o "7h(@sddlZddlmZGdddeZGdddeZGdddeZGd d d eeeZ Gd d d eeeZ Gd ddeeeZ GdddeeeZ GdddeeeZ Gddde ZGddde ZGddde ZGddde ZGddde ZeeBZdS)N) SAFE_METHODSc@s4eZdZdZdZddZddZddZd d ZdS) MetaOperandaMetaclass that allows its instances (permission classes) to use logical using logical operators (AND, OR, ..) with the follwing syntax: FinalPermClass = (Perm1 | Perm2) & ~Perm3 The `OPERATOR_NAME` class attribute is used to build a name for the resulting class of an unary/binary operation. For example: FinalPermClass = (Perm1 | Perm2) & ~Perm3 FinalPermClass.__class__.__name__ # ((Perm1_OR_Perm2)_And_(Not_Perm3)) NcC t||SN)ANDbuild_permission_from first_class second_classr l/var/www/epreuve.sigeris.cm/public_html/epreuve/venv/lib/python3.10/site-packages/django_rest/permissions.py__and__ zMetaOperand.__and__cCrr)ORrrr r r __or__rzMetaOperand.__or__cCrr)XORrrr r r __xor__!rzMetaOperand.__xor__cCs t|Sr)NOTr)r r r r __invert__% zMetaOperand.__invert__) __name__ __module__ __qualname____doc__ OPERATOR_NAMEr rrrr r r r rs rc@s@eZdZdZeddZeddZeddZedd Z d S) BinaryOperatoraClass that describes how to build a permission class as a result of a Binary operators only. The current class is intended to be inherited by operators like: `AND`, `OR`, `XOR`, etc. The method called during operations is `build_permission_class()`. It creates a new permission class (i.e. inheriting from `BasePermission`), for which the `has_permission()` method is built using the `calculate()` method on both `has_permission()` results of operand classes. A new binary operator can be created by inheriting both the current class, and defining `MetaOperand` as metaclass, then implementing the `calculate()` staticmethod. Example: class MyNewBinaryOperator(BinaryOperator, metaclass=MetaOperand): @staticmethod def calculae(value1, value2): # type:(bool, bool) -> bool return fn(value1, value2) Then, in order to make the new operator used (without having to always call `MyNewBinaryOperator.build_permission_from(class1, class2)`, it should be subscribed in the `MetaOperand`. For example, in order to use the new operator with the `+`, it should be assigned in the `__add__` method of `MetaOperand` cOtdNz4`calculate()` method should be defined in subclassesNotImplementedErrorfirst_functionsecond_functionargskwargsr r r calculateHzBinaryOperator.calculatecCd|j|j|jS)Nz({}{}{}))formatrrclsclass_1class_2r r r build_classnameOszBinaryOperator.build_classnamecCr')Nz ({}) {} ({}))r(rrr)r r r build_docstringTs zBinaryOperator.build_docstringcsB}t|tfi}|_fdd}||_|S)Ncs j}j}||||Srhas_permissionr%)selfrequestviewpermission_func_1permission_func_2r*permission_class_1permission_class_2r r r0dsz.has_permissionr-rBasePermissionr.rr0)r*r7r8result_classname result_classr0r r6r r[s z$BinaryOperator.build_permission_fromN) rrrr staticmethodr% classmethodr-r.rr r r r r-s   rc@sDeZdZdZdZeddZeddZeddZ ed d Z dS) UnaryOperatorasClass that describes how to build a permission class as a result of a Unary operators only. The current class is intended to be inherited by operators like: `NOT` and Identity operators. The method called during operations is `build_permission_class()`. It creates a new permission class (i.e. inheriting from `BasePermission`), for which the `has_permission()` method is built using the `calculate()` method on the `has_permission()` result of operand class. A new unary operator can be created by inheriting both the current class, and defining `MetaOperand` as metaclass, then implementing the `calculate()` staticmethod. Example: class MyNewUnaryOperator(UnaryOperator, metaclass=MetaOperand): @staticmethod def calculae(value): # type:(bool) -> bool return fn(value) NcOrrrfunctionr#r$r r r r%r&zUnaryOperator.calculatecCd|j|jS)Nz({}{}))r(rrr*_classr r r r-zUnaryOperator.build_classnamecCrB)Nz {}({}))r(rrrCr r r r.rEzUnaryOperator.build_docstringcs<}t|tfi}|_fdd}||_|S)Ncsj}|||Srr/)r1r2r3permission_funcr*permission_classr r r0sz;UnaryOperator.build_permission_from..has_permissionr9)r*rHr;r<r0r rGr rs  z#UnaryOperator.build_permission_from) rrrrrr=r%r>r-r.rr r r r r?ns   r?c@ eZdZdZdZeddZdS)rzAND Logical operator class. Example of use: ResultPermClass = AND.build_permission_from(PermClass1, PermClass2) # Which is also equivalend to: ResultPermClass = PermClass1 & PermClass2 _AND_cOs||i|o ||i|Srr r r r r r%z AND.calculateNrrrrrr=r%r r r r r  rc@rI)rzOR Logical operator class. Example of use: ResultPermClass = OR.build_permission_from(PermClass1, PermClass2) # Which is also equivalend to: ResultPermClass = PermClass1 | PermClass2 _OR_cOs||i|p ||i|Srr r r r r r%rKz OR.calculateNrLr r r r rrMrc@rI)rzXOR (eXclusive OR) Logical operator class. Example of use: ResultPermClass = XOR.build_permission_from(PermClass1, PermClass2) # Which is also equivalend to: ResultPermClass = PermClass1 ^ PermClass2 _XOR_cOs||i|||i|ASrr r r r r r%rKz XOR.calculateNrLr r r r rrMrc@rI)rzNOT Logical operator class. Example of use: ResultPermClass = NOT.build_permission_from(PermClass) # Which is also equivalend to: ResultPermClass = ~PermClass NOT_cOs||i| Srr r@r r r r%rEz NOT.calculateNrLr r r r rrMrc@eZdZdZddZdS)r:a The Mainclass of all existing permissions. It's created with `MetaOperand`, which allows it to use operators such as: `&`, `|` `^` and `~`. A new custom permission could be created by inheriting from the current class, and implementing the `has_permission()` method, as shown in the following example: class FooBarPermission(BasePermission): def has_permission(self, request, view): return request.user.name in ("foo", "bar") cCr)Nz9`has_permission()` method should be defined in subclassesrr1r2r3r r r r0szBasePermission.has_permissionNrrrrr0r r r r r:s r:c@rQ)AllowAnyz. Allows everybody to access the view. cCsdS)NTr rRr r r r0 szAllowAny.has_permissionNrSr r r r rT rTc@rQ)IsAuthenticatedz= Allows the view access to authenticated users only. cCt|jo|jjSr)booluseris_authenticatedrRr r r r0zIsAuthenticated.has_permissionNrSr r r r rVrUrVc@rQ) IsStaffUserz5 Allows the view access to staff users only. cCrWr)rXrYis_staffrRr r r r0r[zIsStaffUser.has_permissionNrSr r r r r\rUr\c@rQ) IsAdminUserz5 Allows the view access to admin users only. cCrWr)rXrY is_superuserrRr r r r0)r[zIsAdminUser.has_permissionNrSr r r r r^$rUr^c@rQ) IsReadOnlyzR Allows the view access to read-only http methods: GET, HEAD and OPTIONS. cCs |jtvSr)methodrrRr r r r03rzIsReadOnly.has_permissionNrSr r r r r`.rUr`)sixdjango_rest.http.methodsrtyperobjectrr?with_metaclassrrrrr:rTrVr\r^r`IsAuthenticatedOrReadOnlyr r r r s  %A<