mirror of
https://salsa.debian.org/freeipa-team/freeipa.git
synced 2024-12-26 00:41:25 -06:00
709 lines
22 KiB
Python
709 lines
22 KiB
Python
# Authors:
|
|
# Jason Gerard DeRose <jderose@redhat.com>
|
|
#
|
|
# Copyright (C) 2008 Red Hat
|
|
# see file 'COPYING' for use and warranty information
|
|
#
|
|
# This program is free software; you can redistribute it and/or
|
|
# modify it under the terms of the GNU General Public License as
|
|
# published by the Free Software Foundation; version 2 only
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program; if not, write to the Free Software
|
|
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
|
|
|
|
"""
|
|
Base classes for all front-end plugins.
|
|
"""
|
|
|
|
import re
|
|
import inspect
|
|
import plugable
|
|
from plugable import lock, check_name
|
|
import errors
|
|
from errors import check_type, check_isinstance, raise_TypeError
|
|
from parameters import create_param, Param, Str, Flag
|
|
from util import make_repr
|
|
|
|
|
|
RULE_FLAG = 'validation_rule'
|
|
|
|
def rule(obj):
|
|
assert not hasattr(obj, RULE_FLAG)
|
|
setattr(obj, RULE_FLAG, True)
|
|
return obj
|
|
|
|
def is_rule(obj):
|
|
return callable(obj) and getattr(obj, RULE_FLAG, False) is True
|
|
|
|
|
|
class Command(plugable.Plugin):
|
|
"""
|
|
A public IPA atomic operation.
|
|
|
|
All plugins that subclass from `Command` will be automatically available
|
|
as a CLI command and as an XML-RPC method.
|
|
|
|
Plugins that subclass from Command are registered in the ``api.Command``
|
|
namespace. For example:
|
|
|
|
>>> from ipalib import create_api
|
|
>>> api = create_api()
|
|
>>> class my_command(Command):
|
|
... pass
|
|
...
|
|
>>> api.register(my_command)
|
|
>>> api.finalize()
|
|
>>> list(api.Command)
|
|
['my_command']
|
|
>>> api.Command.my_command # doctest:+ELLIPSIS
|
|
PluginProxy(Command, ...my_command())
|
|
"""
|
|
|
|
__public__ = frozenset((
|
|
'get_default',
|
|
'convert',
|
|
'normalize',
|
|
'validate',
|
|
'execute',
|
|
'__call__',
|
|
'args',
|
|
'options',
|
|
'params',
|
|
'args_to_kw',
|
|
'params_2_args_options',
|
|
'output_for_cli',
|
|
))
|
|
takes_options = tuple()
|
|
takes_args = tuple()
|
|
args = None
|
|
options = None
|
|
params = None
|
|
output_for_cli = None
|
|
|
|
def __call__(self, *args, **kw):
|
|
"""
|
|
Perform validation and then execute the command.
|
|
|
|
If not in a server context, the call will be forwarded over
|
|
XML-RPC and the executed an the nearest IPA server.
|
|
"""
|
|
self.debug(make_repr(self.name, *args, **kw))
|
|
if len(args) > 0:
|
|
arg_kw = self.args_to_kw(*args)
|
|
assert set(arg_kw).intersection(kw) == set()
|
|
kw.update(arg_kw)
|
|
kw = self.normalize(**kw)
|
|
kw = self.convert(**kw)
|
|
kw.update(self.get_default(**kw))
|
|
self.validate(**kw)
|
|
(args, options) = self.params_2_args_options(kw)
|
|
result = self.run(*args, **options)
|
|
self.debug('%s result: %r', self.name, result)
|
|
return result
|
|
|
|
def args_to_kw(self, *values):
|
|
"""
|
|
Map positional into keyword arguments.
|
|
"""
|
|
if self.max_args is not None and len(values) > self.max_args:
|
|
if self.max_args == 0:
|
|
raise errors.ArgumentError(self, 'takes no arguments')
|
|
if self.max_args == 1:
|
|
raise errors.ArgumentError(self, 'takes at most 1 argument')
|
|
raise errors.ArgumentError(self,
|
|
'takes at most %d arguments' % len(self.args)
|
|
)
|
|
return dict(self.__args_to_kw_iter(values))
|
|
|
|
def __args_to_kw_iter(self, values):
|
|
"""
|
|
Generator used by `Command.args_to_kw` method.
|
|
"""
|
|
multivalue = False
|
|
for (i, arg) in enumerate(self.args()):
|
|
assert not multivalue
|
|
if len(values) > i:
|
|
if arg.multivalue:
|
|
multivalue = True
|
|
if len(values) == i + 1 and type(values[i]) in (list, tuple):
|
|
yield (arg.name, values[i])
|
|
else:
|
|
yield (arg.name, values[i:])
|
|
else:
|
|
yield (arg.name, values[i])
|
|
else:
|
|
break
|
|
|
|
def args_options_2_params(self, args, options):
|
|
pass
|
|
|
|
def params_2_args_options(self, params):
|
|
"""
|
|
Split params into (args, kw).
|
|
"""
|
|
args = tuple(params.get(name, None) for name in self.args)
|
|
options = dict(
|
|
(name, params.get(name, None)) for name in self.options
|
|
)
|
|
return (args, options)
|
|
|
|
def normalize(self, **kw):
|
|
"""
|
|
Return a dictionary of normalized values.
|
|
|
|
For example:
|
|
|
|
>>> class my_command(Command):
|
|
... takes_options = (
|
|
... Param('first', normalizer=lambda value: value.lower()),
|
|
... Param('last'),
|
|
... )
|
|
...
|
|
>>> c = my_command()
|
|
>>> c.finalize()
|
|
>>> c.normalize(first=u'JOHN', last=u'DOE')
|
|
{'last': u'DOE', 'first': u'john'}
|
|
"""
|
|
return dict(
|
|
(k, self.params[k].normalize(v)) for (k, v) in kw.iteritems()
|
|
)
|
|
|
|
def convert(self, **kw):
|
|
"""
|
|
Return a dictionary of values converted to correct type.
|
|
|
|
>>> from ipalib import Int
|
|
>>> class my_command(Command):
|
|
... takes_args = (
|
|
... Int('one'),
|
|
... 'two',
|
|
... )
|
|
...
|
|
>>> c = my_command()
|
|
>>> c.finalize()
|
|
>>> c.convert(one=1, two=2)
|
|
{'two': u'2', 'one': 1}
|
|
"""
|
|
return dict(
|
|
(k, self.params[k].convert(v)) for (k, v) in kw.iteritems()
|
|
)
|
|
|
|
def get_default(self, **kw):
|
|
"""
|
|
Return a dictionary of defaults for all missing required values.
|
|
|
|
For example:
|
|
|
|
>>> from ipalib import Str
|
|
>>> class my_command(Command):
|
|
... takes_args = [Str('color', default=u'Red')]
|
|
...
|
|
>>> c = my_command()
|
|
>>> c.finalize()
|
|
>>> c.get_default()
|
|
{'color': u'Red'}
|
|
>>> c.get_default(color=u'Yellow')
|
|
{}
|
|
"""
|
|
return dict(self.__get_default_iter(kw))
|
|
|
|
def __get_default_iter(self, kw):
|
|
"""
|
|
Generator method used by `Command.get_default`.
|
|
"""
|
|
for param in self.params():
|
|
if param.name in kw:
|
|
continue
|
|
if param.required or param.autofill:
|
|
default = param.get_default(**kw)
|
|
if default is not None:
|
|
yield (param.name, default)
|
|
|
|
def validate(self, **kw):
|
|
"""
|
|
Validate all values.
|
|
|
|
If any value fails the validation, `ipalib.errors.ValidationError`
|
|
(or a subclass thereof) will be raised.
|
|
"""
|
|
for param in self.params():
|
|
value = kw.get(param.name, None)
|
|
if value is not None:
|
|
param.validate(value)
|
|
elif param.required:
|
|
raise errors.RequirementError(param.name)
|
|
|
|
def run(self, *args, **kw):
|
|
"""
|
|
Dispatch to `Command.execute` or `Command.forward`.
|
|
|
|
If running in a server context, `Command.execute` is called and the
|
|
actually work this command performs is executed locally.
|
|
|
|
If running in a non-server context, `Command.forward` is called,
|
|
which forwards this call over XML-RPC to the exact same command
|
|
on the nearest IPA server and the actual work this command
|
|
performs is executed remotely.
|
|
"""
|
|
if self.api.env.in_server:
|
|
target = self.execute
|
|
else:
|
|
target = self.forward
|
|
object.__setattr__(self, 'run', target)
|
|
return target(*args, **kw)
|
|
|
|
def execute(self, *args, **kw):
|
|
"""
|
|
Perform the actual work this command does.
|
|
|
|
This method should be implemented only against functionality
|
|
in self.api.Backend. For example, a hypothetical
|
|
user_add.execute() might be implemented like this:
|
|
|
|
>>> class user_add(Command):
|
|
... def execute(self, **kw):
|
|
... return self.api.Backend.ldap.add(**kw)
|
|
...
|
|
"""
|
|
raise NotImplementedError('%s.execute()' % self.name)
|
|
|
|
def forward(self, *args, **kw):
|
|
"""
|
|
Forward call over XML-RPC to this same command on server.
|
|
"""
|
|
return self.Backend.xmlrpc.forward_call(self.name, *args, **kw)
|
|
|
|
def finalize(self):
|
|
"""
|
|
Finalize plugin initialization.
|
|
|
|
This method creates the ``args``, ``options``, and ``params``
|
|
namespaces. This is not done in `Command.__init__` because
|
|
subclasses (like `crud.Add`) might need to access other plugins
|
|
loaded in self.api to determine what their custom `Command.get_args`
|
|
and `Command.get_options` methods should yield.
|
|
"""
|
|
self.args = plugable.NameSpace(self.__create_args(), sort=False)
|
|
if len(self.args) == 0 or not self.args[-1].multivalue:
|
|
self.max_args = len(self.args)
|
|
else:
|
|
self.max_args = None
|
|
self.options = plugable.NameSpace(
|
|
(create_param(spec) for spec in self.get_options()),
|
|
sort=False
|
|
)
|
|
def get_key(p):
|
|
if p.required:
|
|
if p.default_from is None:
|
|
return 0
|
|
return 1
|
|
return 2
|
|
self.params = plugable.NameSpace(
|
|
sorted(tuple(self.args()) + tuple(self.options()), key=get_key),
|
|
sort=False
|
|
)
|
|
super(Command, self).finalize()
|
|
|
|
def get_args(self):
|
|
"""
|
|
Iterate through parameters for ``Command.args`` namespace.
|
|
|
|
Subclasses can override this to customize how the arguments
|
|
are determined. For an example of why this can be useful,
|
|
see `ipalib.crud.Mod`.
|
|
"""
|
|
if callable(self.takes_args):
|
|
args = self.takes_args()
|
|
else:
|
|
args = self.takes_args
|
|
for arg in args:
|
|
yield arg
|
|
|
|
def get_options(self):
|
|
"""
|
|
Iterate through parameters for ``Command.options`` namespace.
|
|
|
|
Subclasses can override this to customize how the options
|
|
are determined. For an example of why this can be useful,
|
|
see `ipalib.crud.Mod`.
|
|
"""
|
|
if callable(self.takes_options):
|
|
options = self.takes_options()
|
|
else:
|
|
options = self.takes_options
|
|
for option in options:
|
|
yield option
|
|
|
|
def __create_args(self):
|
|
"""
|
|
Generator used to create args namespace.
|
|
"""
|
|
optional = False
|
|
multivalue = False
|
|
for arg in self.get_args():
|
|
arg = create_param(arg)
|
|
if optional and arg.required:
|
|
raise ValueError(
|
|
'%s: required argument after optional' % arg.name
|
|
)
|
|
if multivalue:
|
|
raise ValueError(
|
|
'%s: only final argument can be multivalue' % arg.name
|
|
)
|
|
if not arg.required:
|
|
optional = True
|
|
if arg.multivalue:
|
|
multivalue = True
|
|
yield arg
|
|
|
|
|
|
class LocalOrRemote(Command):
|
|
"""
|
|
A command that is explicitly executed locally or remotely.
|
|
|
|
This is for commands that makes sense to execute either locally or
|
|
remotely to return a perhaps different result. The best example of
|
|
this is the `ipalib.plugins.f_misc.env` plugin which returns the
|
|
key/value pairs describing the configuration state: it can be
|
|
"""
|
|
|
|
takes_options = (
|
|
Flag('server?',
|
|
doc='Forward to server instead of running locally',
|
|
),
|
|
)
|
|
|
|
def run(self, *args, **options):
|
|
"""
|
|
Dispatch to forward() or execute() based on ``server`` option.
|
|
|
|
When running in a client context, this command is executed remotely if
|
|
``options['server']`` is true; otherwise it is executed locally.
|
|
|
|
When running in a server context, this command is always executed
|
|
locally and the value of ``options['server']`` is ignored.
|
|
"""
|
|
if options['server'] and not self.env.in_server:
|
|
return self.forward(*args, **options)
|
|
return self.execute(*args, **options)
|
|
|
|
|
|
class Object(plugable.Plugin):
|
|
__public__ = frozenset((
|
|
'backend',
|
|
'methods',
|
|
'properties',
|
|
'params',
|
|
'primary_key',
|
|
'params_minus_pk',
|
|
'get_dn',
|
|
))
|
|
backend = None
|
|
methods = None
|
|
properties = None
|
|
params = None
|
|
primary_key = None
|
|
params_minus_pk = None
|
|
|
|
# Can override in subclasses:
|
|
backend_name = None
|
|
takes_params = tuple()
|
|
|
|
def set_api(self, api):
|
|
super(Object, self).set_api(api)
|
|
self.methods = plugable.NameSpace(
|
|
self.__get_attrs('Method'), sort=False
|
|
)
|
|
self.properties = plugable.NameSpace(
|
|
self.__get_attrs('Property'), sort=False
|
|
)
|
|
self.params = plugable.NameSpace(
|
|
self.__get_params(), sort=False
|
|
)
|
|
pkeys = filter(lambda p: p.primary_key, self.params())
|
|
if len(pkeys) > 1:
|
|
raise ValueError(
|
|
'%s (Object) has multiple primary keys: %s' % (
|
|
self.name,
|
|
', '.join(p.name for p in pkeys),
|
|
)
|
|
)
|
|
if len(pkeys) == 1:
|
|
self.primary_key = pkeys[0]
|
|
self.params_minus_pk = plugable.NameSpace(
|
|
filter(lambda p: not p.primary_key, self.params()), sort=False
|
|
)
|
|
|
|
if 'Backend' in self.api and self.backend_name in self.api.Backend:
|
|
self.backend = self.api.Backend[self.backend_name]
|
|
|
|
def get_dn(self, primary_key):
|
|
"""
|
|
Construct an LDAP DN from a primary_key.
|
|
"""
|
|
raise NotImplementedError('%s.get_dn()' % self.name)
|
|
|
|
def __get_attrs(self, name):
|
|
if name not in self.api:
|
|
return
|
|
namespace = self.api[name]
|
|
assert type(namespace) is plugable.NameSpace
|
|
for proxy in namespace(): # Equivalent to dict.itervalues()
|
|
if proxy.obj_name == self.name:
|
|
yield proxy.__clone__('attr_name')
|
|
|
|
def __get_params(self):
|
|
props = self.properties.__todict__()
|
|
for spec in self.takes_params:
|
|
if type(spec) is str:
|
|
key = spec.rstrip('?*+')
|
|
else:
|
|
assert isinstance(spec, Param)
|
|
key = spec.name
|
|
if key in props:
|
|
yield props.pop(key).param
|
|
else:
|
|
yield create_param(spec)
|
|
def get_key(p):
|
|
if p.param.required:
|
|
if p.param.default_from is None:
|
|
return 0
|
|
return 1
|
|
return 2
|
|
for prop in sorted(props.itervalues(), key=get_key):
|
|
yield prop.param
|
|
|
|
|
|
class Attribute(plugable.Plugin):
|
|
"""
|
|
Base class implementing the attribute-to-object association.
|
|
|
|
`Attribute` plugins are associated with an `Object` plugin to group
|
|
a common set of commands that operate on a common set of parameters.
|
|
|
|
The association between attribute and object is done using a simple
|
|
naming convention: the first part of the plugin class name (up to the
|
|
first underscore) is the object name, and rest is the attribute name,
|
|
as this table shows:
|
|
|
|
=============== =========== ==============
|
|
Class name Object name Attribute name
|
|
=============== =========== ==============
|
|
noun_verb noun verb
|
|
user_add user add
|
|
user_first_name user first_name
|
|
=============== =========== ==============
|
|
|
|
For example:
|
|
|
|
>>> class user_add(Attribute):
|
|
... pass
|
|
...
|
|
>>> instance = user_add()
|
|
>>> instance.obj_name
|
|
'user'
|
|
>>> instance.attr_name
|
|
'add'
|
|
|
|
In practice the `Attribute` class is not used directly, but rather is
|
|
only the base class for the `Method` and `Property` classes. Also see
|
|
the `Object` class.
|
|
"""
|
|
__public__ = frozenset((
|
|
'obj',
|
|
'obj_name',
|
|
))
|
|
__obj = None
|
|
|
|
def __init__(self):
|
|
m = re.match(
|
|
'^([a-z][a-z0-9]+)_([a-z][a-z0-9]+)$',
|
|
self.__class__.__name__
|
|
)
|
|
assert m
|
|
self.__obj_name = m.group(1)
|
|
self.__attr_name = m.group(2)
|
|
super(Attribute, self).__init__()
|
|
|
|
def __get_obj_name(self):
|
|
return self.__obj_name
|
|
obj_name = property(__get_obj_name)
|
|
|
|
def __get_attr_name(self):
|
|
return self.__attr_name
|
|
attr_name = property(__get_attr_name)
|
|
|
|
def __get_obj(self):
|
|
"""
|
|
Returns the obj instance this attribute is associated with, or None
|
|
if no association has been set.
|
|
"""
|
|
return self.__obj
|
|
obj = property(__get_obj)
|
|
|
|
def set_api(self, api):
|
|
self.__obj = api.Object[self.obj_name]
|
|
super(Attribute, self).set_api(api)
|
|
|
|
|
|
class Method(Attribute, Command):
|
|
"""
|
|
A command with an associated object.
|
|
|
|
A `Method` plugin must have a corresponding `Object` plugin. The
|
|
association between object and method is done through a simple naming
|
|
convention: the first part of the method name (up to the first under
|
|
score) is the object name, as the examples in this table show:
|
|
|
|
============= =========== ==============
|
|
Method name Object name Attribute name
|
|
============= =========== ==============
|
|
user_add user add
|
|
noun_verb noun verb
|
|
door_open_now door open_now
|
|
============= =========== ==============
|
|
|
|
There are three different places a method can be accessed. For example,
|
|
say you created a `Method` plugin and its corresponding `Object` plugin
|
|
like this:
|
|
|
|
>>> from ipalib import create_api
|
|
>>> api = create_api()
|
|
>>> class user_add(Method):
|
|
... def run(self):
|
|
... return 'Added the user!'
|
|
...
|
|
>>> class user(Object):
|
|
... pass
|
|
...
|
|
>>> api.register(user_add)
|
|
>>> api.register(user)
|
|
>>> api.finalize()
|
|
|
|
First, the ``user_add`` plugin can be accessed through the ``api.Method``
|
|
namespace:
|
|
|
|
>>> list(api.Method)
|
|
['user_add']
|
|
>>> api.Method.user_add() # Will call user_add.run()
|
|
'Added the user!'
|
|
|
|
Second, because `Method` is a subclass of `Command`, the ``user_add``
|
|
plugin can also be accessed through the ``api.Command`` namespace:
|
|
|
|
>>> list(api.Command)
|
|
['user_add']
|
|
>>> api.Command.user_add() # Will call user_add.run()
|
|
'Added the user!'
|
|
|
|
And third, ``user_add`` can be accessed as an attribute on the ``user``
|
|
`Object`:
|
|
|
|
>>> list(api.Object)
|
|
['user']
|
|
>>> list(api.Object.user.methods)
|
|
['add']
|
|
>>> api.Object.user.methods.add() # Will call user_add.run()
|
|
'Added the user!'
|
|
|
|
The `Attribute` base class implements the naming convention for the
|
|
attribute-to-object association. Also see the `Object` and the
|
|
`Property` classes.
|
|
"""
|
|
__public__ = Attribute.__public__.union(Command.__public__)
|
|
extra_options_first = False
|
|
extra_args_first = False
|
|
|
|
def __init__(self):
|
|
super(Method, self).__init__()
|
|
|
|
|
|
class Property(Attribute):
|
|
__public__ = frozenset((
|
|
'rules',
|
|
'param',
|
|
'type',
|
|
)).union(Attribute.__public__)
|
|
|
|
klass = Str
|
|
default = None
|
|
default_from = None
|
|
normalizer = None
|
|
|
|
def __init__(self):
|
|
super(Property, self).__init__()
|
|
self.rules = tuple(
|
|
sorted(self.__rules_iter(), key=lambda f: getattr(f, '__name__'))
|
|
)
|
|
self.kwargs = tuple(
|
|
sorted(self.__kw_iter(), key=lambda keyvalue: keyvalue[0])
|
|
)
|
|
kw = dict(self.kwargs)
|
|
self.param = self.klass(self.attr_name, *self.rules, **kw)
|
|
|
|
def __kw_iter(self):
|
|
for (key, kind, default) in self.klass.kwargs:
|
|
if getattr(self, key, None) is not None:
|
|
yield (key, getattr(self, key))
|
|
|
|
def __rules_iter(self):
|
|
"""
|
|
Iterates through the attributes in this instance to retrieve the
|
|
methods implementing validation rules.
|
|
"""
|
|
for name in dir(self.__class__):
|
|
if name.startswith('_'):
|
|
continue
|
|
base_attr = getattr(self.__class__, name)
|
|
if is_rule(base_attr):
|
|
attr = getattr(self, name)
|
|
if is_rule(attr):
|
|
yield attr
|
|
|
|
|
|
class Application(Command):
|
|
"""
|
|
Base class for commands register by an external application.
|
|
|
|
Special commands that only apply to a particular application built atop
|
|
`ipalib` should subclass from ``Application``.
|
|
|
|
Because ``Application`` subclasses from `Command`, plugins that subclass
|
|
from ``Application`` with be available in both the ``api.Command`` and
|
|
``api.Application`` namespaces.
|
|
"""
|
|
|
|
__public__ = frozenset((
|
|
'application',
|
|
'set_application'
|
|
)).union(Command.__public__)
|
|
__application = None
|
|
|
|
def __get_application(self):
|
|
"""
|
|
Returns external ``application`` object.
|
|
"""
|
|
return self.__application
|
|
application = property(__get_application)
|
|
|
|
def set_application(self, application):
|
|
"""
|
|
Sets the external application object to ``application``.
|
|
"""
|
|
if self.__application is not None:
|
|
raise AttributeError(
|
|
'%s.application can only be set once' % self.name
|
|
)
|
|
if application is None:
|
|
raise TypeError(
|
|
'%s.application cannot be None' % self.name
|
|
)
|
|
object.__setattr__(self, '_Application__application', application)
|
|
assert self.application is application
|