o )= j|@sdZddlmZddlmZddlmZddlmZddlm Z Gddde Z Gd d d e Z Gd d d e Z Gd dde ZGddde ZdS)z%Manage access to objects and buckets.) _add_generation_match_parameters)create_trace_span)_DEFAULT_TIMEOUT) DEFAULT_RETRY))DEFAULT_RETRY_IF_METAGENERATION_SPECIFIEDc@s~eZdZdZdZdZdZdddZdd Zd d Z d d Z ddZ ddZ ddZ ddZddZddZddZddZdS) _ACLEntityaClass representing a set of roles for an entity. This is a helper class that you likely won't ever construct outside of using the factor methods on the :class:`ACL` object. :type entity_type: str :param entity_type: The type of entity (ie, 'group' or 'user'). :type identifier: str :param identifier: (Optional) The ID or e-mail of the entity. For the special entity types (like 'allUsers'). ZREADERZWRITERZOWNERNcCs||_tg|_||_dSN) identifiersetrolestype)self entity_typer rbC:\Users\psant\Downloads\Anu Raj Backend\school\venv\Lib\site-packages\google/cloud/storage/acl.py__init__*s  z_ACLEntity.__init__cCs|jst|jSdj|dS)Nz{acl.type}-{acl.identifier})acl)r strr formatr rrr__str__/s  z_ACLEntity.__str__cCsd|dd|jdS)Nz )joinr rrrr__repr__5sz_ACLEntity.__repr__cCs|jS)zGet the list of roles permitted by this entity. :rtype: list of strings :returns: The list of roles associated with this entity. N)r rrrr get_roles8sz_ACLEntity.get_rolescCs|j|dS)zoAdd a role to the entity. :type role: str :param role: The role to add to the entity. N)r addr rolerrrgrant@sz_ACLEntity.grantcCs||jvr |j|dSdS)zyRemove a role from the entity. :type role: str :param role: The role to remove from the entity. N)r removerrrrrevokeHs z_ACLEntity.revokecC|tjdS)z(Grant read access to the current entity.N)rr READER_ROLErrrr grant_readQz_ACLEntity.grant_readcCr )z)Grant write access to the current entity.N)rr WRITER_ROLErrrr grant_writeUr#z_ACLEntity.grant_writecCr )z)Grant owner access to the current entity.N)rr OWNER_ROLErrrr grant_ownerYr#z_ACLEntity.grant_ownercCr )z+Revoke read access from the current entity.N)rrr!rrrr revoke_read]r#z_ACLEntity.revoke_readcCr )z,Revoke write access from the current entity.N)rrr$rrrr revoke_writear#z_ACLEntity.revoke_writecCr )z,Revoke owner access from the current entity.N)rrr&rrrr revoke_ownerer#z_ACLEntity.revoke_ownerr)__name__ __module__ __qualname____doc__r!r$r&rrrrrrr"r%r'r(r)r*rrrrrs"    rc@sXeZdZdZdZdZdddddd d Zegd Z d Z d Z d Z d Z ddZ efddZeddZddZddZddZddZd zACL.allcCr_)zFactory method for an Entity representing all authenticated users. :rtype: :class:`_ACLEntity` :returns: An entity representing all authenticated users. rINrZrrrrrNFr`zACL.all_authenticatedcCs|t|jS)zGet a list of all Entity objects. :rtype: list of :class:`_ACLEntity` objects :returns: A list of all Entity objects. N)r;listr7rFrrrr get_entitiesNszACL.get_entitiescCst)z&Abstract getter for the object client.N)NotImplementedErrorrrrrclientWsz ACL.clientcCs|dur|j}|S)aCheck client or verify over-ride. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: the client to use. If not passed, falls back to the ``client`` stored on the current ACL. :rtype: :class:`google.cloud.storage.client.Client` :returns: The client passed in or the currently bound client. N)rd)r rdrrr_require_client\s zACL._require_clientcCstdd?|j}||}i}|jdur|j|d<|j|j||||d}d|_|ddD] }| | |q1WddS1sGwYdS) aReload the ACL data from Cloud Storage. If :attr:`user_project` is set, bills the API request to that project. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: :class:`~google.api_core.retry.Retry` :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.reloadnameN userProject query_paramsr8retryTitemsr) r reload_pathre user_projectr7rCZ _get_resourcer9r=rVrQ)r rdr8rkpathrjfoundentryrrrr:ks$     "z ACL.reloadc Cs||}ddi} |durg}|| |j<|jdur|j| d<t| ||||d|j} |j| |jt|i| || d} |j | |jdD] } | | | qEd|_ dS) aHelper for :meth:`save` and :meth:`save_predefined`. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` Z projectionfullNrh)if_generation_matchif_generation_not_matchif_metageneration_matchif_metageneration_not_matchrirT)re_PREDEFINED_QUERY_PARAMrnr save_pathZ_patch_resource_URL_PATH_ELEMrar7rCr=rVrQr9)r rrArdrsrtrurvr8rkrjroresultrqrrr_saves4 4      z ACL._savec Csxtdd-|dur|}|j} nd} | r*|j|d|||||||d WddSWddS1s5wYdS)a!Save this ACL for the current bucket. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.saverfNTrsrtrurvr8rk)rr9r{) r rrdrsrtrurvr8rkZsave_to_backendrrrsaves( 1"zACL.savec CsVtdd||}|jd||||||||d WddS1s$wYdS)aSave this ACL for the current bucket using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.savePredefinedrfNr|)rrBr{ r rArdrsrtrurvr8rkrrrsave_predefined.s 4 "zACL.save_predefinedc CsJtdd|jg|||||||dWddS1swYdS)IRemove all ACL entries. If :attr:`user_project` is set, bills the API request to that project. Note that this won't actually remove *ALL* the rules, but it will remove all the non-default rules. In short, you'll still have access to a bucket that you created even after you clear ACL rules with this method. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` zStorage.ACL.clearrfrdrsrtrurvr8rkN)rr}r rdrsrtrurvr8rkrrrrCps 1"z ACL.clearr))r+r,r-r.ryrwr< frozensetr>r9rmrxrnrrr; classmethodrBrDrGrQrSrUrVrErXr]r^rMrNrbpropertyrdrerr:rr{r}rrCrrrrr/js          , Y H Dr/csPeZdZdZfddZeddZeddZedd Zed d Z Z S) BucketACLzAn ACL specifically for a bucket. :type bucket: :class:`google.cloud.storage.bucket.Bucket` :param bucket: The bucket to which this ACL relates. ctt|||_dSr)superrrbucket)r r __class__rrr zBucketACL.__init__cC|jjS)z&The client bound to this ACL's bucket.N)rrdrrrrrdzBucketACL.clientcCs|jjd|jS)3Compute the path for GET API requests for this ACL./N)rroryrrrrrmszBucketACL.reload_pathcCrz5Compute the path for PATCH API requests for this ACL.N)rrorrrrrxrzBucketACL.save_pathcCrz?Compute the user project charged for API requests for this ACL.N)rrnrrrrrnrzBucketACL.user_project) r+r,r-r.rrrdrmrxrn __classcell__rrrrrs    rc@seZdZdZdZdZdS)DefaultObjectACLz9A class representing the default object ACL for a bucket.ZdefaultObjectAclZpredefinedDefaultObjectAclN)r+r,r-r.ryrwrrrrrsrcseZdZdZfddZeddZeddZedd Zed d Z d d d d d d e e ffd d Z d d d d d e e ffdd Z d d d d d e e ffdd ZZS) ObjectACLzAn ACL specifically for a Cloud Storage object / blob. :type blob: :class:`google.cloud.storage.blob.Blob` :param blob: The blob that this ACL corresponds to. crr)rrrblob)r rrrrrrzObjectACL.__init__cCr)z$The client bound to this ACL's blob.N)rrdrrrrrdrzObjectACL.clientcCs|jjdS)rz/aclNrrorrrrrmszObjectACL.reload_pathcCrrrrrrrrxrzObjectACL.save_pathcCrr)rrnrrrrrnrzObjectACL.user_projectNc  tj||||||||ddS)a!Save this ACL for the current object. If :attr:`user_project` is set, bills the API request to that project. :type acl: :class:`google.cloud.storage.acl.ACL`, or a compatible list. :param acl: The ACL object to save. If left blank, this will save current entries. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rrdrsrtrurvr8rkN)rr}) r rrdrsrtrurvr8rkrrrr}s1 zObjectACL.savec r)aSave this ACL for the current object using a predefined ACL. If :attr:`user_project` is set, bills the API request to that project. :type predefined: str :param predefined: An identifier for a predefined ACL. Must be one of the keys in :attr:`PREDEFINED_JSON_ACLS` or :attr:`PREDEFINED_XML_ACLS` (which will be aliased to the corresponding JSON name). If passed, `acl` must be None. :type client: :class:`~google.cloud.storage.client.Client` or ``NoneType`` :param client: (Optional) The client to use. If not passed, falls back to the ``client`` stored on the ACL's parent. :type if_generation_match: long :param if_generation_match: (Optional) See :ref:`using-if-generation-match` :type if_generation_not_match: long :param if_generation_not_match: (Optional) See :ref:`using-if-generation-not-match` :type if_metageneration_match: long :param if_metageneration_match: (Optional) See :ref:`using-if-metageneration-match` :type if_metageneration_not_match: long :param if_metageneration_not_match: (Optional) See :ref:`using-if-metageneration-not-match` :type timeout: float or tuple :param timeout: (Optional) The amount of time, in seconds, to wait for the server response. See: :ref:`configuring_timeouts` :type retry: google.api_core.retry.Retry or google.cloud.storage.retry.ConditionalRetryPolicy :param retry: (Optional) How to retry the RPC. See: :ref:`configuring_retries` )rArdrsrtrurvr8rkN)rrr~rrrr0s4 zObjectACL.save_predefinedc stj|||||||ddS)rrN)rrCrrrrrCos1 zObjectACL.clear)r+r,r-r.rrrdrmrxrnrrr}rrCrrrrrrsH     ?ArN)r.Zgoogle.cloud.storage._helpersrZ+google.cloud.storage._opentelemetry_tracingrZgoogle.cloud.storage.constantsrZgoogle.cloud.storage.retryrrobjectrr/rrrrrrrs     RH