o  i|@sdZddlmZddlmZddlmZddlmZddlm Z Gddde Z Gd d d e Z Gd d d e Z Gd dde ZGddde ZdS)z%Manage access to objects and buckets.) _add_generation_match_parameters)create_trace_span)_DEFAULT_TIMEOUT) DEFAULT_RETRY))DEFAULT_RETRY_IF_METAGENERATION_SPECIFIEDc@s~eZdZdZdZdZdZdddZdd Zd d Z d d Z ddZ ddZ ddZ ddZddZddZddZddZdS) _ACLEntityaClass representing a set of roles for an entity. This is a helper class that you likely won't ever construct outside of using the factor methods on the :class:`ACL` object. :type entity_type: str :param entity_type: The type of entity (ie, 'group' or 'user'). :type identifier: str :param identifier: (Optional) The ID or e-mail of the entity. For the special entity types (like 'allUsers'). READERWRITEROWNERNcCs||_tg|_||_dSN) identifiersetrolestype)self entity_typer rx/var/www/snowflake_co_dev_github/snow_flake_back_end_deploy/env/lib/python3.10/site-packages/google/cloud/storage/acl.py__init__*s  z_ACLEntity.__init__cCs|jst|jSdj|dS)Nz{acl.type}-{acl.identifier})acl)r strrformatrrrr__str__/s  z_ACLEntity.__str__cCsd|dd|jdS)Nz )joinrrrrr__repr__5sz_ACLEntity.__repr__cCs|jS)zGet the list of roles permitted by this entity. :rtype: list of strings :returns: The list of roles associated with this entity. )rrrrr get_roles8sz_ACLEntity.get_rolescCs|j|dS)zoAdd a role to the entity. :type role: str :param role: The role to add to the entity. N)raddrrolerrrgrant@sz_ACLEntity.grantcCs||jvr |j|dSdS)zyRemove a role from the entity. :type role: str :param role: The role to remove from the entity. N)rremoverrrrrevokeHs z_ACLEntity.revokecC|tjdS)z(Grant read access to the current entity.N)r r READER_ROLErrrr grant_readQz_ACLEntity.grant_readcCr#)z)Grant write access to the current entity.N)r r WRITER_ROLErrrr grant_writeUr&z_ACLEntity.grant_writecCr#)z)Grant owner access to the current entity.N)r r OWNER_ROLErrrr grant_ownerYr&z_ACLEntity.grant_ownercCr#)z+Revoke read access from the current entity.N)r"rr$rrrr revoke_read]r&z_ACLEntity.revoke_readcCr#)z,Revoke write access from the current entity.N)r"rr'rrrr revoke_writear&z_ACLEntity.revoke_writecCr#)z,Revoke owner access from the current entity.N)r"rr)rrrr revoke_ownerer&z_ACLEntity.revoke_ownerr )__name__ __module__ __qualname____doc__r$r'r)rrrrr r"r%r(r*r+r,r-rrrrrs"    rc@sXeZdZdZdZdZdddddd d Zegd Z d Z d Z d Z d Z ddZ efddZeddZddZddZddZddZd zACL.allcCrd)zFactory method for an Entity representing all authenticated users. :rtype: :class:`_ACLEntity` :returns: An entity representing all authenticated users. rMr_rrrrrRFrezACL.all_authenticatedcCs|t|jS)zGet a list of all Entity objects. :rtype: list of :class:`_ACLEntity` objects :returns: A list of all Entity objects. )r?listr;rJrrrr get_entitiesNszACL.get_entitiescCst)z&Abstract getter for the object client.)NotImplementedErrorrrrrclientWsz ACL.clientcCs|dur|j}|S)aCheck client or verify over-ride. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: the client to use. If not passed, falls back to the ``client`` stored on the current ACL. :rtype: :class:`google.cloud.storage.client.Client` :returns: The client passed in or the currently bound client. N)ri)rrirrr_require_client\s zACL._require_clientcCstdd?|j}||}i}|jdur|j|d<|j|j||||d}d|_|ddD] }| | |q1WddS1sGwYdS) aReload the ACL data from Cloud Storage. If :attr:`user_project` is set, bills the API request to that project. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: :class:`~google.api_core.retry.Retry` :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.reloadnameN userProject query_paramsr<retryTitemsr) r reload_pathrj user_projectr;rG _get_resourcer=rAr[rV)rrir<rppathrofoundentryrrrr>ks$     "z ACL.reloadc Cs||}ddi} |durg}|| |j<|jdur|j| d<t| ||||d|j} |j| |jt|i| || d} |j | |jdD] } | | | qEd|_ dS) aHelper for :meth:`save` and :meth:`save_predefined`. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` projectionfullNrm)if_generation_matchif_generation_not_matchif_metageneration_matchif_metageneration_not_matchrnrT)rj_PREDEFINED_QUERY_PARAMrsr save_path_patch_resource_URL_PATH_ELEMrfr;rGrAr[rVr=)rrrErirzr{r|r}r<rproruresultrwrrr_saves4 4      z ACL._savec Csxtdd-|dur|}|j} nd} | r*|j|d|||||||d WddSWddS1s5wYdS)a!Save this ACL for the current bucket. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.saverkNTrzr{r|r}r<rp)rr=r) rrrirzr{r|r}r<rpsave_to_backendrrrsaves( 1"zACL.savec CsVtdd||}|jd||||||||d WddS1s$wYdS)aSave this ACL for the current bucket using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.savePredefinedrkNr)rrFr rrErirzr{r|r}r<rprrrsave_predefined.s 4 "zACL.save_predefinedc CsJtdd|jg|||||||dWddS1swYdS)IRemove all ACL entries. If :attr:`user_project` is set, bills the API request to that project. Note that this won't actually remove *ALL* the rules, but it will remove all the non-default rules. In short, you'll still have access to a bucket that you created even after you clear ACL rules with this method. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.clearrkrirzr{r|r}r<rpN)rrrrirzr{r|r}r<rprrrrGps 1"z ACL.clearr ))r.r/r0r1rr~r@ frozensetrBr=rrrrsrrr? classmethodrFrHrKrVrXrZr[rIr]rbrcrQrRrgpropertyrirjrr>rrrrrGrrrrr2js          , Y H Dr2csPeZdZdZfddZeddZeddZedd Zed d Z Z S) BucketACLzAn ACL specifically for a bucket. :type bucket: :class:`google.cloud.storage.bucket.Bucket` :param bucket: The bucket to which this ACL relates. ctt|||_dSr )superrrbucket)rr __class__rrr zBucketACL.__init__cC|jjS)z&The client bound to this ACL's bucket.)rrirrrrrizBucketACL.clientcCs|jjd|jS)3Compute the path for GET API requests for this ACL./)rrurrrrrrrszBucketACL.reload_pathcCrz5Compute the path for PATCH API requests for this ACL.)rrurrrrrrzBucketACL.save_pathcCrz?Compute the user project charged for API requests for this ACL.)rrsrrrrrsrzBucketACL.user_project) r.r/r0r1rrrirrrrs __classcell__rrrrrs    rc@seZdZdZdZdZdS)DefaultObjectACLz9A class representing the default object ACL for a bucket.defaultObjectAclpredefinedDefaultObjectAclN)r.r/r0r1rr~rrrrrsrcseZdZdZfddZeddZeddZedd Zed d Z d d d d d d e e ffd d Z d d d d d e e ffdd Z d d d d d e e ffdd ZZS) ObjectACLzAn ACL specifically for a Cloud Storage object / blob. :type blob: :class:`google.cloud.storage.blob.Blob` :param blob: The blob that this ACL corresponds to. crr )rrrblob)rrrrrrrzObjectACL.__init__cCr)z$The client bound to this ACL's blob.)rrirrrrrirzObjectACL.clientcCs|jjdS)rz/aclrrurrrrrrszObjectACL.reload_pathcCrrrrrrrrrzObjectACL.save_pathcCrr)rrsrrrrrsrzObjectACL.user_projectNc  tj||||||||ddS)a!Save this ACL for the current object. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rrirzr{r|r}r<rpN)rr) rrrirzr{r|r}r<rprrrrs1 zObjectACL.savec r)aSave this ACL for the current object using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rErirzr{r|r}r<rpN)rrrrrrr0s4 zObjectACL.save_predefinedc stj|||||||ddS)rrN)rrGrrrrrGos1 zObjectACL.clear)r.r/r0r1rrrirrrrsrrrrrGrrrrrrsH     ?ArN)r1google.cloud.storage._helpersr+google.cloud.storage._opentelemetry_tracingrgoogle.cloud.storage.constantsrgoogle.cloud.storage.retryrrobjectrr2rrrrrrrs     RH