¡@
OpenStack Study: context.py**** CubicPower OpenStack Study ****
# Copyright 2011-2012 OpenStack Foundation # All Rights Reserved. # # Licensed under the Apache License, Version 2.0 (the "License"); you may # not use this file except in compliance with the License. You may obtain # a copy of the License at # # http://www.apache.org/licenses/LICENSE-2.0 # # Unless required by applicable law or agreed to in writing, software # distributed under the License is distributed on an "AS IS" BASIS, WITHOUT # WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the # License for the specific language governing permissions and limitations # under the License. import uuid from glance.api import policy from glance.openstack.common import local
**** CubicPower OpenStack Study **** class RequestContext(object): """ Stores information about the security context under which the user accesses the system, as well as additional request information. """ user_idt_format = '{user} {tenant} {domain} {user_domain} {p_domain}'
**** CubicPower OpenStack Study **** def __init__(self, auth_tok=None, user=None, tenant=None, roles=None, is_admin=False, read_only=False, show_deleted=False, owner_is_tenant=True, service_catalog=None, policy_enforcer=None, domain=None, user_domain=None, project_domain=None): self.auth_tok = auth_tok self.user = user self.tenant = tenant self.roles = roles or [] self.read_only = read_only self._show_deleted = show_deleted self.owner_is_tenant = owner_is_tenant self.request_id = str(uuid.uuid4()) self.service_catalog = service_catalog self.policy_enforcer = policy_enforcer or policy.Enforcer() self.is_admin = is_admin self.domain = domain self.user_domain = user_domain self.project_domain = project_domain if not self.is_admin: self.is_admin = \ self.policy_enforcer.check_is_admin(self) if not hasattr(local.store, 'context'): self.update_store()
**** CubicPower OpenStack Study **** def to_dict(self): # NOTE(ameade): These keys are named to correspond with the default # format string for logging the context in openstack common user_idt = ( self.user_idt_format.format(user=self.user or '-', tenant=self.tenant or '-', domain=self.domain or '-', user_domain=self.user_domain or '-', p_domain=self.project_domain or '-')) return { 'request_id': self.request_id, #NOTE(bcwaldon): openstack-common logging expects 'user' 'user': self.user, 'user_id': self.user, #NOTE(bcwaldon): openstack-common logging expects 'tenant' 'tenant': self.tenant, 'tenant_id': self.tenant, 'project_id': self.tenant, 'is_admin': self.is_admin, 'read_deleted': self.show_deleted, 'roles': self.roles, 'auth_token': self.auth_tok, 'service_catalog': self.service_catalog, 'user_identity': user_idt } @classmethod
**** CubicPower OpenStack Study **** def from_dict(cls, values): return cls(**values)
**** CubicPower OpenStack Study **** def update_store(self): local.store.context = self @property
**** CubicPower OpenStack Study **** def owner(self): """Return the owner to correlate with an image.""" return self.tenant if self.owner_is_tenant else self.user @property
**** CubicPower OpenStack Study **** def show_deleted(self): """Admins can see deleted by default""" if self._show_deleted or self.is_admin: return True return False
|