192 lines
8.8 KiB
Python
192 lines
8.8 KiB
Python
# Copyright 2012 OpenStack Foundation
|
|
# Copyright 2013 IBM Corp.
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
import glance_store
|
|
|
|
from glance.api import authorization
|
|
from glance.api import policy
|
|
from glance.api import property_protections
|
|
from glance.common import property_utils
|
|
from glance.common import store_utils
|
|
import glance.db
|
|
import glance.domain
|
|
import glance.location
|
|
import glance.notifier
|
|
import glance.quota
|
|
|
|
|
|
class Gateway(object):
|
|
def __init__(self, db_api=None, store_api=None, notifier=None,
|
|
policy_enforcer=None):
|
|
self.db_api = db_api or glance.db.get_api()
|
|
self.store_api = store_api or glance_store
|
|
self.store_utils = store_utils
|
|
self.notifier = notifier or glance.notifier.Notifier()
|
|
self.policy = policy_enforcer or policy.Enforcer()
|
|
|
|
def get_image_factory(self, context):
|
|
image_factory = glance.domain.ImageFactory()
|
|
store_image_factory = glance.location.ImageFactoryProxy(
|
|
image_factory, context, self.store_api, self.store_utils)
|
|
quota_image_factory = glance.quota.ImageFactoryProxy(
|
|
store_image_factory, context, self.db_api, self.store_utils)
|
|
policy_image_factory = policy.ImageFactoryProxy(
|
|
quota_image_factory, context, self.policy)
|
|
notifier_image_factory = glance.notifier.ImageFactoryProxy(
|
|
policy_image_factory, context, self.notifier)
|
|
if property_utils.is_property_protection_enabled():
|
|
property_rules = property_utils.PropertyRules(self.policy)
|
|
pif = property_protections.ProtectedImageFactoryProxy(
|
|
notifier_image_factory, context, property_rules)
|
|
authorized_image_factory = authorization.ImageFactoryProxy(
|
|
pif, context)
|
|
else:
|
|
authorized_image_factory = authorization.ImageFactoryProxy(
|
|
notifier_image_factory, context)
|
|
return authorized_image_factory
|
|
|
|
def get_image_member_factory(self, context):
|
|
image_factory = glance.domain.ImageMemberFactory()
|
|
quota_image_factory = glance.quota.ImageMemberFactoryProxy(
|
|
image_factory, context, self.db_api, self.store_utils)
|
|
policy_member_factory = policy.ImageMemberFactoryProxy(
|
|
quota_image_factory, context, self.policy)
|
|
authorized_image_factory = authorization.ImageMemberFactoryProxy(
|
|
policy_member_factory, context)
|
|
return authorized_image_factory
|
|
|
|
def get_repo(self, context):
|
|
image_repo = glance.db.ImageRepo(context, self.db_api)
|
|
store_image_repo = glance.location.ImageRepoProxy(
|
|
image_repo, context, self.store_api, self.store_utils)
|
|
quota_image_repo = glance.quota.ImageRepoProxy(
|
|
store_image_repo, context, self.db_api, self.store_utils)
|
|
policy_image_repo = policy.ImageRepoProxy(
|
|
quota_image_repo, context, self.policy)
|
|
notifier_image_repo = glance.notifier.ImageRepoProxy(
|
|
policy_image_repo, context, self.notifier)
|
|
if property_utils.is_property_protection_enabled():
|
|
property_rules = property_utils.PropertyRules(self.policy)
|
|
pir = property_protections.ProtectedImageRepoProxy(
|
|
notifier_image_repo, context, property_rules)
|
|
authorized_image_repo = authorization.ImageRepoProxy(
|
|
pir, context)
|
|
else:
|
|
authorized_image_repo = authorization.ImageRepoProxy(
|
|
notifier_image_repo, context)
|
|
|
|
return authorized_image_repo
|
|
|
|
def get_task_factory(self, context):
|
|
task_factory = glance.domain.TaskFactory()
|
|
policy_task_factory = policy.TaskFactoryProxy(
|
|
task_factory, context, self.policy)
|
|
notifier_task_factory = glance.notifier.TaskFactoryProxy(
|
|
policy_task_factory, context, self.notifier)
|
|
authorized_task_factory = authorization.TaskFactoryProxy(
|
|
notifier_task_factory, context)
|
|
return authorized_task_factory
|
|
|
|
def get_task_repo(self, context):
|
|
task_repo = glance.db.TaskRepo(context, self.db_api)
|
|
policy_task_repo = policy.TaskRepoProxy(
|
|
task_repo, context, self.policy)
|
|
notifier_task_repo = glance.notifier.TaskRepoProxy(
|
|
policy_task_repo, context, self.notifier)
|
|
authorized_task_repo = authorization.TaskRepoProxy(
|
|
notifier_task_repo, context)
|
|
return authorized_task_repo
|
|
|
|
def get_task_stub_repo(self, context):
|
|
task_stub_repo = glance.db.TaskRepo(context, self.db_api)
|
|
policy_task_stub_repo = policy.TaskStubRepoProxy(
|
|
task_stub_repo, context, self.policy)
|
|
notifier_task_stub_repo = glance.notifier.TaskStubRepoProxy(
|
|
policy_task_stub_repo, context, self.notifier)
|
|
authorized_task_stub_repo = authorization.TaskStubRepoProxy(
|
|
notifier_task_stub_repo, context)
|
|
return authorized_task_stub_repo
|
|
|
|
def get_task_executor_factory(self, context):
|
|
task_repo = self.get_task_repo(context)
|
|
image_repo = self.get_repo(context)
|
|
image_factory = self.get_image_factory(context)
|
|
return glance.domain.TaskExecutorFactory(task_repo,
|
|
image_repo,
|
|
image_factory)
|
|
|
|
def get_metadef_namespace_factory(self, context):
|
|
ns_factory = glance.domain.MetadefNamespaceFactory()
|
|
policy_ns_factory = policy.MetadefNamespaceFactoryProxy(
|
|
ns_factory, context, self.policy)
|
|
authorized_ns_factory = authorization.MetadefNamespaceFactoryProxy(
|
|
policy_ns_factory, context)
|
|
return authorized_ns_factory
|
|
|
|
def get_metadef_namespace_repo(self, context):
|
|
ns_repo = glance.db.MetadefNamespaceRepo(context, self.db_api)
|
|
policy_ns_repo = policy.MetadefNamespaceRepoProxy(
|
|
ns_repo, context, self.policy)
|
|
authorized_ns_repo = authorization.MetadefNamespaceRepoProxy(
|
|
policy_ns_repo, context)
|
|
return authorized_ns_repo
|
|
|
|
def get_metadef_object_factory(self, context):
|
|
object_factory = glance.domain.MetadefObjectFactory()
|
|
policy_object_factory = policy.MetadefObjectFactoryProxy(
|
|
object_factory, context, self.policy)
|
|
authorized_object_factory = authorization.MetadefObjectFactoryProxy(
|
|
policy_object_factory, context)
|
|
return authorized_object_factory
|
|
|
|
def get_metadef_object_repo(self, context):
|
|
object_repo = glance.db.MetadefObjectRepo(context, self.db_api)
|
|
policy_object_repo = policy.MetadefObjectRepoProxy(
|
|
object_repo, context, self.policy)
|
|
authorized_object_repo = authorization.MetadefObjectRepoProxy(
|
|
policy_object_repo, context)
|
|
return authorized_object_repo
|
|
|
|
def get_metadef_resource_type_factory(self, context):
|
|
resource_type_factory = glance.domain.MetadefResourceTypeFactory()
|
|
policy_resource_type_factory = policy.MetadefResourceTypeFactoryProxy(
|
|
resource_type_factory, context, self.policy)
|
|
return authorization.MetadefResourceTypeFactoryProxy(
|
|
policy_resource_type_factory, context)
|
|
|
|
def get_metadef_resource_type_repo(self, context):
|
|
resource_type_repo = glance.db.MetadefResourceTypeRepo(
|
|
context, self.db_api)
|
|
policy_object_repo = policy.MetadefResourceTypeRepoProxy(
|
|
resource_type_repo, context, self.policy)
|
|
return authorization.MetadefResourceTypeRepoProxy(policy_object_repo,
|
|
context)
|
|
|
|
def get_metadef_property_factory(self, context):
|
|
prop_factory = glance.domain.MetadefPropertyFactory()
|
|
policy_prop_factory = policy.MetadefPropertyFactoryProxy(
|
|
prop_factory, context, self.policy)
|
|
authorized_prop_factory = authorization.MetadefPropertyFactoryProxy(
|
|
policy_prop_factory, context)
|
|
return authorized_prop_factory
|
|
|
|
def get_metadef_property_repo(self, context):
|
|
prop_repo = glance.db.MetadefPropertyRepo(context, self.db_api)
|
|
policy_prop_repo = policy.MetadefPropertyRepoProxy(
|
|
prop_repo, context, self.policy)
|
|
authorized_prop_repo = authorization.MetadefPropertyRepoProxy(
|
|
policy_prop_repo, context)
|
|
return authorized_prop_repo
|