106 lines
3.6 KiB
Python
106 lines
3.6 KiB
Python
# Copyright 2011-2012 OpenStack Foundation
|
|
# All Rights Reserved.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License"); you may
|
|
# not use this file except in compliance with the License. You may obtain
|
|
# a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
|
|
# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
|
|
# License for the specific language governing permissions and limitations
|
|
# under the License.
|
|
|
|
import uuid
|
|
|
|
from glance.api import policy
|
|
from glance.openstack.common import local
|
|
|
|
|
|
class RequestContext(object):
|
|
"""Stores information about the security context.
|
|
|
|
Stores how the user accesses the system, as well as additional request
|
|
information.
|
|
|
|
"""
|
|
|
|
user_idt_format = '{user} {tenant} {domain} {user_domain} {p_domain}'
|
|
|
|
def __init__(self, auth_token=None, user=None, tenant=None, roles=None,
|
|
is_admin=False, read_only=False, show_deleted=False,
|
|
owner_is_tenant=True, service_catalog=None,
|
|
policy_enforcer=None, domain=None, user_domain=None,
|
|
project_domain=None):
|
|
self.auth_token = auth_token
|
|
self.user = user
|
|
self.tenant = tenant
|
|
self.roles = roles or []
|
|
self.read_only = read_only
|
|
self._show_deleted = show_deleted
|
|
self.owner_is_tenant = owner_is_tenant
|
|
self.request_id = str(uuid.uuid4())
|
|
self.service_catalog = service_catalog
|
|
self.policy_enforcer = policy_enforcer or policy.Enforcer()
|
|
self.is_admin = is_admin
|
|
self.domain = domain
|
|
self.user_domain = user_domain
|
|
self.project_domain = project_domain
|
|
if not self.is_admin:
|
|
self.is_admin = self.policy_enforcer.check_is_admin(self)
|
|
|
|
if not hasattr(local.store, 'context'):
|
|
self.update_store()
|
|
|
|
def to_dict(self):
|
|
# NOTE(ameade): These keys are named to correspond with the default
|
|
# format string for logging the context in openstack common
|
|
|
|
user_idt = (
|
|
self.user_idt_format.format(user=self.user or '-',
|
|
tenant=self.tenant or '-',
|
|
domain=self.domain or '-',
|
|
user_domain=self.user_domain or '-',
|
|
p_domain=self.project_domain or '-'))
|
|
|
|
return {
|
|
'request_id': self.request_id,
|
|
|
|
# NOTE(bcwaldon): openstack-common logging expects 'user'
|
|
'user': self.user,
|
|
'user_id': self.user,
|
|
|
|
# NOTE(bcwaldon): openstack-common logging expects 'tenant'
|
|
'tenant': self.tenant,
|
|
'tenant_id': self.tenant,
|
|
'project_id': self.tenant,
|
|
|
|
'is_admin': self.is_admin,
|
|
'read_deleted': self.show_deleted,
|
|
'roles': self.roles,
|
|
'auth_token': self.auth_token,
|
|
'service_catalog': self.service_catalog,
|
|
'user_identity': user_idt
|
|
}
|
|
|
|
@classmethod
|
|
def from_dict(cls, values):
|
|
return cls(**values)
|
|
|
|
def update_store(self):
|
|
local.store.context = self
|
|
|
|
@property
|
|
def owner(self):
|
|
"""Return the owner to correlate with an image."""
|
|
return self.tenant if self.owner_is_tenant else self.user
|
|
|
|
@property
|
|
def show_deleted(self):
|
|
"""Admins can see deleted by default"""
|
|
if self._show_deleted or self.is_admin:
|
|
return True
|
|
return False
|