dZddlmZddlmZddlmZddlZddlmZddlm Z ddlm Z dd l m Z dd l m Z d Zd Zd ZdZdZdZdZdZdZy)z,Utility functions for `gcloud pam` commands.)absolute_import)division)unicode_literalsN)apis) arg_parsers)base)log)yamlcd|_|S)zRModify request hook to set the force field in delete entitlement requests to true.T)force unused_ref unused_argsreqs *lib/googlecloudsdk/command_lib/pam/util.py'SetForceFieldInDeleteEntitlementRequestrs#) *c|jjj}|jj j |_|jj|_|S)zRModify request hook to parse the entitlement name into a CreateEntitlementRequest.) CONCEPTS entitlementParseresultParent RelativeNameparentName entitlementId)rargsrrs r0ParseEntitlementNameIntoCreateEntitlementRequestr%sU ))//1+!!((*779#*!((--/# *rcd|_|S)zWModify request hook to set the update mask field in update entitlement requests to '*'.* updateMaskr s r'SetUpdateMaskInUpdateEntitlementRequestr$-#. *rczi}|jr|j|d<|js|Si|d<|jj}|D]7}|jdvs|jj |d|j<9t jjdj|j|S)z-Formats the response of the withdraw command.namemetadata) apiVersion createTimetargetzGrant withdrawal initiated. The operation will complete in some time. To track its status, run: `gcloud pam operations wait {}` Note that the wait command requires you to have the `privilegedaccessmanager.operations.get` permission on the resource.) r'r(additionalPropertieskeyvalue string_valuer statusPrintformat)responsermodified_response propertiesprops rFormatWithdrawResponser73s ]] ( f    "$J  55*d xx9904 0G0G #DHH-**Nvhmm  rc|jj}|tjjk(ry|tjjk(ry|tjj k(ryy)zReturn API version based on args. Args: args: The argparse namespace. Returns: API version (e.g. v1alpha or v1beta). v1alphav1betav1N)calliope_command ReleaseTrackrALPHABETAGA)r release_tracks rGetApiVersionFromArgsrBJsb''446-d''--- d'',,, d''*** +rc|js|Stjdt|}t |jdkDrt j d|jD]}|j}d}|jd}tj||rt |dk7r$t j dj|d|d jd d z}d |z}|j} |j| _|| j_|| j_|j$j&j)| |S) z]Modify request hook to populate the requestedPrivilegedAccess field in create grant requests.privilegedaccessmanagerz/Only one resource is supported for grant scope.z%^(projects|organizations|folders)\/.+/zcInvalid resource name: {}. Resource name must be of the form (projects|organizations|folders)/.z$cloudresourcemanager.googleapis.com/rNz&//cloudresourcemanager.googleapis.com/)requested_resourcesrGetMessagesModulerBlenrArgumentTypeErrorstripsplitrematchr2 capitalizeRequestedPrivilegedAccess%RequestedPrivilegedAccessGcpIamAccess gcpIamAccess resourceTyperesourcegrantrequestedPrivilegedAccessappend) rrrmessagesrVpattern components resource_type full_namerequested_privileged_accesss r0SetRequestedPrivilegedAccessInCreateGrantRequestr`\sU ! ! J  # #!6t!<(  ! !"Q&  ' '9 **h~~H6G$J 88GX &#j/Q*>  ) ) 44:F84D  /A1I1I1KCR1PP98CI"*"D"D"F668 ,=J,,98A,,5II''../JK'+* *rcD|r|dsgStj|dS)aJLoads a YAML document from a stream. This function takes a stream (expected to be a list with a single string element) and parses it as a YAML document. It returns the loaded YAML data as a Python object (typically a list or dictionary). Args: stream: The stream to load from. Returns: The loaded YAML data. r)r load)streams rLoadGrantScopeFromYamlrds% vay I 6!9 rc.|jdz|_|S)zFModify request hook to update the resource field in settings requests.z /settings)r'r s rUpdateSettingsResourcerfs XX ##( *rcd|_|S)zTModify request hook to set the update mask field in update settings requests to '*'.r!r"r s r$SetUpdateMaskInUpdateSettingsRequestrhr%r)__doc__ __future__rrrrOgooglecloudsdk.api_lib.utilrgooglecloudsdk.callioperrgooglecloudsdk.corer r rrr$r7rBr`rdrfrhrrrosS 3&' ,/(#$   .$  F*  r