!TdZddlmZddlmZddlmZddlZddlZddlmZddl m Z ddl m Z dd l m Z dd l mZdd lmZdd lmZdd lmZddlmZddlZdZe j2Zej dddZdZej:dZdZdZ efdZ!efdZ"dZ#dZ$dZ%dZ&y)z3Common utility functions for all projects commands.)absolute_import)division)unicode_literalsN)HttpForbiddenError) organizations) projects_api) projects_util)policies)folders)iam_util) exceptions) resourceszcloudresourcemanager.projectsi zJ table( projectId:sort=1, name, projectNumber ) zo^(?:(?:[-a-z0-9]{1,63}\.)*(?:[a-z](?:[-a-z0-9]{0,61}[a-z0-9])?):)?(?:(?:[a-z0-9](?:[-a-z0-9]{0,61}[a-z0-9])?))$ct|tjsy|jstj |ryy)zDChecks to see if the project string is valid project name or number.FT) isinstancesix string_typesisdigit_VALID_PROJECT_REGEXmatch)projects /lib/googlecloudsdk/command_lib/projects/util.pyValidateProjectIdentifierr?s3 GS-- .  __.44W=  cRtjt|jS)N)rGet ParseProject projectNumber) project_ids rGetProjectNumberr!Js   ,z2 3 A AArctjj}|jd||j dd|it S)Ncloudresourcemanager projectId)params collection)rREGISTRYCloneRegisterApiByNameParsePROJECTS_COLLECTION)r api_versionregistrys rrrNsN   % % '( 3[A  K,9L  NNrct|tr|jddn |j}t ||}|j S)Nr$)rdictgetr$rSelfLink)resourcer,r refs rProjectsUriFuncr4WsF Hd #ll;%)1););  Z-# rcXddfd}d}||D]}||s |cSy)zReturns a candidate id for a new project with the given name. Args: project_name: Human-readable name of the project. Returns: A candidate project id, or 'None' if no reasonable candidate is found. c|j}tjdd|tj}tjdd|tj}|j dj d}|S)Nz[^a-z0-9\s/._-])flagsz [\s/._-]+-z -0123456789)lowerresubUlstriprstrip)names r SimplifyNamez IdFromName..SimplifyNameis\ ::.CloudConsoleNowStringps9    " " $C   S#==CCSXX NNrc3DK|}|dzz|yw)Nr9)r@baserJrAs rGenIdszIdFromName..GenIdsts+  D *,. .. Js c4dt|cxkxrdkScS)N)len)is r IsValidIdzIdFromName..IsValidIds A "  rNrL) project_namerNrTrSrJrAs @@r IdFromNamerV_s:O , a| h  rcZtjddd}|dxxdz cc<d|d<|S) z>Returns detailed_help for a remove-iam-policy-binding command.rzexample-project-id-1T) condition DESCRIPTIONzD One binding consists of a member, a role and an optional condition.zThis command uses the cloudresourcemanager/v1 API. The full documentation for this API can be found at: https://cloud.google.com/resource-managerz API REFERENCE)r (GetDetailedHelpForRemoveIamPolicyBinding) detailed_helps rrZrZsLCC'4-MN3 rc~~|jj}|r[|jd}d|vr|jdd|vr|jddj ||j_|S)z?Hook to perserve SetIAMPolicy behavior for declarative surface.,bindingsetag)setIamPolicyRequest updateMasksplitappendjoin)r3argsrequest update_mask mask_fieldss rSetIamPolicyFromFileHookrisv  ++66+##C(K$$ [  -0XXk-BG* .rc~g}tj|} |jD]r}|jj}|jj }|dk(rht |}|jd|tj|d|r3tj|d|} | D]} |jd|| d|dk(r]|j||tj|d|r3tj|d|} | D]} |jd|| d|dk(s|j||tjj|d|s@tj|d|} | D]} |jd|| du|S#t$rtj dwxYw)afGet IAM policy for given project and its ancestors. Args: project_id: project id include_deny: boolean that represents if we should show the deny policies in addition to the grants release_track: which release track, include deny is only supported for ALPHA or BETA Returns: IAM policy for given project and its ancestors r)typeidpolicyfolder organizationzKUser is not permitted to access IAM policy for one or more of the ancestors)r GetAncestryancestor resourceIdrkrlrrc GetIamPolicyr ListDenyPoliciesr rClientrr #AncestorsIamPolicyAccessDeniedError) r include_deny release_track iam_policiesancestryr2 resource_type resource_id project_ref deny_policies deny_policys rGetIamPolicyWithAncestorsrs,  % %j 1(8%%))..m''**k ) #":. "// <  "33J 4AC-*k   ! %! + ( "!**;7  "33K4AC-*k    !%! + . (!#**,99+F  "33K4AC-*k   &!%! +Y&f    8 8  sDF+8F%7FF<)'__doc__ __future__rrrrCr;apitools.base.py.exceptionsr+googlecloudsdk.api_lib.cloudresourcemanagerrrr googlecloudsdk.api_lib.iamr 'googlecloudsdk.api_lib.resource_managerr googlecloudsdk.command_lib.iamr #googlecloudsdk.command_lib.projectsr googlecloudsdk.corerrr+DEFAULT_API_VERSIONPROJECTS_API_VERSIONrF LIST_FORMATcompilerrr!rr4rVrZrirrLrrrs:&' :EDE/;3:) 5$88.X..tR< "rzz   "B*>N+?)X  $Hr