OwlCyberSecurity - MANAGER
Edit File: principal.pyc
� �mec @ s� d Z d d d d d d g Z d d l m Z m Z d d l m Z d d l Z d d l m Z d d l m Z d d l m Z m Z d d l m Z d d l m Z d d l m Z m Z m Z d d l m Z m Z d d l m Z m Z d d l m Z d d l m Z d d l m Z d d l! m" Z" d d l# m$ Z$ d d l# m% Z% m& Z& m' Z' m( Z( d d l) m* Z* d d l+ m, Z, m- Z- m. Z. d d l+ m/ Z/ d d l0 m1 Z1 m2 Z2 d d l3 m4 Z4 d d l5 m6 Z6 d d l7 m8 Z9 d d l: m; Z; d d! l< m= Z= d d" l> m? Z? d d# l@ mA ZA d d$ lB mC ZC d d% lD mE ZE d d& lF mG ZG mH ZH y d d' lI mJ ZJ eJ Wn eK k r�eL ZJ n Xe eM � ZN e � ZO d( e, f d) � � YZP d* � ZQ d+ � ZR d eP e1 f d, � � YZS d eS f d- � � YZT d eS f d. � � YZU d eS f d/ � � YZV d0 e f d1 � � YZW d2 e/ f d3 � � YZX d4 eW f d5 � � YZY d6 eX f d7 � � YZZ d e eP e- f d8 � � YZ[ d e[ e2 f d9 � � YZ\ e9 j] e9 j^ e9 j_ e9 j` � � e9 ja e9 jb e9 jc � � � e9 jd � � � Ze d S(: s4 Implements a directory-backed principal hierarchy. t DirectoryProvisioningResourcet& DirectoryPrincipalProvisioningResourcet* DirectoryPrincipalTypeProvisioningResourcet) DirectoryPrincipalUIDProvisioningResourcet DirectoryPrincipalResourcet" DirectoryCalendarPrincipalResourcei����( t quotet unquote( t urlparseN( t Logger( t UsernamePassword( t inlineCallbackst returnValue( t succeed( t getModule( t XMLFilet Elementt renderer( t caldavxmlt customxml( t DisabledCacheNotifiert PropfindCacheMixin( t config( t calendarserver_namespace( t allowedAutoScheduleModes( t uidsResourceName( t NotFoundResource( t formatLinkt formatLinkst formatPrincipalst formatList( t getWikiACL( t ReadOnlyResourceMixInt DAVPrincipalResourcet DAVResourceWithChildrenMixin( t DirectoryElement( t# CalendarPrincipalCollectionResourcet CalendarPrincipalResource( t normalizeCUAddr( t CalendarDirectoryRecordMixin( t element( t responsecode( t DigestedCredentials( t TLSCredentials( t UnauthorizedResponse( t NonePropertyStore( t joinURL( t HTTPErrort RedirectResponse( t NegotiateCredentialst PermissionsMixInc B s) e Z d � Z e e e d d � � Z RS( c C s t t � S( N( R t authReadACL( t self( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt defaultAccessControlListP s c c su y t | | � V} Wn t k r- d } n X| d k r` t j d d | j � �t | � n t | j � V� d S( Ns Wiki ACL: {acl}t acl( R R/ t Nonet logt debugt toxmlR R5 ( R4 t requestt inheritancet expandingt inherited_acest wikiACL( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt accessControlListS s N( t __name__t __module__R5 R t Truet FalseR7 R@ ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR2 N s c C s d t j | � f S( s/ Converts calendar user types to OD type names t recordType( R' t fromCUType( t cuType( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt cuTypeConverterl s c C s� t | � } | j d � r) d | d f S| j d � rO d t j | d � f S| j d � rl d | d f S| j d � s� | j d � r� | j d d � \ } } } | d k r� d | f Sd | f Sn t d | f � � d S( s8 Converts calendar user addresses to OD-compatible form s urn:x-uid:t uidi s urn:uuid:t guidi s mailto:t emailAddressesi t /t httpi t __uids__t recordNames( Invalid calendar user address format: %sN( R& t startswitht uuidt UUIDt rsplitt ValueError( t origCUAddrt cuat ignoredt collectiont id( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt cuAddressConverterr s c B s- e Z d � Z d � Z e d � � Z d � Z d � Z e d � � Z d � Z e d � � Z d � Z d � Z d � Z d Z i d d d e j f d 6d e d e j f d 6d e d e j f d 6d d d e j f e d f 6Z g e e j � d d � �D] \ Z Z e ^ qZ d � Z d � Z RS(! c C sE | j d � s t d � � t j | | � t j | � | | _ d S( s� @param url: the canonical URL for the resource. @param directory: an L{IDirectoryService} to provision principals from. RL s Collection URL must end in '/'N( t endswitht AssertionErrorR$ t __init__R" t directory( R4 t urlR^ ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR] � s c C s d | j j | j | j f S( Ns <%s: %s %s>( t __class__RA R^ t _url( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt __repr__� s c c sZ | j | d � V} | d k r7 t | | d f � n t t d | j � � d f � d S( Ni i t principalCollections( ( t getChildR7 R R Rc ( R4 t reqt segmentst child( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt locateChild� s c C s( t | d � s! t | � | _ n | j S( Nt _dead_properties( t hasattrR- Ri ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt deadProperties� s c C s t d � S( N( R R7 ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt etag� s c c s. | j j | | � V} t | j | � V� d S( N( R^ t recordWithShortNameR t principalForRecord( R4 RE t namet record( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt principalForShortName� s c C s~ t j d | � | j d d � } d } t | � d k rH | d } n | } t j d | � | j | j j j d � | � S( Ns Getting principal for user RL i t i s True user: t user( R8 R9 t splitt lenRq R^ RE t lookupByName( R4 Rs t explodedt true_user( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt principalForUser� s c c s� t | t � s t | t � r8 t | j | j � V� n� t d k r� t | t � r� d | j f } | j | j j | � V� V} | r� t | � q� | j r� t | j | j � V� q� n) t | t � r� t | j | j � V� n t d � d S( Ns Kerberos:%s( t isinstanceR R* R Ry t usernameR1 R7 t principalRn R^ t recordWithAuthIDR+ ( R4 Rs t authIDR| ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt principalForAuthID� s c C s t d � � d S( Ns) Subclass must implement principalForUID()( t NotImplementedError( R4 RI ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt principalForUID� s c C s t d � � d S( Ns9 Subclass must implement principalForCalendarUserAddress()( R� ( R4 t address( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt principalForCalendarUserAddress� s c C s0 | d k s | j r t d � S| j | j � S( N( R7 t enabledR R� RI ( R4 Rp ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRn � s s http://calendarserver.org/ns/t fullNamess Display Names DAV:t displaynameRr s Calendar User Types urn:ietf:params:xml:ns:caldavs calendar-user-types Calendar User Address Sets calendar-user-address-setRK s Email Addressess email-address-sett keyc C s | d S( Ni ( ( t x( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt <lambda>� Rr c C sb | j j | j � d � \ } } } } | d k r7 d S| d k rX | | � \ } } n | | f S( s� If property is a DAV property that maps to a directory field, return that field's name, otherwise return None N( NNNN( NN( t _fieldMapt gett qnameR7 ( R4 t propertyt matcht fieldt convertert _ignore_descriptiont _ignore_xmlClass( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt propertyToField� s c C st g } x^ | j D]S \ } } } } | j t j t j | � � t j t j | � i d d 6� � � q Wt j | � S( Nt ens xml:lang( t _fieldListt appendt davxmlt PrincipalSearchPropertyt PropertyContainert Descriptiont PCDATAElementt PrincipalSearchPropertySet( R4 t propst _ignore_fieldt _ignore_convertert descriptiont xmlClass( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt principalSearchPropertySet s N( s DAV:R� ( s urn:ietf:params:xml:ns:caldavs calendar-user-type( s urn:ietf:params:xml:ns:caldavs calendar-user-address-set(! RA RB R] Rb R Rh Rk Rl Rq Ry R R� R� Rn t _cs_nsR7 R� t DisplayNameRH R t CalendarUserTypeRZ t CalendarUserAddressSetR t EmailAddressSetR� t sortedt iteritemst _ignore_kt vR� R� R� ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s( 4 c B sw e Z d Z d � Z e d � � Z e d � � Z e d � � Z e d � � Z d � Z d � Z d � Z d � Z RS( sT Collection resource which provisions directory principals as its children. c C s t j | | | � | j j | � d | _ d | _ | j j j | j j j | j j j | j j j | j j j g | _ t j j j r� | j j | j j j � n xX g | j D] } | j j | � | f ^ q� D]( \ } } | j | t | | | � � q� W| j t t | � � d S( N( R R] R^ t setPrincipalCollectionR7 t calendarCollectiont addressBookCollectionRE Rs t groupt locationt resourceR� t supportedChildTypesR t Authenticationt Wikit EnabledR� t macOSXServerWikit recordTypeToOldNamet putChildR R R ( R4 R_ R^ t rRo RE ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR] s( 5c c s( | j t � V} t | j | � V� d S( N( Rd R R ( R4 RI Rg ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� A s c c s< t | � \ } } } } } } | d k r- n+| d k r | j d d � d } | j d d � } | d } t | � d k s� | d d k r� d } n t | d � } | t j k r� | t j j j k r� t d � n | i t j d 6t j d 6| k rXt d � qXnM | d k rN| j d � rAt | j | d � V� qXt d � n t d � | j | j � swt d � n | t | j � d } g | j d � j d � D] } t | � ^ q�} | d d k r.t | � d k r.| j | d � V} | d k r.| j | d � V} | r+t | � q+q.n t d � d S( NRr RM t httpst @i i����t :i iP t urns uuid:i RL i i ( RM R� ( R Rt Ru t intR t ServerHostNamet Schedulingt Optionst PrincipalHostAliasesR R7 t HTTPPortt SSLPortRP R� Ra t rstripR Rd ( R4 t urit schemet netloct patht _ignore_paramst _ignore_queryt _ignore_fragmentt hostt portt sRf t typeResourcet principalResource( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt _principalForURIF sD " 1" c c s� | j | � V} | rA t | t � r� | j j r� t | � q� n? | j j | � V} | d k r� | j r� t | j | � V� n t j d d | �t d � d S( Ns. No principal for calendar user address: {addr}t addr( R� Rz R Rp t hasCalendarsR R^ t recordWithCalendarUserAddressR7 Rn R8 R9 ( R4 R� R| Rp ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� } s c c s( | j t � V} t | j | � V� d S( N( Rd R R Rn ( R4 Rp Rg ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRn � s c C s, t j d d | d | �t t j � � d S( Ns3 Attempt to create clone {path} of resource {rsrc!r}R� t rsrc( R8 t errorR/ R) t NOT_FOUND( R4 R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt createSimilarFile� s c C s3 | d k r t | � St | j j | d � � Sd S( NRr ( R t putChildrenR� R7 ( R4 Ro ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRd � s c C s& g | j D] } | j j | � ^ q S( N( R� R^ R� ( R4 R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt listChildren� s c C s | f S( N( ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRc � s ( RA RB t __doc__R] R R� R� R� Rn R� Rd R� Rc ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR s &7 c B s\ e Z d Z d � Z d � Z d � Z d � Z d � Z d � Z e d � � Z d � Z RS( s� Collection resource which provisions directory principals of a specific type as its children, indexed by short name. c C s? t j | t | j � | � d | j � | | _ | | _ d S( s� @param parent: the parent L{DirectoryPrincipalProvisioningResource}. @param recordType: the directory record type to provision. RL N( R R] R. t principalCollectionURLR^ RE t parent( R4 R� Ro RE ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR] � s c C s | j j | � S( N( R� R� ( R4 RI ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� � s c C s | j j | � S( N( R� R� ( R4 R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� � s c C s | j j | � S( N( R� Rn ( R4 Rp ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRn � s c C s, t j d d | d | �t t j � � d S( Ns3 Attempt to create clone {path} of resource {rsrc!r}R� R� ( R8 R� R/ R) R� ( R4 R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� � s c C s- | d k r t | � S| j | j | � Sd S( NRr ( R Rq RE ( R4 Ro ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRd � s c c s� g } t j r� yO xH | j j | j � VD]0 } x' t | d g � D] } | j | � qB Wq) WWn* t k r� t j d d | j j �n Xt | � n t t j � � d S( Nt shortNamess( Cannot list children of record type {rt}t rt( R t EnablePrincipalListingsR^ t recordsWithRecordTypeRE t getattrR� t AttributeErrorR8 t warnRo R R/ R) t FORBIDDEN( R4 t childrenRp t shortName( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� � s c C s | j j � S( N( R� Rc ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRc � s ( RA RB R� R] R� R� Rn R� Rd R R� Rc ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c B s\ e Z d Z d � Z d � Z d � Z d � Z d � Z e d � � Z d � Z d � Z RS( sW Collection resource which provisions directory principals indexed by UID. c C s6 t j | t | j � t � d | j � | | _ d S( s� @param directory: an L{IDirectoryService} to provision calendars from. @param recordType: the directory record type to provision. RL N( R R] R. R� R R^ R� ( R4 R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR] � s c C s | j j | � S( N( R� R� ( R4 RI ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� s c C s | j j | � S( N( R� R� ( R4 R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� s c C sS | d k r t d � S| j s( | j r: t | | � } n t | | � } t | � S( N( R7 R R� t hasContactsR R ( R4 Rp R| ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRn s c C s, t j d d | d | �t t j � � d S( Ns3 Attempt to create clone {path} of resource {rsrc!r}R� R� ( R8 R� R/ R) R� ( R4 R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� " s c c s� | d k r t | � n d | k r= | j d � \ } } n | } d } | j j | � V} | j | � V} | d k r� t j d d | �t d � n | d k r� t | � n t | j | � V� d S( NRr t #s" No principal found for UID: {name}Ro ( R Rt R7 R^ t recordWithUIDRn R8 t infoRd ( R4 Ro t primaryUIDt subTypeRp t primaryPrincipal( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRd & s c C s t t j � � d S( N( R/ R) R� ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� = s c C s | j j � S( N( R� Rc ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRc E s ( RA RB R� R] R� R� Rn R� R Rd R� Rc ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s t DirectoryPrincipalDetailElementc B sz e Z d Z e e j j d � � Z d � Z e d � � Z e d � � Z e d � � Z e d � � Z e d � � Z RS( sa Element that can render the details of a L{CalendarUserDirectoryPrincipalResource}. s! directory-principal-resource.htmlc C s t t | � j � | | _ d S( N( t superR� R] R� ( R4 R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR] S s c C s8 t j j s d S| j j } | j d t | j � � � S( s8 Renderer for when servers are enabled. Rr t hostedAt( R t ServersR� R� Rp t fillSlotst strt serverURI( R4 R; t tagRp ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt serversEnabledW s c C s� | j j } y: t | j t j � r< t | j � j � } n | j } Wn t k r_ d } n Xy | j } Wn t k r� g } n Xy | j } Wn t k r� g } n X| j d t | j j � d | j j j d � d | d | j j | j � d d j g | D] } | j d � ^ q� d | j j d � d t | � d t | j j � � d t | j j � � d t | j j � � d | j j � j t � d | j j � j t � d | j j t � j t � d | j j t � j t � � S( s5 Top-level renderer in the template. Rr t directoryGUIDt realms utf-8t principalGUIDRE R� t ,t fullNameRK t principalUIDt principalURLt alternateURIst groupMemberst groupMembershipst readWriteProxyFort readOnlyProxyFor( R� Rp Rz RJ RQ RR R� t upperR� RK R� R� t servicet realmNamet encodeR� RE t joint displayNameR R� R R� R R R t addCallbackR R t proxyForRC RD ( R4 R; R� Rp RJ RK R� t n( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR| c sD + c C s d S( s1 No-op; implemented in subclass. Rr ( ( R4 R; R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt extra� s c C s d S( s1 No-op; implemented in subclass. Rr ( ( R4 R; R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt enabledForCalendaring� s c C s d S( s1 No-op; implemented in subclass. Rr ( ( R4 R; R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt enabledForAddressBooks� s ( RA RB R� R t thisModulet filePatht siblingt loaderR] R R� R| R R R ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� I s .t DirectoryPrincipalElementc B s e Z d Z e d � � Z RS( sK L{DirectoryPrincipalElement} is a renderer for directory details. c C s t | j � S( s; Render the directory principal's details. ( R� R� ( R4 R; R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt resourceDetail� s ( RA RB R� R R ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s t' DirectoryCalendarPrincipalDetailElementc B s5 e Z e d � � Z e d � � Z e d � � Z RS( c C s | S( sf Renderer for extra directory body items for calendar/addressbook principals. ( ( R4 R; R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c C sS | j } | j } | j rO | j d t t | j � � � d t | j � � � Sd S( sl Renderer which returns its tag when the wrapped record is enabled for calendaring. t calendarUserAddressest calendarHomesRr ( R� Rp R� R� R R� R t calendarHomeURLs( R4 R; R� R� Rp ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c C s; | j } | j } | j r7 | j d t | j � � � Sd S( sn Renderer which returnst its tag when the wrapped record is enabled for addressbooks. t addressBookHomesRr ( R� Rp R� R� R t addressBookHomeURLs( R4 R; R� R� Rp ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s ( RA RB R R R R ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s t! DirectoryCalendarPrincipalElementc B s e Z d Z e d � � Z RS( sk L{DirectoryPrincipalElement} is a renderer for directory details, with calendaring additions. c C s t | j � S( sD Render the directory calendar principal's details. ( R R� ( R4 R; R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s ( RA RB R� R R ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c B s� e Z d Z d � Z e Z d � Z d � Z d � Z d � Z d � Z d � Z e d � � Z d � Z d � Z d � Z d � Z e d � � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z e e d � � Z e d- d- d- d- e d � � Z d � Z d � Z! e e d � � Z" d � Z# d � Z$ d � Z% d � Z& d � Z' d � Z( d! � Z) d- d" � Z* e d# � � Z+ d- d$ � Z, e d% � � Z- d& � Z. d' � Z/ d( � Z0 d) � Z1 e d* � � Z2 d+ � Z3 d, � Z4 RS(. s' Directory principal resource. c C s, t t | � j � t d f t j j � f S( Ns email-address-set( R� R t livePropertiesR R� t ResourceIDR� ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c C s t t | � j � | j | d d �| _ | j � r@ d } n d } | d k s^ t d � � | | _ | | _ t | j � | j � � | } | | _ t g t | d g � D]C } t | j j � | j j | j � t | j d � � � | ^ q� � | _ d S( s� @param parent: the parent of this resource. @param record: the L{IDirectoryRecord} that this resource represents. t cacheHandlet PrincipalTokenRL Rr s& Principal must have a directory recordR� s utf-8N( R� R R] t cacheNotifierFactoryt cacheNotifiert isCollectionR7 R\ Rp R� R. R� R� Ra t tupleR� R R� RE R R t _alternate_urls( R4 R� Rp t slashR_ R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR] � s c C s d j | j j t | � � S( Ns <{}: {}>( t formatR` RA R� ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRb s c C s d j | j j | j j � S( Ns ({}){}( R( Rp RE RI ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt __str__ s c C s- t | t � r% | j � | j � k St Sd S( sN Principals are the same if their principalURLs are the same. N( Rz R R� RD ( R4 t other( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt __eq__ s c C s | j | � S( N( R+ ( R4 R* ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt __ne__) s c C s t | j � � S( N( t hashR� ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt __hash__, s c c s t | � t k r | } n | j � } | \ } } | t j j � k rw t t j t j j d | j j f � � � n} | t k r� | d k r� y | j j } Wn t k r� g } n Xt t j g t | � D] } t j | � ^ q� � � q� n t t | � j | | � V} t | � d S( Ns urn:x-uid:%ss email-address-set( t typeR% R� R� R R t HReft fromStringRp RI R RK R� R R� R� t EmailAddressPropertyR� R t readProperty( R4 R� R; R� t namespaceRo t emailsR� t result( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR3 / s / 2 c C s( t | d � s! t | � | _ n | j S( NRi ( Rj R- Ri ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRk H s c C s t d � S( N( R R7 ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRl M s c C s t | � S( sD Customize HTML rendering for directory principals. ( R ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt htmlElementT s c C s t S( N( RC ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR$ ^ s c c s� y | j | � V\ } } Wn t k r3 d } n X| d k rf t j | j | j � V} t | � n; t | j d t t | j � d d �d � � } t | � d S( NR� t safes :/RL ( t authenticatet ExceptionR7 R, t makeResponset credentialFactoriest remoteAddrR R0 t unparseURLR R R� ( R4 R; t _ignore_authnUsert authzUsert response( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt handleMissingTrailingSlasha s c C s | j j S( N( Rp R ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR y s c C s d d l m } | S( s� Return the SQL database for calendar user proxies. @return: the L{ProxyDB} for the principal collection. i����( t ProxyDBService( t) twistedcaldav.directory.calendaruserproxyRC ( R4 RC ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt _calendar_user_proxy_index� s c C s | j S( N( R& ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c C s | j S( N( Ra ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� � s c C s | j � S( N( R� ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR_ � s c C s | j � S( N( R� ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt notifierID� s c C s | j j | j � S( s Determine whether this principal is a read-only or read-write proxy for the specified principal. @param principal: principal resource for the possible user proxying to this principal @type principal: L{DirectoryPrincipalResource} ( Rp t isProxyFor( R4 R| ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRG � s c C s | j j | j � S( s� Determine whether proxy mode this principal has in relation to the one specified. @param principal: principal resource for the possible user proxying to this principal @type principal: L{DirectoryPrincipalResource} ( Rp t proxyMode( R4 R| ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRH � s c c sy t � } t j rk | j j | | � V} x@ | D]5 } | j j | � V} | d k r/ | j | � q/ q/ Wn t | � d S( sZ Returns the set of principals currently delegating to this principal with the access indicated by the readWrite argument. If readWrite is True, then write-access delegators are returned, otherwise the read- only-access delegators are returned. @param readWrite: Whether to look up read-write delegators, or read-only delegators @type readWrite: L{bool} @param ignoreDisabled: If L{True} disabled delegators are not returned @type ignoreDisabled: L{bool} @return: A Deferred firing with a set of principals N( t setR t EnableProxyPrincipalsRp R R� Rn R7 t addR ( R4 t readWritet ignoreDisabledt proxyForst proxyForRecordsRp R| ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c c s? | d k r | j } n | d k r0 t � } n | d k rH t � } n | | k r1| j | � x� t | | � � VD]� } | | k ru | j j | � V} | d k r� t j d d | �nE | r� | d k r� | j d � V} q� | j d � V} n | j | � | r*| j | | | | d | �Vq*qu qu Wn t | � d S( Ns0 No principal found for directory record: {rec!r}t recs read-writes calendar-proxy-writes calendar-proxy-readt infinity( R7 Rp RI RK R� R� Rn R8 R� Rd t _getRelativesR ( R4 t methodRp t relativest recordst proxyRQ t relativet found( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRR � s. c C s | j d � S( Nt members( RR ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c C s | j d d t �S( NRY RQ ( RR RC ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt expandedGroupMembers� s c c s� | j d d | �V} t j r� x| t d f t d f f D]_ \ } } | j | � V} x@ | D]8 } | j j d j | j j | � � V} | j | � q[ Wq8 Wn t | � d S( Nt groupsRQ s calendar-proxy-writes calendar-proxy-reads {}#{}( RR R RJ RC RD R R� R� R( Rp RI RK R ( R4 RQ R[ RL t proxyTypeRN R t subPrincipal( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c C s | j d t � S( NRQ ( R RC ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt expandedGroupMemberships� s c C s | j j � S( s� A callback indicating the directory group membership for this principal has changed. Update the cache token for this principal so the PROPFIND response cache is invalidated. ( R# t changed( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt groupsChanged s c C s | j j � S( N( R� Rc ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRc s c C s | j j S( N( Rp RI ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� s c C s | j j � S( N( Rp R� ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� s c C s | j j � S( N( Rp t server( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRa s c C s | j j � S( N( Rp t thisServer( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRb s c C s | j j | � S( s Determine the auto-schedule state based on record state, type and config settings. @param organizer: the CUA of the organizer trying to schedule this principal @type organizer: C{str} @return: C{Deferred} firing a C{bool} ( Rp t canAutoSchedule( R4 t organizer( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRc s c c sm | t k r | n d | j _ | j j j j | j j | j j � V} | | _ | j j j j | g � Vd S( Nt default( R Rp t autoScheduleModeR t augmentServicet getAugmentRecordRJ RE t addAugmentRecords( R4 Rf t augmentRecord( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt setAutoScheduleMode# s ( c C s | j j | � S( su Return the auto schedule mode value for the principal. If the optional organizer is provided, and that organizer is a member of the principal's auto-accept group, return "automatic" instead; this allows specifying a priliveged group whose scheduling requests are automatically accepted or declined, regardless of whether the principal is normally managed by a delegate. @param organizer: the CUA of the organizer scheduling this principal @type organizer: C{str} @return: auto schedule mode @rtype: C{Deferred} firing L{AutoScheduleMode} ( Rp t getAutoScheduleMode( R4 Rd ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRl * s c c s[ | | j _ | j j j j | j j | j j � V} | | _ | j j j j | g � Vd S( s Sets the group whose members can automatically schedule with this principal even if this principal's auto-schedule is False (assuming no conflicts). @param autoAcceptGroup: GUID of the group @type autoAcceptGroup: C{str} N( Rp t autoAcceptGroupR Rg Rh RJ RE Ri ( R4 Rm Rj ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt setAutoAcceptGroup: s ( c C s | j j S( s Returns the GUID of the auto accept group assigned to this principal, or empty string if not assigned ( Rp Rm ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt getAutoAcceptGroupH s c C s | j j � S( sP Is the organizer a member of this principal's autoAcceptGroup? @param organizer: CUA of the organizer @type organizer: C{str} @return: True if the autoAcceptGroup is assigned, and the organizer is a member of that group. False otherwise. @rtype: C{Deferred} firing C{bool} ( Rp t autoAcceptFromOrganizer( R4 Rd ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRp O s c C s | j j � S( N( Rp t getCUType( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRq [ s c C s, t j d d | d | �t t j � � d S( Ns3 Attempt to create clone {path} of resource {rsrc!r}R� R� ( R8 R� R/ R) R� ( R4 R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� b s c c sK | j | d � V} | d k r7 t | | d f � n t d d f � d S( Ni i ( ( Rd R7 R ( R4 Re Rf Rg ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRh f s c C s | d k r t | � St d � S( NRr ( R R7 ( R4 Ro ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRd m s c C s d S( N( ( ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� s s N(5 RA RB R� R R R" R] Rb R) R+ R, R. R R3 Rk Rl R7 R$ RB R RE R R� R_ RF RG RH RC R R7 RD RR R RZ R R^ R` Rc R� R� Ra Rb Rc Rk Rl Rn Ro Rp Rq R� Rh Rd R� ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � sb c B s� e Z d Z d � Z d � Z d � Z e d � � Z d � Z d � Z d � Z d � Z e d � � Z e d � � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z d � Z RS( s0 Directory calendar principal resource. c C s t j | � t j | � S( N( R R R% ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR } s c C s | j j � S( N( Rp t calendarsEnabled( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRr � s c C s t j o | j j S( N( R t EnableCardDAVRp R� ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt addressBooksEnabled� s c c sC t j | | | � V} | s5 t j | | | � V} n t | � d S( N( R R3 R% R ( R4 R� R; R6 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR3 � s c C s | j j S( N( Rp R ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c C s t | � S( sD Customize HTML generation for calendar principals. ( R ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR7 � s c C s | j j � S( s1 Return a CUA for this principal ( Rp t canonicalCalendarUserAddress( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRu � s c C s | j j � S( N( Rp t enabledAsOrganizer( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRv � s c c s` | j | � V} | d k r) t d � n | j d � V} | d k rR t d � n t | � d S( Nt inbox( t calendarHomeR7 R Rd ( R4 R; t homeRw ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt scheduleInbox� s c c sR d } t j j rD | j | � V} | d k rD | j d � V} qD n t | � d S( Nt notification( R7 R t SharingR� Rx Rd R ( R4 R; R{ Ry ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt notificationCollection� s c C s5 | j j r | j d � } n d } | r1 | f Sd S( NRr ( ( Rp R� t _homeChildURLR7 ( R4 t homeURL( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c C s | j d � S( Ns inbox/( R~ ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt scheduleInboxURL� s c C s | j d � S( Ns outbox/( R~ ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt scheduleOutboxURL� s c C s' t j s t j r | j d � Sd Sd S( Ns dropbox/( R t EnableDropBoxt EnableManagedAttachmentsR~ R7 ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt dropboxURL� s c C s! t j j r | j d � Sd Sd S( Ns notification/( R R| R� R~ R7 ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt notificationURL� s c C s5 | j j r | j d � } n d } | r1 | f Sd S( NRr ( ( Rp R� t _addressBookHomeChildURLR7 ( R4 R ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR � s c C s� t | d � s� | j j j d k r( d St | j j j j � t | j j � d | _ | j � s� t | j � | j � | _ q� n | j } | d k r� d S| r� t | | � S| Sd S( Nt calendarHomeURLRL ( Rj R� R� R7 R. R_ R Rp RI R� Rb R� ( R4 Ro R_ ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR~ � s ! c C s? | j j j d k r1 | j j j j | j | � St d � Sd S( N( R� R� R7 t homeForDirectoryRecordRp R ( R4 R; ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRx � s c C s� t | d � s� | j j j d k r( d St | j j j j � t | j j � d | _ | j � s� t | j � | j � | _ q� n | j } | d k r� d S| r� t | | � S| Sd S( Nt addressBookHomeURLRL ( Rj R� R� R7 R. R_ R Rp RI R� Rb R� ( R4 Ro R_ ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� � s ! c C s? | j j j d k r1 | j j j j | j | � St d � Sd S( N( R� R� R7 R� Rp R ( R4 R; ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt addressBookHome s c C sb | d k r t | � St j rT | d k rT d d l m } t | | t | � � � St d � Sd S( NRr s calendar-proxy-reads calendar-proxy-writes calendar-proxy-read-fors calendar-proxy-write-fori����( t" CalendarUserProxyPrincipalResource( s calendar-proxy-reads calendar-proxy-writes calendar-proxy-read-fors calendar-proxy-write-for( R R RJ RD R� R� R7 ( R4 Ro R� ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyRd s c C s t j r d Sd Sd S( Ns calendar-proxy-reads calendar-proxy-write( s calendar-proxy-reads calendar-proxy-write( ( R RJ ( R4 ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR� " s ( RA RB R� R Rr Rt R R3 R R7 Ru Rv Rz R} R R� R� R� R� R R~ Rx R� R� Rd R� ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyR w s. (f R� t __all__t urllibR R R RQ t twext.python.logR t twisted.cred.credentialsR t twisted.internet.deferR R R t twisted.python.modulesR t twisted.web.templateR R R t twistedcaldavR R t twistedcaldav.cacheR R t twistedcaldav.configR t twistedcaldav.customxmlR t twistedcaldav.directory.augmentR t twistedcaldav.directory.commonR t twistedcaldav.directory.utilR R R R R t txdav.who.wikiR t twistedcaldav.extensionsR R! R" R# t twistedcaldav.resourceR$ R% t' txdav.caldav.datastore.scheduling.utilsR& t txdav.who.directoryR' t txdav.xmlR( R� t txweb2R) t txweb2.auth.digestR* t txweb2.auth.tlsR+ t txweb2.auth.wrapperR, t txweb2.dav.nonepropsR- t txweb2.dav.utilR. t txweb2.httpR/ R0 t twistedcaldav.authkerbR1 t ImportErrorR7 RA R R8 R2 RH RZ R R R R R� R R R R R t ACLt ACEt Principalt Authenticatedt Grantt Privileget Readt ProtectedR3 ( ( ( s4 /opt/cpanel-ccs/twistedcaldav/directory/principal.pyt <module> s� " ��HP^ *� ��