountsrZ rU rU rV � _SetDefAcl s � zDefAclCommand._SetDefAclc C s4 t | jd ��� s td| j ��| �| jd � d S )Nr r] )r rC r^ r r_ �GetAndPrintAclrZ rU rU rV � _GetDefAcl s �zDefAclCommand._GetDefAclc C s: d| _ g | _| jr�| jD ]�\}}|dkrB| j�tj|tjjd�� |dkrd| j�tj|tjjd�� |dkr�| j�tj|tjj d�� |dkr| j�t� |�� q| js�t d��t | j �r�t| j d �jd kr�t d �| j���t� }| j D ]4}| �|�D ]$}|j�� �st d ��|�|j� q�q�|D ]}| �|� �q$d S ) zDParses options and changes default object ACLs on specified buckets.Tr? )� scope_typerA r@ rB zFPlease specify at least one access change with the -g, -u, or -d flagsr �gsz2The "{0}" command can only be used with gs:// URLsz5The defacl ch command can only be applied to buckets.N)�parse_versions�changesrK �appendr � AclChange� ChangeType�GROUP�USER�PROJECT�AclDelr r rC r �scheme�formatr_ r$ �WildcardIterator� storage_urlr^ �add�ApplyAclChanges)rN �o�aZ bucket_urlsZurl_arg�resultrs rU rU rV � _ChDefAcl sL ��� ��� �zDefAclCommand._ChDefAcl� )�tries� timeout_secsc C s� | j j|j|jddgd�}|j}| �||�dkrB| j�d|� dS |sP|�t � zFt |j d�}t j |d�}| j j|j|||jd gd � | j�d |� W nX ty� } z td t|� ��W Y d}~n.d}~0 ty� | �� td | ��Y n0 dS )z8Applies the changes in self.changes to the provided URL.�defaultObjectAcl�metageneration)�provider�fieldsr zNo changes to %sN)�meta_gen_match)r} �id)� preconditionsr r� zUpdated default ACL on %sz$Received bad request from server: %szTFailed to set acl for %s. Please ensure you have OWNER-role access to this resource.)� gsutil_api� GetBucket� bucket_namerp r} �$_ApplyAclChangesAndReturnChangeCount�logger�infori r r r~ �apitools_messages�Bucket� PatchBucketr r �strr ra )rN �url�bucket� current_aclr� �bucket_metadata�erU rU rV ru = s8 � �$ �z DefAclCommand.ApplyAclChangesc C s* d}| j D ]}||�||d| j�7 }q |S )Nr r )rh �Executer� )rN rs Zdefacl_message�modification_count�changerU rU rV r� e s �z2DefAclCommand._ApplyAclChangesAndReturnChangeCountc C s� | j �d�}| jdd� d| _d| _|dkr4| j}n2|dkrD| j}n"|dv rT| j}ntd|| j f ��t j |g| j d � |� dS ) z+Command entry point for the defacl command.r T)� check_argsFr% r$ )r& r� zEInvalid subcommand "%s" for the %s command. See "gsutil help defacl".)� subcommandsrK ) rC rD rI �def_acl�continue_on_errorrd rb ry r r_ r �LogCommandParamsrK )rN �action_subcommand�funcrU rU rV � RunCommandl s$ ��zDefAclCommand.RunCommand)!�__name__� __module__� __qualname__�__doc__r �CreateCommandSpec� _SYNOPSISr r �XML�JSONr � MakeFileURLOrCannedACLArgument�%MakeZeroOrMoreCloudBucketURLsArgument� MakeNCloudBucketURLsArgument� command_spec�HelpSpec�_DETAILED_HELP_TEXT�_get_help_text�_set_help_text� _ch_help_text� help_specrM r[ rb rd ry r r ru r� r� � __classcell__rU rU rS rV r � sP � ���� 5 ( 'r );r� � __future__r r r r rE �gslibr r �gslib.cloud_apir r r r � gslib.commandr r r �gslib.command_argumentr �gslib.cs_api_mapr �gslib.exceptionr �gslib.help_providerr �gslib.storage_urlr r �"gslib.third_party.storage_apitoolsr r� Z gslib.utilsr �gslib.utils.constantsr �gslib.utils.retry_utilr �gslib.utils.shim_utilr r � gslib.utils.translation_helperr � _SET_SYNOPSIS� _GET_SYNOPSIS� _CH_SYNOPSIS�_SET_DESCRIPTION�_GET_DESCRIPTION�_CH_DESCRIPTION�lstripr� �join� _DESCRIPTIONr� r� r� r� r rU rU rU rV �<module> s\ ; ���
SIMPAN
[ BATAL ]