J d Z ddlmZ ddlmZ ddlmZ ddlmZ ddlZddlZddlm Z ddl
m Z dd l m
Z
dd
lmZ dd lmZ ddlmc mZ dd lmZ dd
lmZ ddlmZ ddlmZ ddlm Z ddlm Z ddlm Z ddlm Z ddl!m"Z" ddl#m$Z$ ddl%m&Z& ddl'm(Z( ddl!m)Z) ddl*m+Z+m,Z, e+ e,ddd dd l-m.Z. d Z/ G d d ej` Z1 ed G d! d"e1 Z2 G d# d$e1 Z3 ed% G d& d'e1 Z4 G d( d)e2 Z5 G d* d+ejl Z7y),z&Integration tests for the acl command. )absolute_import)print_function)division)unicode_literalsN)acl)CreateOrGetGsutilLogger) ApiSelector)CommandException)StorageUrlFromString) SkipForGS) SkipForS3)
SkipForXML)GenerationFromURI) ObjectToURI)SetBotoConfigForTest)SetEnvironmentForTest)unittest)
acl_helper)UTF8)Retry)AclTranslation) shim_util)add_move MovedModulemockz
unittest.mock)r z#"entity":"allUsers","role":"READER"c 4 e Zd ZdZddgZddgZddgZddgZdZy) TestAclBasez1Integration test case base class for acl command.r setgetdefaclchviewersN) __name__
__module__ __qualname____doc___set_acl_prefix_get_acl_prefix_set_defacl_prefix_ch_acl_prefix
_project_team 'platform/gsutil/gslib/tests/test_acl.pyr r 5 s0 9EN/EN/ %(4=.-r- r zTests use GS ACL model.c e Zd ZdZ fdZd Zd Zd Zd Zd Z d Z
d Z d
Z d Z
d Zd
Zd Zd Zd Zd Zd Zd Zd Z ed d Zd Zd Zd Zd Z d Z d Z d Z d%d Z d Z!d Z"d! Z#d" Z$d# Z%d$ Z& xZ'S )&TestAclz"Integration tests for acl command.c t t | | j | _ t t
| j | _ t d | _ | j j | j j dg j | _ | j d| j | _ y )Nr
projectNumber)fields-)superr0 setUp CreateBucket
sample_urir str
sample_urlr loggerjson_api GetBucket bucket_namer2 _project_numberr+ _project_test_acl)self __class__s r. r6 z
TestAcl.setUpD s '4 '')DO*3t+?@DO)%0DK ==22 '' 0A 3 CCP= (,(:(:(,(<(< >Dr- c t | j d }| j d }| j | j ||gz dd }| j
rd}nd}| j
|| y )
9Ensures that invalid content returns a bad request error. foocontents badAclT
return_stderrexpected_statusFound invalid JSON/YAMLArgumentExceptionNsuri CreateObjectCreateTempFile RunGsUtilr' _use_gcloud_storageassertIn)rA obj_uriinpathstderr
error_texts r. test_set_invalid_acl_objectz#TestAcl.test_set_invalid_acl_objectP s{ 4$$f$56G
)
4F
^^D 0 0FG3D D*.,- /F ,j&jMM*f%r- c t | j }| j d }| j | j ||gz dd }| j
rd}nd}| j
|| y) rD rH rF TrI rJ rM rN NrP r7 rR rS r' rT rU )rA
bucket_urirW rX rY s r. test_set_invalid_acl_bucketz#TestAcl.test_set_invalid_acl_bucket] sv d'')*J
)
4F
^^D 0 0FJ3G G*.,- /F ,j&jMM*f%r- c * t | j d }| j d }| j | j ||gz dd }| j
r| j
d| y
| j
d| | j
d | y
) FEnsures XML content returns a bad request error and migration warning.rE rF TrI rJ rM rN XML ACL data providedNrO rA rV rW rX s r. test_set_xml_acl_json_api_objectz(TestAcl.test_set_xml_acl_json_api_objectj s 4$$f$56G
*B
CF
^^D 0 0FG3D D*.,- /F
mm-v6 mm'0
mm+V4r- c & t | j }| j d }| j | j ||gz dd }| j
r| j
d| y | j
d| | j
d| y )
r` ra rF TrI rJ rM rN rb Nr\ rA r] rW rX s r. test_set_xml_acl_json_api_bucketz(TestAcl.test_set_xml_acl_json_api_buckety s d'')*J
*B
CF
^^D 0 0FJ3G G*.,- /F
mm-v6 mm'0
mm+V4r- c t | j d }| j | j |gz d }| j |j t }| j | j d|gz | j | j |gz d }| j | j ||gz | j | j |gz d }| j || | j || y)z'Tests setting a valid ACL on an object.rE rF T
return_stdout public-readN)
rP rQ rS r( rR encoder r' assertNotEqual assertEqual)rA rV
acl_stringrW acl_string2 acl_string3s r. test_set_valid_acl_objectz!TestAcl.test_set_valid_acl_object s 4$$f$56G 4 4y @.2 4J
**;*;D*A
BFNN4''='*BBC..!5!5 !A/3 ! 5KNN4''67*;;<..!5!5 !A/3 ! 5K
K0Z-r- c b t | j d }| j | j |gz d }t j
dd| }t j
dd| }| j
|j t }| j | j ||gz y )
z?Ensures that whitespace is allowed in role and entity elements.rE rF Tri z"role"z "role" \nz"entity"z \n "entity"N)
rP rQ rS r( resubrR rl r r' )rA rV ro rW s r. +test_set_valid_permission_whitespace_objectz3TestAcl.test_set_valid_permission_whitespace_object s 4$$f$56G 4 4y @.2 4J <>?..!5!5 !D/3 ! 5K
K0Z-r- c t | j d }| j | j d|gz dd }| j r| j d| y
| j d| | j d | y
) z>Ensures that an invalid canned ACL returns a CommandException.rE rF znot-a-canned-aclTrI rJ AttributeErrorr
zInvalid canned ACLN)rP rQ rS r' rT rU )rA rV rX s r. test_invalid_canned_acl_objectz&TestAcl.test_invalid_canned_acl_object s 4$$f$56G
^^D 0 0 / 9 :*.,- /F
mm$f-
mm&/
mm(&1r- c j t j d } j j |gz d j j
dt gz t
t dd fd } | j j t
} j j
|t gz t
t dd fd } | y )
zBEnsures that valid default canned and XML ACLs works with get/set.rE r] rG Tri zauthenticated-read rI tries timeout_secsc t j d } j j | gz d }j | j d| y )Ns foo2r Tri allAuthenticatedUsers)rP rQ rS r( rm rU )obj_uri2rp ro r] rA s r. _Check1z6TestAcl.test_set_valid_def_acl_bucket.._Check1 sh d'':18 ( : ;hNN4#7#78*#D15 # 7k
*k2
mm+[9r- rF c t j d } j j | gz d }j | y )Ns foo3r Tri )rP rQ rS r( rn )obj_uri3rq ro r] rA s r. _Check2z6TestAcl.test_set_valid_def_acl_bucket.._Check2 sY d'':18 ( : ;hNN4#7#78*#D15 # 7k
z;/r- N) r7 rP rQ rS r( r) r AssertionErrorrR rl r )rA obj_uri1r rW r ro r] s ` @@r. test_set_valid_def_acl_bucketz%TestAcl.test_set_valid_def_acl_bucket s ""$J D%%f%MNH 4 4z A.2 4J NN tJ /0 12
>3: 4: I
**;*;D*A
BFNN4**fd:6F-GGH >30 40 Ir- c | j }| j |d }| j d }| j d||j g | j |dd }|d |d
}}g }||fD ]Y }| j | j |gz d } | j t | j | |j | [ | j | j d |gz | j | j |gz d } | j t | j | | j | j |gz d } | j t | j | | j | j |j gz d } | j | |d y
)z8Tests setting an ACL on a specific version of an object.s datar s defrF cp T versionedr rI ri rk N)CreateVersionedBucketrQ rR rS uriAssertNObjectsInBucketr( assertNotInPUBLIC_READ_JSON_ACL_TEXT_strip_json_whitespaceappendr' rU rn )
rA r] r rW lines
v0_uri_str
v1_uri_str orig_aclsuri_strr s
r. !test_acl_set_version_specific_uriz)TestAcl.test_acl_set_version_specific_uri s ++-J
zG
DC
&
1FNND&#''*+
' '
A ' FE "1XuQx
J I
+ NN4//7);4N Pc
022379s , NN4''=**EEF ..-- <'+ -CMM+T-H-H-MN
..-- <'+ -C.0057
..-- 9.
NCS)A,'r- c 0 t j dd| S )Nz\s* )rt ru )rA json_texts r. r z TestAcl._strip_json_whitespace s
66&"i ((r- c d d|d|d|d}t j |t j S )Nz\{.*"entity":\s*"r4 z".*"role":\s*"".*\}flagsrt compileDOTALL)rA role entity_type
email_addresstemplate_regexs r. _MakeScopeRegexzTestAcl._MakeScopeRegex s% "M49N
::nBII 66r- c p d|d|d|d|d|d }t j |t j S )Nz\{.*"entity":\s*"project-r4 z/",\s*"projectTeam":\s*\{\s*"projectNumber":\s*"z",\s*"team":\s*"z"\s*\},\s*"role":\s*"r r r )rA r project_teamproject_numberr s r. _MakeProjectScopeRegexz TestAcl._MakeProjectScopeRegex s1
~~|T K
::nBII 66r- c | j dd| j }| j | j t | j
gz d }| j
|| | j | j d| j dz t | j
gz | j | j t | j
gz d }| j || | j | j d| j t | j
gz | j | j t | j
gz d }| j
|| y NREADERuserTri -u:r-d)
r USER_TEST_ADDRESSrS r( rP r8 assertNotRegexr* USER_TEST_ID assertRegexrA
test_regexr s r. testAclChangeWithUserIdz TestAcl.testAclChangeWithUserId" sO %%h8N8NOJt 3 3tDOO7L6M M-1 3I :.NN4&&$++ t/11 2 t 3 3tDOO7L6M M-1 3IY
+NN4&&$00 )++ , t 3 3tDOO7L6M M-1 3I :.r- c | j dd| j }| j | j t | j
gz d }| j
|| | j | j d| j dz t | j
gz | j | j t | j
gz d }| j || | j | j d| j t | j
gz | j | j t | j
gz d }| j
|| y )Nr groupTri -gr r )
r GROUP_TEST_ADDRESSrS r( rP r8 r r*
GROUP_TEST_IDr r s r. testAclChangeWithGroupIdz TestAcl.testAclChangeWithGroupId6 sO %%h&*&=&=?Jt 3 3tDOO7L6M M-1 3I :.NN4&&$,,t3 )++ , t 3 3tDOO7L6M M-1 3IY
+NN4&&$11 )++ , t 3 3tDOO7L6M M-1 3I :.r- c | j dd| j }| j | j t | j
gz d }| j
|| | j | j d| j dz t | j
gz | j | j t | j
gz d }| j || | j | j d| j t | j
gz | j | j t | j
gz d }| j
|| y r r r rS r( rP r8 r r* r r s r. testAclChangeWithUserEmailz"TestAcl.testAclChangeWithUserEmailK sL %%h8N8NOJt 3 3tDOO7L6M M-1 3I :.NN4&&$0047 )++ , t 3 3tDOO7L6M M-1 3IY
+NN4&&$00 )++ , t 3 3tDOO7L6M M-1 3I :.r- c | j dd| j }| j | j t | j
gz d }| j
|| | j | j d| j dz t | j
gz | j | j t | j
gz d }| j || | j | j d| j t | j
gz | j | j t | j
gz d }| j
|| y )NOWNERr Tri r :fcr ) r r rS r( rP r8 r r* r r s r. testAclChangeWithGroupEmailz#TestAcl.testAclChangeWithGroupEmail_ sP %%gw8O8OPJt 3 3tDOO7L6M M-1 3I :.NN
t&& T__% ' '( t 3 3tDOO7L6M M-1 3IY
+NN4&&$11 )++ , t 3 3tDOO7L6M M-1 3I :.r- c | j dd| j }| j | j t | j
gz d }| j
|| | j | j d| j dz t | j
gz | j | j t | j
gz d }| j || | j | j d| j t | j
gz | j | j t | j
gz d }| j
|| y )Nr domainTri r r r ) r DOMAIN_TESTrS r( rP r8 r r* r r s r. testAclChangeWithDomainz TestAcl.testAclChangeWithDomaint sM %%h$:J:JKJt 3 3tDOO7L6M M-1 3I :.NN4&&$** t/11 2 t 3 3tDOO7L6M M-1 3IY
+NN
t doo!67 89 t 3 3tDOO7L6M M-1 3I :.r- z(XML API does not support project scopes.c | j d| j | j }| j | j t | j gz d }| j || | j | j d| j dz t | j gz | j | j t | j gz d }| j || y )NWRITERTri -p:w) r r+ r? rS r( rP r8 r r* r@ r r s r. testAclChangeWithProjectOwnersz&TestAcl.testAclChangeWithProjectOwners s ,,Xt7I7I-1-A-ACJt 3 3tDOO7L6M M-1 3I :.NN4&&$0047 )++ , t 3 3tDOO7L6M M-1 3IY
+r- c t j dt j }| j | j t | j gz d }| j || | j | j ddt | j gz | j | j t | j gz d }| j || | j | j ddt | j gz | j | j t | j gz d }| j || y ) Nz2\{.*"entity":\s*"allUsers".*"role":\s*"WRITER".*\}r Tri r z
allusers:wr allusers
rt r r rS r( rP r8 r r* r r s r. testAclChangeWithAllUsersz!TestAcl.testAclChangeWithAllUsers s7 =RYYPJt 3 3tDOO7L6M M-1 3I :.NN4&& t/11 2 t 3 3tDOO7L6M M-1 3IY
+NN4&&*d4??&;<= >t 3 3tDOO7L6M M-1 3I :.r- c t j dt j }| j | j t | j gz d }| j || | j | j ddt | j gz | j | j t | j gz d }| j || | j | j ddt | j gz | j | j t | j gz d }| j || y ) Nz?\{.*"entity":\s*"allAuthenticatedUsers".*"role":\s*"READER".*\}r Tri r zallauthenticatedusers:rr allauthenticatedusersr r s r. testAclChangeWithAllAuthUsersz%TestAcl.testAclChangeWithAllAuthUsers s@ JiiJ t 3 3tDOO7L6M M-1 3I :.NN
DOO$ & &' t 3 3tDOO7L6M M-1 3IY
+NN4&&1 )++ , t 3 3tDOO7L6M M-1 3I :.r- c 4 | j dd| j }| j | j t | j
gz d }| j
|| | j | j d| j dz t | j
gz | j | j t | j
gz d }| j || | j dd| j }| j | j d| j dz t | j
gz dd \ }}| j | j t | j
gz d }| j || | j | j d
| j t | j
gz | j | j t | j
gz d }| j
|| y ) z Tests acl change on a bucket.r r Tri r r r r )rK rj r Nr )rA r r test_regex2s1s2
json_text2
json_text3s r. testBucketAclChangezTestAcl.testBucketAclChange s %%gvt7M7MNJt 3 3tDOO7L6M M-1 3I :.NN
t%% T__% ' '( t 3 3tDOO7L6M M-1 3IY
+&&x9O9OPK
^^
t%%,
doo FB 4 4T__8M7N N.2 4JZ-NN4&&$00 )++ , 4 4T__8M7N N.2 4J
J/r- c P | j t j k( rW| j | j d| j
dz t
| j gz dd }| j d| y
| j d| j | j }| j | j d| j
dz t
| j gz | j | j t
| j gz d }| j || | j | j d | j
t
| j gz | j | j t
| j gz d }| j || y
) z-Tests project entity acl changes on a bucket.r r rI T)rL rK zPCommandException: XML API does not support project scopes, cannot translate ACL.r ri r N)test_apir XMLrS r* r@ rP r8 rU r r+ r? r( r r )rA rX r r r s r. testProjectAclChangesOnBucketz%TestAcl.testProjectAclChangesOnBucket s }} '~~
''$. " " f mm 68>@ ..x9K9K/3/C/CEj
nn
'' doo& ( () ..!5!5doo9N8O!O/3 ! 5i y*-
nnT((D 2 24??+-- . >>$"6"6#'#8"9#:04 " 6j *j1r- c $ | j | j d }| j | j d | j dd| j }| j | j t | gz d }| j || | j | j d| j d z t | gz | j | j t | gz d }| j || | j d
d| j }| j | j d| j d z t | gz | j | j t | gz d }| j || | j | j d | j t | gz | j | j t | gz d }| j || t j d
t j }| j | j ddt | gz | j | j t | gz d }| j || y)z Tests acl change on an object. somethingr rI r r Tri r :READr z:OWNERr z>\{.*"entity":\s*"allAuthenticatedUsers".*"role":\s*"OWNER".*\}r z AllAuth:ON)rQ r8 r r r rS r( rP r r* r rt r r ) rA objr r r r r all_auth_regex
json_text4s r. testObjectAclChangezTestAcl.testObjectAclChange sf
t
NC 3%%h&*&=&=?Jt 3 3tCyk A-1 3I :.NN4&&$11 !#Y(( ) t 3 3tCyk A-1 3IY
+&&w'+'>'>@KNN4&&$11H<I 4 4S { B.2 4JZ-NN4&&$11I 4 4S { B.2 4J
K0ZZIiiN NN4&&$ T#Y)GGH 4 4S { B.2 4JZ 0r- c | j | j d }| j | j d t j dt j
}| j
| j t | gz d }| j || | j
| j dd t | gz | j
| j t | gz d }| j || y
) z%Tests acl ch AllUsers:R on an object.r r rI z2\{.*"entity":\s*"allUsers".*"role":\s*"READER".*\}r Tri r
AllUsers:RN) rQ r8 r rt r r rS r( rP r r* r )rA r all_users_regexr s r. testObjectAclChangeAllUsersz#TestAcl.testObjectAclChangeAllUsers0 s
t
NC 3jj=RYYPOt 3 3tCyk A-1 3I ?3NN4&&$ d3i)HHIt 3 3tCyk A-1 3IY0r- c n | j d }| j ddt | gd }| j |j t
}t
ddg 5 | j d dd
d d t | gd
}| j d| | j d dd|t | gd
}| j d| ddd t
ddg 5 | j d dd
d d t | gd
}| j d| ddd y# 1 sw Y TxY w# 1 sw Y yxY w)z0Tests seek-ahead iterator with ACL sub-commands.rE rF r r Tri )GSUtiltask_estimation_threshold1)r task_estimation_forceTrue-mr! r r )rK z,Estimated work for this command: objects: 1
r N)r r 0zEstimated work) rQ rS rP rR rl r r rU r )rA
object_uri current_aclcurrent_acl_filerX s r. testSeekAheadAclzTestAcl.testSeekAheadAcl@ sn ""F"3J..%Z0@!A/3 ! 5K**K4F4Ft4L*M K J L
M~~ dL
f mmCVL~~ /
f mmCVL
M
K J L
M~~ dL
f '0
M
M
M
M
M
Ms $A(D !5D+ D(+D4c > g }t | D ]L }|j | j | j dj | j d N | j
| j | | j dd| j }g }|D ]; }|j | j | j t | gz d = |D ] }| j || |D cg c]
}t | }}| j dd g| j z d
| j d z gz |z g }|D ]; }|j | j | j t | gz d = |D ] }| j || y c c}w )
z5Tests multi-threaded acl changing on several objects.z
something {0}asciir r r Tri r z-DDr r N)ranger rQ r8 formatrl r r r rS r( rP r r* r ) rA countobjectsir
json_textsr r uriss r. testMultithreadedAclChangez"TestAcl.testMultithreadedAclChange^ s G
5\
nn
t%4%;%;A%>%E%Eg%N PQ
7%%h&*&=&=?JJ
..--c ;'+ -.
)Z0 ") )#DID )NND%=4#6#66$11G;<=?CD E J
..--c ;'+ -.
y*- *s 5Fc j j dd j j d j dd j j j t gz d } j | t t d d
fd } | t t d d
fd } | y
)z2Tests recursively changing ACLs on nested objects.zfoo/barr r] object_namerG rI r r Tri r r c j j ddj dz t d d gz j j t gz d } j | y )Nz-Rr r Tri )rS r* r rP r( r )r r rA r s r. _AddAclz/TestAcl.testRecursiveChangeAcl.._AddAcl s|
nn
t..8 9Sb> ..!5!5c !C/3 ! 5i
y*-r- c j j } j j d| t gz j j
t gz d }j
| y )Nr Tri )r upperrS r* rP r( r ) delete_grantr r rA r s r.
_DeleteAclz2TestAcl.testRecursiveChangeAcl.._DeleteAcl st ,,224l
nnT((D,S +JJK..!5!5c !C/3 ! 5i
)Z0r- N) rQ r8 r r r rS r( rP r r r )rA r r r r r s ` @@r. testRecursiveChangeAclz TestAcl.testRecursiveChangeAcl~ s
t(1%1 3C 3%%h&*&=&=?Jt 3 3tCyk A-1 3I :.
>3. 4. I
>31 41 Lr- c | j }| j d }| j ||d }| j ||dt | | j |dd }|d |d
}}| j d d | j }| j | j |gz d
}| j || | j | j d| j dz |gz | j | j |gz d
}| j || | j | j |gz d
}| j || y)z0Tests changing ACLs on multiple object versions.r s One thingr s
Another thing)r] r rG gs_idempotent_generationr Tr r rI r r ri r r N) r MakeTempNamerQ urigenr r r rS r( r r* r ) rA bucketr obj1_urir obj_v1obj_v2r r s r. testMultiVersionSupportz TestAcl.testMultiVersionSupport sy
'
'
)F##E*K F-8*6 ! 8H "- //5h/? A
' 'T ' BE1XuQxFF%%h&*&=&=?Jt 3 3vh >-1 3I :.NN4&&$11G;VDE Ft 3 3vh >-1 3IY
+t 3 3vh >-1 3I :.r- c $ | j | j ddt | j gz ddd \ }}| j r| j d| n| j d| | j
d| | j
d| y ) Nr zinvalid_$$@hello.com:RTrI )rj rK rL HTTPErrorBadRequestExceptionRetrying)rS r* rP r8 rT rU r )rA stdoutrX s r. testBadRequestAclChangez TestAcl.testBadRequestAclChange s ^^
'
doo
$ NFF
mmK(
mm)62Z(Z(r- c | j d }d}| j 5 | j | j t | gz dd }| j || d d d y # 1 sw Y y xY w)NrE rF z Anonymous \S+ do(es)? not haveTrI rJ )rQ SetAnonymousBotoCredsrS r( rP r )rA r expected_error_regexrX s r. testAclGetWithoutFullControlz$TestAcl.testAclGetWithoutFullControl st ""F"3J<
# # %~~d 2 2d:6F5G G,0./ 1f v 34
& % %s >A,,A5c r | j | j dd }| j d| | j | j dd }| j d| | j | j dd }| j d| | j dgdd }| j d| y)zATests calling ACL commands with insufficient number of arguments.TrI rJ zcommand requires at leastr N)rS r( rU r' r* )rA rX s r. testTooFewArgumentsFailsz TestAcl.testTooFewArgumentsFails s ^^D 0 0*.,- /F MM-v6 ^^D 0 0*.,- /F MM-v6 ^^D / /*.,- /F MM-v6 ^^UG4^
KFMM-v6r- c \ | j }t | j |dd }| j | j |gz d }| j dg| j
z dd|d z |gz d
| j | j |gz d }| j
|| y )
z*Tests -f option to continue after failure.foorE r Tri r -frk foo2rI )rL N)r7 rP rQ rS r( r' rm )rA r] rV ro rp s r.
testMinusFzTestAcl.testMinusF s ""$J Z&+#) +,G 4 4y @.2 4JNND6D 0 00-6)97CD#$ & ..!5!5 !A/3 ! 5K
K0r- )
)(r# r$ r% r& r6 rZ r^ rd rg rr rv rz r} r r r r r r r r r r r r r r r r r r r r r r r# r' r) r.
__classcell__)rB s @r. r0 r0 @ s *
> & &
5 5 . =.& 2'R%(N)7
7/(/*/(/*/( 89 , : , /(/.!0F 2@)1V1 1< .@"H /B
) 5701r- r0 c e Zd ZdZd Zd Zy)TestS3CompatibleAclz3ACL integration tests that work for s3 and gs URLs.c ^ | j }| j |d }| j |d | j | j t | gz d }| j
|j t }| j | j |t | gz y )NrE r rI Tri rF )
r7 rQ r rS r( rP rR rl r r' )rA r] rV r" set_contentss r. testAclObjectGetSetz'TestS3CompatibleAcl.testAclObjectGetSet s ""$J : GG
A.
^^D 0 0DM? B*. 0F&&
d0C&DLNN4''<g *GGHr- c | j }| j | j t | gz d }| j |j t }| j | j |t | gz y )NTri rF )r7 rS r( rP rR rl r r' )rA r] r" r4 s r. testAclBucketGetSetz'TestS3CompatibleAcl.testAclBucketGetSet sx ""$J
^^D 0 0D4D3E E*. 0F&&
d0C&DLNN4''<j9I*JJKr- N)r# r$ r% r& r5 r7 r, r- r. r2 r2 s ;ILr- r2 z7S3 ACLs accept XML and should not cause an XML warning.c e Zd ZdZd Zd Zy)
TestS3OnlyAclz1ACL integration tests that work only for s3 URLs.c t | j d }| j d }| j | j ||gz dd }| j d| | j
d| y )
:Ensures XML content does not return an XML warning for S3.rE rF ra TrI rJ r rb N)rP rQ rR rS r' rU r rc s r. test_set_xml_aclz TestS3OnlyAcl.test_set_xml_acl s{ 4$$f$56G
*B
CF
^^D 0 0FG3D D*.,- /F MM'0,f5r- c t | j }| j d }| j | j ||gz dd }| j d| | j
d| y) r; ra rF TrI rJ r rb N)rP r7 rR rS r' rU r rf s r. test_set_xml_acl_bucketz%TestS3OnlyAcl.test_set_xml_acl_bucket( sv d'')*J
*B
CF
^^D 0 0FJ3G G*.,- /F MM'0,f5r- N)r# r$ r% r& r< r> r, r- r. r9 r9 s 966r- r9 c $ e Zd ZdgZdgZdgZdgZy)TestAclOldAliassetaclgetacl setdefaclchaclN)r# r$ r% r' r( r) r* r, r- r. r@ r@ 3 s J/ J/#}9.r- r@ c
e Zd Zej j ej d ej d Z ej j ej d ej d Z
ej j ej d ej d Z ej j ej d ej d Z ej j ej d ej d Z
ej j ej d ej d Zej j ej d ej d Zej j ej d ej d
Zej j ej d ej d Zej j ej d ej d Zej j ej d ej d
Zej j ej d ej d Zej j ej d ej d Zej j ej d ej d Zej j ej d ej d Zej j ej d ej d Zej j ej d ej d Zej j ej d ej d Zej j ej d ej d Zej j ej d ej d Z ej j ej d ej d Z ej j ej d ej d Z y) TestAclShim
RunCommand)newc ^ t ddg 5 t ddd 5 | j dddgd
}d j |j d }| j d
j
t j d | d d d d d d y # 1 sw Y xY w# 1 sw Y y xY w)Nr use_gcloud_storager r hidden_shim_modedry_runr fake_dir(CLOUDSDK_CORE_PASS_CREDENTIALS_TO_GSUTILCLOUDSDK_ROOT_DIRr r gs://bucket/objectTreturn_log_handler
infozfGcloud Storage Command: {} storage objects describe --format=multi(acl:format=json) gs://bucket/object r r rG joinmessagesrU r r _get_gcloud_binary_pathrA mock_log_handler
info_liness r. #test_shim_translates_acl_get_objectz/TestAclShim.test_shim_translates_acl_get_object< s G H J
K 6< )" ??55:N2O>B + DYY / 8 8 @A
-.4f$<B + DYY / 8 8 @A
&'-v$<c | j }t ddg 5 t ddd 5 | j dd|dgd
}d j |j
d }| j
d
j t j d | | d d d d d d y # 1 sw Y xY w# 1 sw Y y xY w)NrJ rL r rO rP r r rb TrT rV rW zKGcloud Storage Command: {} storage buckets update --acl-file={} gs://bucketre rf s r. #test_shim_translates_acl_set_bucketz/TestAclShim.test_shim_translates_acl_set_bucketp s
"F G H J
K 6< )" ??5,16=+I>B + D YY / 8 8 @A
45;V$<B + D YY / 8 8 @A
?@F$<TestAclShim.test_shim_translates_acl_set_multiple_buckets_urls s
"F G H J
K 6< )" ??5 4 3
?C + D YY / 8 8 @A
@AG$<TestAclShim.test_shim_translates_acl_set_multiple_objects_urls s
"F G H J
K 6< )" ??5 4!57L !3
?C + D
YY / 8 8 @A
BCI6$<,$ &
K
K
K
K# B4A*B(B4(B1 -B44B=c | j }t ddg 5 t ddd 5 | j dg dd }d
j |j
d }| j
d j t j d | | d d d d d d y # 1 sw Y xY w# 1 sw Y y xY w)
NrJ rL r rO rP r )r! r r rz zgs://bucket2/oTrT rV rW zGcloud Storage Command: {} storage objects update --add-acl-grant entity=user-user@example.com,role=READER gs://bucket1/o gs://bucket2/ore rf s r. &test_shim_changes_object_acls_for_userz2TestAclShim.test_shim_changes_object_acls_for_user s
"F G H J
K 6< )" ??5 3
?C + D YY / 8 8 @A
./5v22:>0$ &
K
K
K
Kr c t ddg 5 t ddd 5 | j t d 5 | j dg d d d d d d d d d d y # 1 sw Y xY w# 1 sw Y xY w# 1 sw Y y xY w) NrJ rL r rO rP r} r )r! rb r~ r r s r. 5test_shim_raises_error_for_mix_of_objects_and_bucketszATestAclShim.test_shim_raises_error_for_mix_of_objects_and_buckets, s G H J
K 6< )"
#
# =? //%!M
N?
K
K ? ?
K
Kr c | j }t ddg 5 t ddd 5 | j dg dd }d
j |j
d }| j
d j t j d | | d d d d d d y # 1 sw Y xY w# 1 sw Y y xY w)
NrJ rL r rO rP r )r! r zgroup@example.com:Wrz TrT rV rW z{Gcloud Storage Command: {} storage objects update --add-acl-grant entity=group-group@example.com,role=WRITER gs://bucket1/ore rf s r. test_shim_changes_acls_for_groupz,TestAclShim.test_shim_changes_acls_for_group9 s
"F G H J
K 6< )" ?? H # + % YY / 8 8 @A
&22:>!$ &
K
K
K
Kr c | j }t ddg 5 t ddd 5 | j dg dd }d
j |j
d }| j
d j t j d | | d d d d d d y # 1 sw Y xY w# 1 sw Y y xY w)
NrJ rL r rO rP r )r! r z
example.com:Orz TrT rV rW zuGcloud Storage Command: {} storage objects update --add-acl-grant entity=domain-example.com,role=OWNER gs://bucket1/ore rf s r. !test_shim_changes_acls_for_domainz-TestAclShim.test_shim_changes_acls_for_domainM s
"F G H J
K 6< )" ?? B # + % YY / 8 8 @A
)*0&$<!$ &
K
K
K
Kr c
| j }t ddg 5 t ddd 5 dD ]p }| j ddd |d
z d gd
}dj |j
d }| j
dj t j d | | r d d d d d d y # 1 sw Y xY w# 1 sw Y y xY w)NrJ rL r rO rP allallUsersAllUsersr r! r :Orz TrT rV rW zkGcloud Storage Command: {} storage objects update --add-acl-grant entity=allUsers,role=OWNER gs://bucket1/ore rA rW
identifierr] r^ s r. $test_shim_changes_acls_for_all_usersz0TestAclShim.test_shim_changes_acls_for_all_userst s
"F G H J
K 6< )"
:J !__dD*t"35EF!% - '
yy!1!:!:6!BC*
-- +,2F & > >z J #-%&0 2 :
K
K
K
K# CA6B5$C5B> :CC
c
| j }t ddg 5 t ddd 5 dD ]p }| j ddd |d
z d gd
}dj |j
d }| j
dj t j d | | r d d d d d d y # 1 sw Y xY w# 1 sw Y y xY w)NrJ rL r rO rP allauthr AllAuthenticatedUsersr r! r r rz TrT rV rW zxGcloud Storage Command: {} storage objects update --add-acl-grant entity=allAuthenticatedUsers,role=OWNER gs://bucket1/ore r s r. 2test_shim_changes_acls_for_all_authenticated_usersz>TestAclShim.test_shim_changes_acls_for_all_authenticated_users s
"F G H J
K 6< )"
J "__dD*t"35EF!% - '
yy!1!:!:6!BC*
--!"(& 44Z@# & (
K
K
K
Kr c | j }t ddg 5 t ddd 5 | j dg dd }d
j |j
d }| j
d j t j d | | d d d d d d y # 1 sw Y xY w# 1 sw Y y xY w)
NrJ rL r rO rP r )r! r zuser@example.comr zuser1@example.comrz TrT rV rW zGcloud Storage Command: {} storage objects update --remove-acl-grant user@example.com --remove-acl-grant user1@example.com gs://bucket1/ore rf s r. test_shim_deletes_aclsz"TestAclShim.test_shim_deletes_acls s
"F G H J
K 6< )"
??5 3
?C + D
YY / 8 8 @A
) +1&$<?!% - '
yy!1!:!:6!BC*
-- +,2F & > >z J #-%&0 2 :
K
K
K
K# B>A3B2!B>2B; 7B>>Cc
| j }t ddg 5 t ddd 5 dD ]m }| j ddd |d
gd }d
j |j
d }| j
dj t j d | | o d d d d d d y # 1 sw Y xY w# 1 sw Y y xY w)NrJ rL r rO rP r r r! r rz TrT rV rW ziGcloud Storage Command: {} storage objects update --remove-acl-grant AllAuthenticatedUsers gs://bucket1/ore r s r. 2test_shim_removes_acls_for_all_authenticated_usersz>TestAclShim.test_shim_removes_acls_for_all_authenticated_users s
"F G H J
K 6< )"
J "__dD*.>?!% - '
yy!1!:!:6!BC*
-- +,2F & > >z J #-%&0 2
K
K
K
Kr N) r# r$ r% r patchobjectr
AclCommandMockr_ rc rg rj rm ro rq ru rx r{ r r r r r r r r r r r r r, r- r. rF rF : s ::S^^\ytyy{C" D" ::S^^\ytyy{C" D" ::S^^\ytyy{C0 D0" ::S^^\ytyy{C0 D0" ::S^^\ytyy{C" D" ::S^^\ytyy{C" D" ::S^^\ytyy{C" D" ::S^^\ytyy{C0 D0& ::S^^\ytyy{C0 D0( ::S^^\ytyy{C0 D0* ::S^^\ytyy{C P D P ::S^^\ytyy{C& D&( ::S^^\ytyy{C& D&( ::S^^\ytyy{C
O D
O ::S^^\ytyy{C& D&& ::S^^\ytyy{C0 D0$ ::S^^\ytyy{C& D&& ::S^^\ytyy{C2 D2( ::S^^\ytyy{C( D(. ::S^^\ytyy{C0 D0, ::S^^\ytyy{C2 D2( ::S^^\ytyy{C2 D2r- rF )8r&
__future__r r r r osrt gslib.commandsr
gslib.commandr gslib.cs_api_mapr gslib.exceptionr
gslib.storage_urlr gslib.tests.testcaseteststestcase)gslib.tests.testcase.integration_testcaser r
r gslib.tests.utilr r r rP r r r gslib.utilsr gslib.utils.constantsr gslib.utils.retry_utilr gslib.utils.translation_helperr r sixr r six.movesr r GsUtilIntegrationTestCaser r0 r2 r9 r@ ShimUnitTestBaserF r, r- r. r s - & % ' 1 ( , 2 ' ' ? ? @ 8 0 1 2 % " & ( 9 ! % VV_ 5 6 A (44 $%@ 1k @ 1 &@ 1FL+ L* DE6K 6 F62 g h2(++ h2r-