conary.repository.netrepos.netauth.NetworkAuthorization

Class NetworkAuthorization

Instance Methods

[hide private]

__init__(self, db, serverNameList, cacheTimeout=None, log=None, passwordURL=None, entCheckURL=None)

source code

getAuthRoles(self, cu, authToken, allowAnonymous=True)

source code

batchCheck(self, authToken, troveTupList, write=False, remove=False)

source code

authCheck(self, authToken, admin=False, mirror=False)

source code

checkPassword(self, authToken)

source code

check(self, authToken, write=False, label=None, trove=None, remove=False, allowAnonymous=True)

source code

checkTrove(self, pattern, trove)

source code

addAcl(self, role, trovePattern, label, write=False, remove=False)

source code

editAcl(self, role, oldTroveId, oldLabelId, troveId, labelId, write=False, canRemove=False)

source code

deleteAcl(self, role, label, item)

source code

addUser(self, user, password)

source code

roleIsAdmin(self, role)

source code

roleCanMirror(self, role)

source code

setAdmin(self, role, admin)

source code

setMirror(self, role, canMirror)

source code

_checkValidName(self, name)

source code

addUserByMD5(self, user, salt, password)

source code

deleteUserByName(self, user)

source code

changePassword(self, user, newPassword)

source code

getRoles(self, user)

source code

getRoleList(self)

source code

getRoleMembers(self, role)

source code

_queryPermsByRole(self, role)

source code

iterPermsByRole(self, role)

source code

getPermsByRole(self, roleName)

source code

_getRoleIdByName(self, role)

source code

_checkDuplicates(self, cu, role)

source code

addRole(self, role)

source code

renameRole(self, oldRole, newRole)

source code

updateRoleMembers(self, role, members)

source code

addRoleMember(self, role, userName, commit=True)

source code

deleteRole(self, role, commit=True)

source code

deleteRoleById(self, roleId, commit=True)

source code

getItemList(self)

source code

getLabelList(self)

source code

__checkEntitlementOwner(self, cu, roleIds, entClass)
Raises an error or returns the group Id.

source code

deleteEntitlementClass(self, authToken, entClass)

source code

addEntitlementKey(self, authToken, entClass, entKey)

source code

deleteEntitlementKey(self, authToken, entClass, entKey)

source code

addEntitlementClass(self, authToken, entClass, role)
Adds a new entitlement class to the server, and populates it with an initial role

source code

getEntitlementClassOwner(self, authToken, entClass)
Returns the role which owns the entitlement class

source code

_getIds(self, cu, entClass, role)

source code

addEntitlementClassOwner(self, authToken, role, entClass)
Gives the role management permission for the entitlement class.

source code

deleteEntitlementClassOwner(self, authToken, role, entClass)

source code

iterEntitlementKeys(self, authToken, entClass)

source code

listEntitlementClasses(self, authToken)

source code

getEntitlementClassesRoles(self, authToken, classList)

source code

setEntitlementClassesRoles(self, authToken, classInfo)

source code

init(self, db, serverNameList, cacheTimeout=None, log=None, passwordURL=None, entCheckURL=None)
(Constructor)

source code

Parameters:

cacheTimeout (int) - Timeout, in seconds, for authorization cache entries. If None, no cache is used.
passwordURL - URL base to use for an http get request to externally validate user passwords. When this is specified, the passwords int the local database are ignored, and the changePassword() call is disabled.
entCheckURL - URL base for mapping an entitlement received over the network to an entitlement to check for in the database.

setEntitlementClassesRoles(self, authToken, classInfo)

source code

Parameters:

classInfo (dict) - Dictionary indexed by entitlement class, each entry being a list of exactly the roles that entitlement group should have access to.

Class NetworkAuthorization

__init__(self, db, serverNameList, cacheTimeout=None, log=None, passwordURL=None, entCheckURL=None) (Constructor)

setEntitlementClassesRoles(self, authToken, classInfo)

init(self, db, serverNameList, cacheTimeout=None, log=None, passwordURL=None, entCheckURL=None)
(Constructor)