[fdZddlmZddlmZddlmZddlmZdZdZdZ dd Z dd Z d Z d Z y )z1Utilities for manipulating organization policies.)absolute_import)division)unicode_literals) exceptionsc@t|}dj|dS)a-Returns the constraint from the specified policy name. A constraint has the following syntax: constraints/{constraint_name}. Args: policy_name: The name of the policy. A policy name has the following syntax: [organizations|folders|projects]/{resource_id}/policies/{constraint_name}. zconstraints/{}_GetPolicyNameTokensformat policy_namepolicy_name_tokenss -lib/googlecloudsdk/api_lib/orgpolicy/utils.pyGetConstraintFromPolicyNamers&,K8  !3A!6 77cHt|}dj|d|dS)a<Returns the resource from the specified policy name. A resource has the following syntax: [organizations|folders|projects]/{resource_id}. Args: policy_name: The name of the policy. A policy name has the following syntax: [organizations|folders|projects]/{resource_id}/policies/{constraint_name}. z{}/{}rr r s rGetResourceFromPolicyNamer%s,,K8 *1-/A!/D EErcPt|}dj|d|d|dS)aReturns the associated policy name for the specified constraint name. A policy name has the following syntax: [organizations|folders|projects]/{resource_id}/policies/{constraint_name}. Args: constraint_name: The name of the constraint. A constraint name has the following syntax: [organizations|folders|projects]/{resource_id}/constraints/{constraint_name}. z{}/{}/policies/{}rrr)_GetConstraintNameTokensr constraint_nameconstraint_name_tokenss rGetPolicyNameFromConstraintNamer3s:4OD  # #$:1$=$:1$=$:1$= ??rNcld}nfd}tt||jjS)acReturns a list of rules on the policy that contain the specified condition expression. In the case that condition_expression is None, rules without conditions are returned. Args: policy: messages.GoogleCloudOrgpolicy{api_version}Policy, The policy object to search. condition_expression: str, The condition expression to look for. c|jduSN conditionrules rz,GetMatchingRulesFromPolicy..Ps DNNd$:rcV|jduxr|jjk(Srr expressionr!condition_expressions rr"z,GetMatchingRulesFromPolicy..Rs&DNN$$>$t4>>C\C\`tCt$trlistfilterspecrulespolicyr'condition_filters ` rGetMatchingRulesFromPolicyr0Ds4!:t f%v{{'8'89 ::rcld}nfd}tt||jjS)agReturns a list of rules on the policy that do not contain the specified condition expression. In the case that condition_expression is None, rules with conditions are returned. Args: policy: messages.GoogleCloudOrgpolicy{api_version}Policy, The policy object to search. condition_expression: str, The condition expression to look for. c|jduSrrr s rr"z/GetNonMatchingRulesFromPolicy..cs DNN$$>rcV|jduxs|jjk7Srr$r&s rr"z/GetNonMatchingRulesFromPolicy..es&DNNd$:$odnn>W>W[o>o$orr(r-s ` rGetNonMatchingRulesFromPolicyr4Ws4!>o f%v{{'8'89 ::rc|jd}t|dk7r$tjdj ||S)zReturns the individual tokens from the policy name. Args: policy_name: The name of the policy. A policy name has the following syntax: [organizations|folders|projects]/{resource_id}/policies/{constraint_name}. /zInvalid policy name '{}': Name must be in the form [projects|folders|organizations]/{{resource_id}}/policies/{{constraint_name}}.splitlenrInvalidInputErrorr r s rr r jsN#((- !  & & L    rc|jd}t|dk7r$tjdj ||S)zReturns the individual tokens from the constraint name. Args: constraint_name: The name of the constraint. A constraint name has the following syntax: [organizations|folders|projects]/{resource_id}/constraints/{constraint_name}. r6r7zInvalid constraint name '{}': Name must be in the form [projects|folders|organizations]/{{resource_id}}/constraints/{{constraint_name}}.r8rs rrrysN+005  A%  & & S   "" rr)__doc__ __future__rrr'googlecloudsdk.command_lib.org_policiesrrrrr0r4r rrrrAs:8&'> 8 F?";&;&   r