OwlCyberSecurity - MANAGER
Edit File: root.pyc
� �t�ac @ s� d g Z y d d l m Z Wn e k r9 d � Z n Xd d l m Z d d l m Z m Z d d l m Z m Z m Z d d l m Z d d l m Z d d l m Z d d l m Z m Z d d l m Z d d l m Z d d l m Z d d l m Z m Z d d l m Z d d l m Z d d l m! Z! d d l" m# Z# d d l$ m% Z& d d l$ m' Z' d d l( m) Z) d d l* m+ Z+ d d l, m- Z- d d l. m/ Z/ m0 Z0 m1 Z1 e � Z2 d e e e! e f d � � YZ3 d S( t RootResourcei����( t checkSACLc G s t S( N( t True( t ignored( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyt <lambda> t ( t Logger( t LoginFailedt UnauthorizedLogin( t inlineCallbackst returnValuet succeed( t namedClass( t Error( t DisabledCache( t MemcacheResponseCachet MemcacheChangeNotifier( t _CachedResponseResource( t config( t DirectoryPrincipalResource( t DAVFilet CachingPropertyStore( t% DirectoryPrincipalPropertySearchMixIn( t ReadOnlyResourceMixIn( t CalDAVComplianceMixIn( t CachingDelegates( t DirectoryService( t uidForAuthToken( t responsecode( t UnauthorizedResponse( t xattrPropertyStore( t HTTPErrort StatusResponset RedirectResponsec B s� e Z d Z e Z i d d 6d d 6d d 6d d 6d d 6Z i e d 6Z d � Z d � Z d � Z e d � � Z e d � � Z e d � � Z d � Z d � Z d � Z RS( sm A special root resource that contains support checking SACLs as well as adding responseFilters. t addressbookt addressbookst calendart calendarst directoryt principalst webcalc O s� t t | � j | | | � t j r1 t | _ n g | _ t j r� t j j j j r� t | j � | _ t t _ t d d d �t _ n t � | _ t j r� d d l m } | j j | j t f � n d S( Nt cacheHandlet PrincipalTokeni����( t gzip( t superR t __init__R t EnableSACLsR t useSaclst contentFilterst EnableResponseCachet Memcachedt Poolst Defaultt ClientEnabledR t fpt responseCacheR R t cacheNotifierFactoryt NoneR t cacheNotifierR t ResponseCompressiont txweb2.filterR+ t appendt gzipfilter( t selft patht argst kwargsR+ ( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyR- Q s c C sU t | d � sN t t j � | � } t | t � rB t | � } n | | _ n | j S( Nt _dead_properties( t hasattrR R t RootResourcePropStoreClasst isinstanceR R RC ( R? t deadProperties( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyRG j s c C s t t j � S( N( R R t RootResourceACL( R? ( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyt defaultAccessControlListy s c c s� | j j d � j d � d } | j j | d � } | sG t t � n y | j | � V\ } } Wn6 t k r� t j | j | j � V} t | � � n X| d k rx* | D]" } t d | � r� t t � q� q� Wt j | j | j � V} t j d � t | � � n | | _ | | _ | j j d } t } x' | D] } t | | � r7t } Pq7q7Wt | _ | rvt t � n t j d d | d | �t t j � � d S( s9 Check SACLs against the current request t /i R s$ Unauthenticated user denied by SACLss6 User {user!r} is not enabled with the {sacl!r} SACL(s)t usert saclN( R@ t stript splitt saclMapt getR9 R R t authenticatet ExceptionR t makeResponset credentialFactoriest remoteAddrR R t logt infot authnUsert authzUsert recordt shortNamest Falset checkedSACLt warnR t FORBIDDEN( R? t requestt topLevelt saclServicesRX RY t responset saclServicet usernamet access( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyR | sF c c s� x, | j D]! } | j | d d | d �q Wt } | j j d � j d � d } | j j | t � rr t } n t | d � sft | _ t j j } | j j d � } | j j d � } | d rf| s� | rf| d k rfx4 | D]& } | j | d k r� | j } Pq� q� Wd } | d k rc| d k rct j d d | �y- t | | d � V} | d k rjd } n Wn� t k r�} d } t | j � t j k r�t j d d | �q�t j d d | d | j �n, t k r�} t j d d | �d } n X| d k r`t j d d | �| j | | � V} | r]t j d d | �| | _ | _! q]q`qcqfn t | d � rut j" ru| j j d � j d � d } | j j | t � ru| j j# d t j$ g � d j d � d j � } t j% s�t j& r�d n d } t j% rd n d } t' | j( d | d | d | d! t j" d" d# j) | | | j � � d$ t �} t* | � � qun | d d9 k r�t | _+ nt, | � d' k r�| d d: k r�| d d* k s�| d d+ k r�| d' j- t. j/ � r�t | _+ t | d � r�| d' r�d } | d d* k r>d, j) t. j/ | d' � } n | d' } | r}t j d- d. | �| j | | � V| _ q}q�n* | j0 r�t | d/ � r�| j1 | � Vn t j2 r7| j j d0 � } | d k r7x` t j2 D]R } | j3 | � d k r�t j4 d1 d2 | �t* t5 t j6 d3 j) | � � � � q�q�Wq7n t | d4 � s�y, | j7 | � V\ } } | | _! | | _ Wq�t8 t9 f k r�t: j; | j< | j= � V} t* | � � q�Xn t j> rw| j? d5 k rwt@ | d6 t � rwt, | � d k rwyo t@ | d7 t � s_t | _A | jB jC | � V} | d k rFt | _D tE d8 � � n tF tG | � g f � n WqwtE k rsqwXn tH tI | � jJ | | � V} tF | � d S(; Ni t atEndi RJ t checkedWikit cookies x-requested-witht Enabledt Cookiet unauthenticateds$ Wiki sessionID cookie value: {token}t tokent EndpointDescriptors Unknown wiki token: {token}s+ Failed to look up wiki token {token}: {msg}t msgs% Failed to look up wiki token: {error}t errors Wiki lookup returned uid: {uid}t uidsL Wiki-authenticated principal {uid} being assigned to authnUser and authzUserRY s x-forwarded-hosti����t ,i� iP t httpst httpt hostt portt schemeR@ t querystrings redirect={}://{}{}t temporaryt inboxt timezonesi R% R' t wikist __uids__s {}{}s1 Wiki principal {name} being assigned to authzUsert nameR] s user-agents Rejecting user-agent: {agent}t agents@ Your client software ({}) is not allowed to access this service.RX t PROPFINDt notInCachet checkingCaches Not found in cache.( Rz R{ ( R% R' (K R0 t addResponseFilterR\ R@ RM RN t authServiceMapRP R RD Rh R t Authenticationt Wikit headerst getHeadert hasHeaderR9 R~ t valueRV t debugR t WebErrort intt statusR t NOT_FOUNDRp t messageRR t principalForUIDRY RX t WebCalendarAuthPatht getRawHeaderst ServerHostNamet EnableSSLt BehindTLSProxyR! t unparseURLt formatR R] t lent startswitht WikiDirectoryServicet uidPrefixR/ R t RejectClientst searchRW R R_ RQ R R R RS RT RU R1 t methodt getattrR� R7 t getResponseForRequestR� t KeyErrorR R R, R t locateChild( R? R` t segmentst filtert allowWikiAuthRa t wikiConfigt cookiest requestedWithRi Rm Rq t wt et principalRu Rv Rw Rc t wikiUidR t rejectRX RY t child( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyR� � s c c s� d } | j j j � } | j | � V} | d k r� | j d } t j d d | d | �x7 | j � D]& } | j | � V} | d k rg Pqg qg Wn t | � d S( Ni s* Wiki user record for user {user}: {record}RK RZ ( R9 t sitet resourcet getDirectoryt recordWithUIDR[ RV R� t principalCollectionst principalForRecordR ( R? R` Rq R� R& RZ Re t collection( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyR� � s c C s t j S( N( R R_ ( R? R` ( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyt http_COPY� s c C s t j S( N( R R_ ( R? R` ( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyt http_MOVE� s c C s t j S( N( R R_ ( R? R` ( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyt http_DELETE� s ( R" ( R$ ( R" ( R" R$ ( R$ ( t __name__t __module__t __doc__R\ R/ RO R R� R- RG RI R R R� R� R� R� R� ( ( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyR 5 s& B� N(4 t __all__t twext.python.saclR t ImportErrort twext.python.logR t twisted.cred.errorR R t twisted.internet.deferR R R t twisted.python.reflectR t twisted.web.errorR R� t twistedcaldav.cacheR R R R t twistedcaldav.configR t! twistedcaldav.directory.principalR t twistedcaldav.extensionsR R R R t twistedcaldav.resourceR t txdav.who.delegatesR t txdav.who.wikiR R� R t txweb2R t txweb2.auth.wrapperR t txweb2.dav.xattrpropsR t txweb2.httpR R R! RV R ( ( ( s0 /opt/cpanel-ccs/calendarserver/provision/root.pyt <module> s: