schema.py
author Julien Cristau <julien.cristau@logilab.fr>
Thu, 16 Jan 2014 12:21:05 +0100
changeset 9411 6aec72169ee1
parent 9395 96dba2efd16d
child 9469 032825bbacab
child 9600 bde625698f44
permissions -rw-r--r--
Disable security hooks for internal sessions Fixes semantic change introduced in 96dba2efd16d where internal sessions started to check attribute permissions. Closes #3444095
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
8945
ba9e3fbfa5a5 [schemaserial] serialize additional yams parameter for customs type
Vincent Michel <vincent.michel@logilab.fr>
parents: 8892
diff changeset
     1
# copyright 2003-2013 LOGILAB S.A. (Paris, FRANCE), all rights reserved.
5421
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
     2
# contact http://www.logilab.fr/ -- mailto:contact@logilab.fr
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
     3
#
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
     4
# This file is part of CubicWeb.
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
     5
#
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
     6
# CubicWeb is free software: you can redistribute it and/or modify it under the
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
     7
# terms of the GNU Lesser General Public License as published by the Free
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
     8
# Software Foundation, either version 2.1 of the License, or (at your option)
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
     9
# any later version.
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
    10
#
5424
8ecbcbff9777 replace logilab-common by CubicWeb in disclaimer
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5421
diff changeset
    11
# CubicWeb is distributed in the hope that it will be useful, but WITHOUT
5421
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
    12
# ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
    13
# FOR A PARTICULAR PURPOSE.  See the GNU Lesser General Public License for more
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
    14
# details.
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
    15
#
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
    16
# You should have received a copy of the GNU Lesser General Public License along
8167de96c523 proper licensing information (LGPL-2.1). Hope I get it right this time.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5122
diff changeset
    17
# with CubicWeb.  If not, see <http://www.gnu.org/licenses/>.
6017
5f6a60ea8544 [relations in ui] provide context information when computing label for a relation
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5896
diff changeset
    18
"""classes to define schemas for CubicWeb"""
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    19
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    20
__docformat__ = "restructuredtext en"
2142
098aa2075903 include_schema_files is useless
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
    21
_ = unicode
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    22
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    23
import re
9366
bcbc92223b35 set proper PACKAGE information for yams 0.39
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 9283
diff changeset
    24
from os.path import join, basename
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    25
from logging import getLogger
1133
8a409ea0c9ec more linting
sylvain.thenault@logilab.fr
parents: 1132
diff changeset
    26
from warnings import warn
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    27
9366
bcbc92223b35 set proper PACKAGE information for yams 0.39
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 9283
diff changeset
    28
from logilab.common import tempattr
9280
bae0caa8477a [schema] edit syntax tree instead of playing with strings for RQLExpressions
Julien Cristau <julien.cristau@logilab.fr>
parents: 9262
diff changeset
    29
from logilab.common.decorators import cached, clear_cache, monkeypatch, cachedproperty
2730
bb6fcb8c5d71 to make cw schemas importable, they have to be installed w/ cw code, not in /usr/share/cubicweb/schemas
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2718
diff changeset
    30
from logilab.common.logging_ext import set_log_methods
8256
852c73392b00 [schema] make cubicweb 3.14 compatible with yams 0.35
Pierre-Yves David <pierre-yves.david@logilab.fr>
parents: 8160
diff changeset
    31
from logilab.common.deprecation import deprecated, class_moved, moved
7152
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
    32
from logilab.common.textutils import splitstrip
2926
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
    33
from logilab.common.graph import get_cycles
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    34
from logilab.common.compat import any
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    35
2531
531ea4e7013e [cleanup] nicer imports
Nicolas Chauvat <nicolas.chauvat@logilab.fr>
parents: 2526
diff changeset
    36
from yams import BadSchemaDefinition, buildobjs as ybo
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
    37
from yams.schema import Schema, ERSchema, EntitySchema, RelationSchema, \
5030
5238d9a8dfee [form] put qualified name on validation error, should fix #784299
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4913
diff changeset
    38
     RelationDefinitionSchema, PermissionMixIn, role_name
4717
535705688f4f proper deprecation warning when import class that should be imported from yams
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4702
diff changeset
    39
from yams.constraints import BaseConstraint, FormatConstraint
2531
531ea4e7013e [cleanup] nicer imports
Nicolas Chauvat <nicolas.chauvat@logilab.fr>
parents: 2526
diff changeset
    40
from yams.reader import (CONSTRAINTS, PyFileReader, SchemaLoader,
531ea4e7013e [cleanup] nicer imports
Nicolas Chauvat <nicolas.chauvat@logilab.fr>
parents: 2526
diff changeset
    41
                         obsolete as yobsolete, cleanup_sys_modules)
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    42
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    43
from rql import parse, nodes, RQLSyntaxError, TypeResolverException
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    44
2730
bb6fcb8c5d71 to make cw schemas importable, they have to be installed w/ cw code, not in /usr/share/cubicweb/schemas
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2718
diff changeset
    45
import cubicweb
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    46
from cubicweb import ETYPE_NAME_MAP, ValidationError, Unauthorized
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    47
9148
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
    48
try:
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
    49
    from cubicweb import server
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
    50
except ImportError:
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
    51
    # We need to lookup DEBUG from there,
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
    52
    # however a pure dbapi client may not have it.
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
    53
    class server(object): pass
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
    54
    server.DEBUG = False
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
    55
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
    56
2596
d02eed70937f [R repo, schema] use VIRTUAL_RTYPES const
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2531
diff changeset
    57
PURE_VIRTUAL_RTYPES = set(('identity', 'has_text',))
d02eed70937f [R repo, schema] use VIRTUAL_RTYPES const
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2531
diff changeset
    58
VIRTUAL_RTYPES = set(('eid', 'identity', 'has_text',))
d02eed70937f [R repo, schema] use VIRTUAL_RTYPES const
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2531
diff changeset
    59
4913
083b4d454192 server/web api for accessing to deleted_entites
Katia Saurfelt <katia.saurfelt@logilab.fr>
parents: 4843
diff changeset
    60
# set of meta-relations available for every entity types
2622
3c7edaa6c6d2 oops, should have been in a earlier commit (META_RELATION_TYPES renaming)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2616
diff changeset
    61
META_RTYPES = set((
2126
a25859917ccc stop using meta attribute from yams schema. Use instead sets defining meta relations and another defining schema types. Refactor various schema view based on this
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
    62
    'owned_by', 'created_by', 'is', 'is_instance_of', 'identity',
6427
c8a5ac2d1eaa [schema / sources] store data sources as cubicweb entities
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6377
diff changeset
    63
    'eid', 'creation_date', 'cw_source', 'modification_date', 'has_text', 'cwuri',
2184
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 2181
diff changeset
    64
    ))
6375
df4fd2a1b0e7 [schema] introduce new WORKFLOW_RTYPES set and use it to build SYSTEM_RTYPES/DONT_CHECK_RTYPES_ON_ADD/DONT_CHECK_RTYPES_ON_DEL sets
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6262
diff changeset
    65
WORKFLOW_RTYPES = set(('custom_workflow', 'in_state', 'wf_info_for'))
6377
3bb415310d4f [schema] introduce some new sets categorizing entity/relation types and benefits from them where possible
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6375
diff changeset
    66
WORKFLOW_DEF_RTYPES = set(('workflow_of', 'state_of', 'transition_of',
3bb415310d4f [schema] introduce some new sets categorizing entity/relation types and benefits from them where possible
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6375
diff changeset
    67
                           'initial_state', 'default_workflow',
3bb415310d4f [schema] introduce some new sets categorizing entity/relation types and benefits from them where possible
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6375
diff changeset
    68
                           'allowed_transition', 'destination_state',
3bb415310d4f [schema] introduce some new sets categorizing entity/relation types and benefits from them where possible
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6375
diff changeset
    69
                           'from_state', 'to_state', 'condition',
3bb415310d4f [schema] introduce some new sets categorizing entity/relation types and benefits from them where possible
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6375
diff changeset
    70
                           'subworkflow', 'subworkflow_state', 'subworkflow_exit',
3bb415310d4f [schema] introduce some new sets categorizing entity/relation types and benefits from them where possible
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6375
diff changeset
    71
                           ))
7797
a71618a75b53 backport stable
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7782
diff changeset
    72
SYSTEM_RTYPES = set(('in_group', 'require_group',
6377
3bb415310d4f [schema] introduce some new sets categorizing entity/relation types and benefits from them where possible
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6375
diff changeset
    73
                     # cwproperty
3bb415310d4f [schema] introduce some new sets categorizing entity/relation types and benefits from them where possible
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6375
diff changeset
    74
                     'for_user',
3bb415310d4f [schema] introduce some new sets categorizing entity/relation types and benefits from them where possible
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6375
diff changeset
    75
                     )) | WORKFLOW_RTYPES
6481
103774c8c215 [schema categorization] new NO_I18NCONTEXT set usable to somewhat control c-c i18n
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6427
diff changeset
    76
NO_I18NCONTEXT = META_RTYPES | WORKFLOW_RTYPES
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    77
6951
cb6314b09e0f [schema, ui] fix is_subobject to skip cw_source relation (else everything is considered as a subobject, since this relation is now composite)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6949
diff changeset
    78
SKIP_COMPOSITE_RELS = [('cw_source', 'subject')]
cb6314b09e0f [schema, ui] fix is_subobject to skip cw_source relation (else everything is considered as a subobject, since this relation is now composite)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6949
diff changeset
    79
4913
083b4d454192 server/web api for accessing to deleted_entites
Katia Saurfelt <katia.saurfelt@logilab.fr>
parents: 4843
diff changeset
    80
# set of entity and relation types used to build the schema
2126
a25859917ccc stop using meta attribute from yams schema. Use instead sets defining meta relations and another defining schema types. Refactor various schema view based on this
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
    81
SCHEMA_TYPES = set((
a25859917ccc stop using meta attribute from yams schema. Use instead sets defining meta relations and another defining schema types. Refactor various schema view based on this
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
    82
    'CWEType', 'CWRType', 'CWAttribute', 'CWRelation',
6229
c4a70a5dd144 [schema] mark CWUniqueTogetherConstraint and its relations as schema entity/relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6191
diff changeset
    83
    'CWConstraint', 'CWConstraintType', 'CWUniqueTogetherConstraint',
c4a70a5dd144 [schema] mark CWUniqueTogetherConstraint and its relations as schema entity/relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6191
diff changeset
    84
    'RQLExpression',
6377
3bb415310d4f [schema] introduce some new sets categorizing entity/relation types and benefits from them where possible
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6375
diff changeset
    85
    'specializes',
2126
a25859917ccc stop using meta attribute from yams schema. Use instead sets defining meta relations and another defining schema types. Refactor various schema view based on this
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
    86
    'relation_type', 'from_entity', 'to_entity',
a25859917ccc stop using meta attribute from yams schema. Use instead sets defining meta relations and another defining schema types. Refactor various schema view based on this
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
    87
    'constrained_by', 'cstrtype',
6229
c4a70a5dd144 [schema] mark CWUniqueTogetherConstraint and its relations as schema entity/relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6191
diff changeset
    88
    'constraint_of', 'relations',
6262
84901d735156 add permission relations to schema types
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6233
diff changeset
    89
    'read_permission', 'add_permission',
84901d735156 add permission relations to schema types
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6233
diff changeset
    90
    'delete_permission', 'update_permission',
2126
a25859917ccc stop using meta attribute from yams schema. Use instead sets defining meta relations and another defining schema types. Refactor various schema view based on this
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
    91
    ))
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
    92
4434
101344a6ff9b Improve the schema command with filtering option.
Pierre-Yves David <pierre-yves.david@logilab.fr>
parents: 4252
diff changeset
    93
WORKFLOW_TYPES = set(('Transition', 'State', 'TrInfo', 'Workflow',
4759
af2e6c377c71 cleanups
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4757
diff changeset
    94
                      'WorkflowTransition', 'BaseTransition',
af2e6c377c71 cleanups
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4757
diff changeset
    95
                      'SubWorkflowExitPoint'))
af2e6c377c71 cleanups
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4757
diff changeset
    96
9173
f3286e817f28 [schema] mark CWDataImport as an internal type. Closes #3025536
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 9168
diff changeset
    97
INTERNAL_TYPES = set(('CWProperty', 'CWCache', 'ExternalUri', 'CWDataImport',
6949
267ce7cf77f1 [test, ui] mark CWSourceSchemaConfig as an internal type
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6944
diff changeset
    98
                      'CWSource', 'CWSourceHostConfig', 'CWSourceSchemaConfig'))
4434
101344a6ff9b Improve the schema command with filtering option.
Pierre-Yves David <pierre-yves.david@logilab.fr>
parents: 4252
diff changeset
    99
101344a6ff9b Improve the schema command with filtering option.
Pierre-Yves David <pierre-yves.david@logilab.fr>
parents: 4252
diff changeset
   100
2142
098aa2075903 include_schema_files is useless
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
   101
_LOGGER = getLogger('cubicweb.schemaloader')
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   102
8945
ba9e3fbfa5a5 [schemaserial] serialize additional yams parameter for customs type
Vincent Michel <vincent.michel@logilab.fr>
parents: 8892
diff changeset
   103
# entity and relation schema created from serialized schema have an eid
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   104
ybo.ETYPE_PROPERTIES += ('eid',)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   105
ybo.RTYPE_PROPERTIES += ('eid',)
2926
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   106
9393
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   107
# Bases for manipulating RQL in schema #########################################
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   108
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   109
def guess_rrqlexpr_mainvars(expression):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   110
    defined = set(split_expression(expression))
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   111
    mainvars = set()
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   112
    if 'S' in defined:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   113
        mainvars.add('S')
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   114
    if 'O' in defined:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   115
        mainvars.add('O')
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   116
    if 'U' in defined:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   117
        mainvars.add('U')
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   118
    if not mainvars:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   119
        raise Exception('unable to guess selection variables')
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   120
    return mainvars
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   121
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   122
def split_expression(rqlstring):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   123
    for expr in rqlstring.split(','):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   124
        for noparen1 in expr.split('('):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   125
            for noparen2 in noparen1.split(')'):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   126
                for word in noparen2.split():
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   127
                    yield word
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   128
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   129
def normalize_expression(rqlstring):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   130
    """normalize an rql expression to ease schema synchronization (avoid
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   131
    suppressing and reinserting an expression if only a space has been
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   132
    added/removed for instance)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   133
    """
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   134
    return u', '.join(' '.join(expr.split()) for expr in rqlstring.split(','))
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   135
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   136
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   137
class RQLExpression(object):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   138
    """Base class for RQL expression used in schema (constraints and
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   139
    permissions)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   140
    """
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   141
    # these are overridden by set_log_methods below
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   142
    # only defining here to prevent pylint from complaining
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   143
    info = warning = error = critical = exception = debug = lambda msg,*a,**kw: None
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   144
    # to be defined in concrete classes
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   145
    rqlst = None
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   146
    predefined_variables = None
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   147
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   148
    def __init__(self, expression, mainvars, eid):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   149
        """
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   150
        :type mainvars: sequence of RQL variables' names. Can be provided as a
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   151
                        comma separated string.
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   152
        :param mainvars: names of the variables being selected.
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   153
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   154
        """
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   155
        self.eid = eid # eid of the entity representing this rql expression
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   156
        assert mainvars, 'bad mainvars %s' % mainvars
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   157
        if isinstance(mainvars, basestring):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   158
            mainvars = set(splitstrip(mainvars))
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   159
        elif not isinstance(mainvars, set):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   160
            mainvars = set(mainvars)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   161
        self.mainvars = mainvars
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   162
        self.expression = normalize_expression(expression)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   163
        try:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   164
            self.full_rql = self.rqlst.as_string()
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   165
        except RQLSyntaxError:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   166
            raise RQLSyntaxError(expression)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   167
        for mainvar in mainvars:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   168
            # if variable is predefined, an extra reference is inserted
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   169
            # automatically (`VAR eid %(v)s`)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   170
            if mainvar in self.predefined_variables:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   171
                min_refs = 3
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   172
            else:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   173
                min_refs = 2
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   174
            if len(self.rqlst.defined_vars[mainvar].references()) < min_refs:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   175
                _LOGGER.warn('You did not use the %s variable in your RQL '
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   176
                             'expression %s', mainvar, self)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   177
        # syntax tree used by read security (inserted in queries when necessary)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   178
        self.snippet_rqlst = parse(self.minimal_rql, print_errors=False).children[0]
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   179
        # graph of links between variables, used by rql rewriter
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   180
        self.vargraph = vargraph(self.rqlst)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   181
        # useful for some instrumentation, e.g. localperms permcheck command
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   182
        self.package = ybo.PACKAGE
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   183
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   184
    def __str__(self):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   185
        return self.full_rql
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   186
    def __repr__(self):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   187
        return '%s(%s)' % (self.__class__.__name__, self.full_rql)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   188
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   189
    def __lt__(self, other):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   190
        if hasattr(other, 'expression'):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   191
            return self.expression < other.expression
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   192
        return True
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   193
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   194
    def __eq__(self, other):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   195
        if hasattr(other, 'expression'):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   196
            return self.expression == other.expression
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   197
        return False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   198
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   199
    def __hash__(self):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   200
        return hash(self.expression)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   201
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   202
    def __deepcopy__(self, memo):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   203
        return self.__class__(self.expression, self.mainvars)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   204
    def __getstate__(self):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   205
        return (self.expression, self.mainvars)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   206
    def __setstate__(self, state):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   207
        self.__init__(*state)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   208
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   209
    @cachedproperty
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   210
    def rqlst(self):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   211
        select = parse(self.minimal_rql, print_errors=False).children[0]
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   212
        defined = set(split_expression(self.expression))
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   213
        for varname in self.predefined_variables:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   214
            if varname in defined:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   215
                select.add_eid_restriction(select.get_variable(varname), varname.lower(), 'Substitute')
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   216
        return select
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   217
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   218
    # permission rql expression specific stuff #################################
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   219
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   220
    @cached
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   221
    def transform_has_permission(self):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   222
        found = None
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   223
        rqlst = self.rqlst
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   224
        for var in rqlst.defined_vars.itervalues():
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   225
            for varref in var.references():
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   226
                rel = varref.relation()
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   227
                if rel is None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   228
                    continue
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   229
                try:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   230
                    prefix, action, suffix = rel.r_type.split('_')
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   231
                except ValueError:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   232
                    continue
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   233
                if prefix != 'has' or suffix != 'permission' or \
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   234
                       not action in ('add', 'delete', 'update', 'read'):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   235
                    continue
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   236
                if found is None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   237
                    found = []
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   238
                    rqlst.save_state()
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   239
                assert rel.children[0].name == 'U'
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   240
                objvar = rel.children[1].children[0].variable
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   241
                rqlst.remove_node(rel)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   242
                selected = [v.name for v in rqlst.get_selected_variables()]
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   243
                if objvar.name not in selected:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   244
                    colindex = len(selected)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   245
                    rqlst.add_selected(objvar)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   246
                else:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   247
                    colindex = selected.index(objvar.name)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   248
                found.append((action, colindex))
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   249
                # remove U eid %(u)s if U is not used in any other relation
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   250
                uvrefs = rqlst.defined_vars['U'].references()
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   251
                if len(uvrefs) == 1:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   252
                    rqlst.remove_node(uvrefs[0].relation())
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   253
        if found is not None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   254
            rql = rqlst.as_string()
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   255
            if len(rqlst.selection) == 1 and isinstance(rqlst.where, nodes.Relation):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   256
                # only "Any X WHERE X eid %(x)s" remaining, no need to execute the rql
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   257
                keyarg = rqlst.selection[0].name.lower()
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   258
            else:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   259
                keyarg = None
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   260
            rqlst.recover()
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   261
            return rql, found, keyarg
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   262
        return rqlst.as_string(), None, None
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   263
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   264
    def _check(self, _cw, **kwargs):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   265
        """return True if the rql expression is matching the given relation
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   266
        between fromeid and toeid
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   267
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   268
        _cw may be a request or a server side transaction
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   269
        """
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   270
        creating = kwargs.get('creating')
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   271
        if not creating and self.eid is not None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   272
            key = (self.eid, tuple(sorted(kwargs.iteritems())))
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   273
            try:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   274
                return _cw.local_perm_cache[key]
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   275
            except KeyError:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   276
                pass
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   277
        rql, has_perm_defs, keyarg = self.transform_has_permission()
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   278
        # when creating an entity, expression related to X satisfied
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   279
        if creating and 'X' in self.rqlst.defined_vars:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   280
            return True
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   281
        if keyarg is None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   282
            kwargs.setdefault('u', _cw.user.eid)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   283
            try:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   284
                rset = _cw.execute(rql, kwargs, build_descr=True)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   285
            except NotImplementedError:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   286
                self.critical('cant check rql expression, unsupported rql %s', rql)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   287
                if self.eid is not None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   288
                    _cw.local_perm_cache[key] = False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   289
                return False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   290
            except TypeResolverException as ex:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   291
                # some expression may not be resolvable with current kwargs
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   292
                # (type conflict)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   293
                self.warning('%s: %s', rql, str(ex))
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   294
                if self.eid is not None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   295
                    _cw.local_perm_cache[key] = False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   296
                return False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   297
            except Unauthorized as ex:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   298
                self.debug('unauthorized %s: %s', rql, str(ex))
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   299
                if self.eid is not None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   300
                    _cw.local_perm_cache[key] = False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   301
                return False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   302
        else:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   303
            rset = _cw.eid_rset(kwargs[keyarg])
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   304
        # if no special has_*_permission relation in the rql expression, just
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   305
        # check the result set contains something
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   306
        if has_perm_defs is None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   307
            if rset:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   308
                if self.eid is not None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   309
                    _cw.local_perm_cache[key] = True
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   310
                return True
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   311
        elif rset:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   312
            # check every special has_*_permission relation is satisfied
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   313
            get_eschema = _cw.vreg.schema.eschema
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   314
            try:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   315
                for eaction, col in has_perm_defs:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   316
                    for i in xrange(len(rset)):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   317
                        eschema = get_eschema(rset.description[i][col])
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   318
                        eschema.check_perm(_cw, eaction, eid=rset[i][col])
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   319
                if self.eid is not None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   320
                    _cw.local_perm_cache[key] = True
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   321
                return True
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   322
            except Unauthorized:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   323
                pass
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   324
        if self.eid is not None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   325
            _cw.local_perm_cache[key] = False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   326
        return False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   327
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   328
    @property
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   329
    def minimal_rql(self):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   330
        return 'Any %s WHERE %s' % (','.join(sorted(self.mainvars)),
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   331
                                    self.expression)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   332
9395
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   333
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   334
9393
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   335
# rql expressions for use in permission definition #############################
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   336
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   337
class ERQLExpression(RQLExpression):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   338
    predefined_variables = 'XU'
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   339
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   340
    def __init__(self, expression, mainvars=None, eid=None):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   341
        RQLExpression.__init__(self, expression, mainvars or 'X', eid)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   342
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   343
    def check(self, _cw, eid=None, creating=False, **kwargs):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   344
        if 'X' in self.rqlst.defined_vars:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   345
            if eid is None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   346
                if creating:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   347
                    return self._check(_cw, creating=True, **kwargs)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   348
                return False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   349
            assert creating == False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   350
            return self._check(_cw, x=eid, **kwargs)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   351
        return self._check(_cw, **kwargs)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   352
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   353
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   354
def vargraph(rqlst):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   355
    """ builds an adjacency graph of variables from the rql syntax tree, e.g:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   356
    Any O,S WHERE T subworkflow_exit S, T subworkflow WF, O state_of WF
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   357
    => {'WF': ['O', 'T'], 'S': ['T'], 'T': ['WF', 'S'], 'O': ['WF']}
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   358
    """
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   359
    vargraph = {}
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   360
    for relation in rqlst.get_nodes(nodes.Relation):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   361
        try:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   362
            rhsvarname = relation.children[1].children[0].variable.name
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   363
            lhsvarname = relation.children[0].name
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   364
        except AttributeError:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   365
            pass
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   366
        else:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   367
            vargraph.setdefault(lhsvarname, []).append(rhsvarname)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   368
            vargraph.setdefault(rhsvarname, []).append(lhsvarname)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   369
            #vargraph[(lhsvarname, rhsvarname)] = relation.r_type
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   370
    return vargraph
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   371
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   372
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   373
class GeneratedConstraint(object):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   374
    def __init__(self, rqlst, mainvars):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   375
        self.snippet_rqlst = rqlst
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   376
        self.mainvars = mainvars
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   377
        self.vargraph = vargraph(rqlst)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   378
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   379
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   380
class RRQLExpression(RQLExpression):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   381
    predefined_variables = 'SOU'
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   382
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   383
    def __init__(self, expression, mainvars=None, eid=None):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   384
        if mainvars is None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   385
            mainvars = guess_rrqlexpr_mainvars(expression)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   386
        RQLExpression.__init__(self, expression, mainvars, eid)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   387
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   388
    def check(self, _cw, fromeid=None, toeid=None):
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   389
        kwargs = {}
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   390
        if 'S' in self.rqlst.defined_vars:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   391
            if fromeid is None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   392
                return False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   393
            kwargs['s'] = fromeid
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   394
        if 'O' in self.rqlst.defined_vars:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   395
            if toeid is None:
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   396
                return False
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   397
            kwargs['o'] = toeid
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   398
        return self._check(_cw, **kwargs)
8266c8c375bb [schema] move definition of RQLExpression classes before default permission dicts
Julien Cristau <julien.cristau@logilab.fr>
parents: 9366
diff changeset
   399
9395
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   400
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   401
# In yams, default 'update' perm for attributes granted to managers and owners.
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   402
# Within cw, we want to default to users who may edit the entity holding the
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   403
# attribute.
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   404
# These default permissions won't be checked by the security hooks:
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   405
# since they delegate checking to the entity, we can skip actual checks.
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   406
ybo.DEFAULT_ATTRPERMS['update'] = ('managers', ERQLExpression('U has_update_permission X'))
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   407
ybo.DEFAULT_ATTRPERMS['add'] = ('managers', ERQLExpression('U has_add_permission X'))
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   408
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   409
4754
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   410
PUB_SYSTEM_ENTITY_PERMS = {
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   411
    'read':   ('managers', 'users', 'guests',),
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   412
    'add':    ('managers',),
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   413
    'delete': ('managers',),
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   414
    'update': ('managers',),
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   415
    }
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   416
PUB_SYSTEM_REL_PERMS = {
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   417
    'read':   ('managers', 'users', 'guests',),
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   418
    'add':    ('managers',),
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   419
    'delete': ('managers',),
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   420
    }
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   421
PUB_SYSTEM_ATTR_PERMS = {
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   422
    'read':   ('managers', 'users', 'guests',),
9395
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   423
    'add': ('managers',),
6944
0cf10429ad39 [sources] rewrite the way pyrorql mapping are stored in the database so it can be reused for other sources (eg datafeed+cwxml)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6861
diff changeset
   424
    'update': ('managers',),
4754
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   425
    }
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   426
RO_REL_PERMS = {
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   427
    'read':   ('managers', 'users', 'guests',),
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   428
    'add':    (),
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   429
    'delete': (),
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   430
    }
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   431
RO_ATTR_PERMS = {
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   432
    'read':   ('managers', 'users', 'guests',),
9395
96dba2efd16d [hooks/security] provide attribute "add" permission
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9393
diff changeset
   433
    'add': ybo.DEFAULT_ATTRPERMS['add'],
4754
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   434
    'update': (),
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   435
    }
6bf17f810975 [schema] new constants for permissions definitions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4717
diff changeset
   436
2926
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   437
# XXX same algorithm as in reorder_cubes and probably other place,
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   438
# may probably extract a generic function
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   439
def order_eschemas(eschemas):
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   440
    """return entity schemas ordered such that entity types which specializes an
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   441
    other one appears after that one
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   442
    """
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   443
    graph = {}
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   444
    for eschema in eschemas:
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   445
        if eschema.specializes():
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   446
            graph[eschema] = set((eschema.specializes(),))
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   447
        else:
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   448
            graph[eschema] = set()
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   449
    cycles = get_cycles(graph)
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   450
    if cycles:
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   451
        cycles = '\n'.join(' -> '.join(cycle) for cycle in cycles)
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   452
        raise Exception('cycles in entity schema specialization: %s'
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   453
                        % cycles)
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   454
    eschemas = []
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   455
    while graph:
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   456
        # sorted to get predictable results
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   457
        for eschema, deps in sorted(graph.items()):
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   458
            if not deps:
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   459
                eschemas.append(eschema)
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   460
                del graph[eschema]
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   461
                for deps in graph.itervalues():
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   462
                    try:
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   463
                        deps.remove(eschema)
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   464
                    except KeyError:
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   465
                        continue
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   466
    return eschemas
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
   467
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   468
def bw_normalize_etype(etype):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   469
    if etype in ETYPE_NAME_MAP:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   470
        msg = '%s has been renamed to %s, please update your code' % (
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   471
            etype, ETYPE_NAME_MAP[etype])
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   472
        warn(msg, DeprecationWarning, stacklevel=4)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   473
        etype = ETYPE_NAME_MAP[etype]
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   474
    return etype
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   475
3275
5247789df541 [gettext] provide GNU contexts to avoid translations ambiguities
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents: 3240
diff changeset
   476
def display_name(req, key, form='', context=None):
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   477
    """return a internationalized string for the key (schema entity or relation
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   478
    name) in a given form
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   479
    """
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   480
    assert form in ('', 'plural', 'subject', 'object')
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   481
    if form == 'subject':
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   482
        form = ''
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   483
    if form:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   484
        key = key + '_' + form
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   485
    # ensure unicode
3284
036cf5a25714 ensure pgettext return unicode as well
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3275
diff changeset
   486
    if context is not None:
7951
b7c825b00f64 [schema display] display_name shouldn't call .lower(). Note the only proper way is to have different msgid for upper/lower cases. Closes #1105433
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7894
diff changeset
   487
        return unicode(req.pgettext(context, key))
3275
5247789df541 [gettext] provide GNU contexts to avoid translations ambiguities
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents: 3240
diff changeset
   488
    else:
7951
b7c825b00f64 [schema display] display_name shouldn't call .lower(). Note the only proper way is to have different msgid for upper/lower cases. Closes #1105433
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7894
diff changeset
   489
        return unicode(req._(key))
3275
5247789df541 [gettext] provide GNU contexts to avoid translations ambiguities
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents: 3240
diff changeset
   490
3978
2c95e3033f64 finish yesterday work on rql constraints:
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3968
diff changeset
   491
2c95e3033f64 finish yesterday work on rql constraints:
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3968
diff changeset
   492
# Schema objects definition ###################################################
2c95e3033f64 finish yesterday work on rql constraints:
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3968
diff changeset
   493
3471
8c57c71b859c can now give context to rschema.display_name(...)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3401
diff changeset
   494
def ERSchema_display_name(self, req, form='', context=None):
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   495
    """return a internationalized string for the entity/relation type name in
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   496
    a given form
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   497
    """
3471
8c57c71b859c can now give context to rschema.display_name(...)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3401
diff changeset
   498
    return display_name(req, self.type, form, context)
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   499
ERSchema.display_name = ERSchema_display_name
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   500
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   501
@cached
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   502
def get_groups(self, action):
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   503
    """return the groups authorized to perform <action> on entities of
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   504
    this type
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   505
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   506
    :type action: str
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   507
    :param action: the name of a permission
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   508
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   509
    :rtype: tuple
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   510
    :return: names of the groups with the given permission
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   511
    """
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   512
    assert action in self.ACTIONS, action
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   513
    #assert action in self._groups, '%s %s' % (self, action)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   514
    try:
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   515
        return frozenset(g for g in self.permissions[action] if isinstance(g, basestring))
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   516
    except KeyError:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   517
        return ()
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   518
PermissionMixIn.get_groups = get_groups
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   519
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   520
@cached
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   521
def get_rqlexprs(self, action):
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   522
    """return the rql expressions representing queries to check the user is allowed
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   523
    to perform <action> on entities of this type
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   524
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   525
    :type action: str
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   526
    :param action: the name of a permission
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   527
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   528
    :rtype: tuple
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   529
    :return: the rql expressions with the given permission
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   530
    """
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   531
    assert action in self.ACTIONS, action
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   532
    #assert action in self._rqlexprs, '%s %s' % (self, action)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   533
    try:
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   534
        return tuple(g for g in self.permissions[action] if not isinstance(g, basestring))
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   535
    except KeyError:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   536
        return ()
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   537
PermissionMixIn.get_rqlexprs = get_rqlexprs
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   538
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   539
orig_set_action_permissions = PermissionMixIn.set_action_permissions
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   540
def set_action_permissions(self, action, permissions):
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   541
    """set the groups and rql expressions allowing to perform <action> on
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   542
    entities of this type
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   543
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   544
    :type action: str
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   545
    :param action: the name of a permission
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   546
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   547
    :type permissions: tuple
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   548
    :param permissions: the groups and rql expressions allowing the given action
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   549
    """
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   550
    orig_set_action_permissions(self, action, tuple(permissions))
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   551
    clear_cache(self, 'get_rqlexprs')
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   552
    clear_cache(self, 'get_groups')
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   553
PermissionMixIn.set_action_permissions = set_action_permissions
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   554
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   555
def has_local_role(self, action):
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   556
    """return true if the action *may* be granted localy (eg either rql
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   557
    expressions or the owners group are used in security definition)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   558
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   559
    XXX this method is only there since we don't know well how to deal with
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   560
    'add' action checking. Also find a better name would be nice.
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   561
    """
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   562
    assert action in self.ACTIONS, action
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   563
    if self.get_rqlexprs(action):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   564
        return True
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   565
    if action in ('update', 'delete'):
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   566
        return 'owners' in self.get_groups(action)
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   567
    return False
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   568
PermissionMixIn.has_local_role = has_local_role
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   569
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   570
def may_have_permission(self, action, req):
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   571
    if action != 'read' and not (self.has_local_role('read') or
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   572
                                 self.has_perm(req, 'read')):
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   573
        return False
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   574
    return self.has_local_role(action) or self.has_perm(req, action)
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   575
PermissionMixIn.may_have_permission = may_have_permission
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   576
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   577
def has_perm(self, _cw, action, **kwargs):
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   578
    """return true if the action is granted globaly or localy"""
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   579
    try:
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   580
        self.check_perm(_cw, action, **kwargs)
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   581
        return True
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   582
    except Unauthorized:
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   583
        return False
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   584
PermissionMixIn.has_perm = has_perm
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   585
9148
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   586
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   587
def check_perm(self, _cw, action, **kwargs):
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   588
    # NB: _cw may be a server transaction or a request object.
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   589
    #
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   590
    # check user is in an allowed group, if so that's enough internal
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   591
    # transactions should always stop there
9148
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   592
    DBG = False
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   593
    if server.DEBUG & server.DBG_SEC:
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   594
        if action in server._SECURITY_CAPS:
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   595
            _self_str = str(self)
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   596
            if server._SECURITY_ITEMS:
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   597
                if any(item in _self_str for item in server._SECURITY_ITEMS):
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   598
                    DBG = True
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   599
            else:
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   600
                DBG = True
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   601
    groups = self.get_groups(action)
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   602
    if _cw.user.matching_groups(groups):
9148
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   603
        if DBG:
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   604
            print 'check_perm: %r %r: user matches %s' % (action, _self_str, groups)
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   605
        return
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   606
    # if 'owners' in allowed groups, check if the user actually owns this
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   607
    # object, if so that's enough
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   608
    #
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   609
    # NB: give _cw to user.owns since user is not be bound to a transaction on
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   610
    # the repository side
4607
55eab66c6592 [schema security] fix so that when cheking attributes perms for an entity being created, 'owners' and has_*_permission in erqlexpr are considered satisfied
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4586
diff changeset
   611
    if 'owners' in groups and (
55eab66c6592 [schema security] fix so that when cheking attributes perms for an entity being created, 'owners' and has_*_permission in erqlexpr are considered satisfied
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4586
diff changeset
   612
          kwargs.get('creating')
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   613
          or ('eid' in kwargs and _cw.user.owns(kwargs['eid']))):
9148
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   614
        if DBG:
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   615
            print ('check_perm: %r %r: user is owner or creation time' %
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   616
                   (action, _self_str))
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   617
        return
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   618
    # else if there is some rql expressions, check them
9148
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   619
    if DBG:
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   620
        print ('check_perm: %r %r %s' %
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   621
               (action, _self_str, [(rqlexpr, kwargs, rqlexpr.check(_cw, **kwargs))
1b549c1acd4f [schema,server] add a security debugging aid (closes #2920304)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 8945
diff changeset
   622
                                    for rqlexpr in self.get_rqlexprs(action)]))
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   623
    if any(rqlexpr.check(_cw, **kwargs)
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   624
           for rqlexpr in self.get_rqlexprs(action)):
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   625
        return
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   626
    raise Unauthorized(action, str(self))
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   627
PermissionMixIn.check_perm = check_perm
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   628
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   629
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   630
RelationDefinitionSchema._RPROPERTIES['eid'] = None
8945
ba9e3fbfa5a5 [schemaserial] serialize additional yams parameter for customs type
Vincent Michel <vincent.michel@logilab.fr>
parents: 8892
diff changeset
   631
# remember rproperties defined at this point. Others will have to be serialized in
ba9e3fbfa5a5 [schemaserial] serialize additional yams parameter for customs type
Vincent Michel <vincent.michel@logilab.fr>
parents: 8892
diff changeset
   632
# CWAttribute.extra_props
ba9e3fbfa5a5 [schemaserial] serialize additional yams parameter for customs type
Vincent Michel <vincent.michel@logilab.fr>
parents: 8892
diff changeset
   633
KNOWN_RPROPERTIES = RelationDefinitionSchema.ALL_PROPERTIES()
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   634
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   635
def rql_expression(self, expression, mainvars=None, eid=None):
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   636
    """rql expression factory"""
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   637
    if self.rtype.final:
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   638
        return ERQLExpression(expression, mainvars, eid)
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   639
    return RRQLExpression(expression, mainvars, eid)
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   640
RelationDefinitionSchema.rql_expression = rql_expression
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   641
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   642
orig_check_permission_definitions = RelationDefinitionSchema.check_permission_definitions
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   643
def check_permission_definitions(self):
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   644
    orig_check_permission_definitions(self)
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   645
    schema = self.subject.schema
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   646
    for action, groups in self.permissions.iteritems():
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   647
        for group_or_rqlexpr in groups:
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   648
            if action == 'read' and \
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   649
                   isinstance(group_or_rqlexpr, RQLExpression):
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   650
                msg = "can't use rql expression for read permission of %s"
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   651
                raise BadSchemaDefinition(msg % self)
4574
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   652
            if self.final and isinstance(group_or_rqlexpr, RRQLExpression):
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   653
                msg = "can't use RRQLExpression on %s, use an ERQLExpression"
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   654
                raise BadSchemaDefinition(msg % self)
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   655
            if not self.final and isinstance(group_or_rqlexpr, ERQLExpression):
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   656
                msg = "can't use ERQLExpression on %s, use a RRQLExpression"
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   657
                raise BadSchemaDefinition(msg % self)
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   658
RelationDefinitionSchema.check_permission_definitions = check_permission_definitions
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   659
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   660
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   661
class CubicWebEntitySchema(EntitySchema):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   662
    """a entity has a type, a set of subject and or object relations
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   663
    the entity schema defines the possible relations for a given type and some
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   664
    constraints on those relations
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   665
    """
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   666
    def __init__(self, schema=None, edef=None, eid=None, **kwargs):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   667
        super(CubicWebEntitySchema, self).__init__(schema, edef, **kwargs)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   668
        if eid is None and edef is not None:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   669
            eid = getattr(edef, 'eid', None)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   670
        self.eid = eid
4574
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   671
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   672
    def check_permission_definitions(self):
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   673
        super(CubicWebEntitySchema, self).check_permission_definitions()
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   674
        for groups in self.permissions.itervalues():
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   675
            for group_or_rqlexpr in groups:
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   676
                if isinstance(group_or_rqlexpr, RRQLExpression):
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   677
                    msg = "can't use RRQLExpression on %s, use an ERQLExpression"
2380444d982c [schema] refactor/cleanup check_permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4570
diff changeset
   678
                    raise BadSchemaDefinition(msg % self.type)
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   679
6951
cb6314b09e0f [schema, ui] fix is_subobject to skip cw_source relation (else everything is considered as a subobject, since this relation is now composite)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6949
diff changeset
   680
    def is_subobject(self, strict=False, skiprels=None):
cb6314b09e0f [schema, ui] fix is_subobject to skip cw_source relation (else everything is considered as a subobject, since this relation is now composite)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6949
diff changeset
   681
        if skiprels is None:
cb6314b09e0f [schema, ui] fix is_subobject to skip cw_source relation (else everything is considered as a subobject, since this relation is now composite)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6949
diff changeset
   682
            skiprels = SKIP_COMPOSITE_RELS
cb6314b09e0f [schema, ui] fix is_subobject to skip cw_source relation (else everything is considered as a subobject, since this relation is now composite)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6949
diff changeset
   683
        else:
cb6314b09e0f [schema, ui] fix is_subobject to skip cw_source relation (else everything is considered as a subobject, since this relation is now composite)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6949
diff changeset
   684
            skiprels += SKIP_COMPOSITE_RELS
cb6314b09e0f [schema, ui] fix is_subobject to skip cw_source relation (else everything is considered as a subobject, since this relation is now composite)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6949
diff changeset
   685
        return super(CubicWebEntitySchema, self).is_subobject(strict,
cb6314b09e0f [schema, ui] fix is_subobject to skip cw_source relation (else everything is considered as a subobject, since this relation is now composite)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6949
diff changeset
   686
                                                              skiprels=skiprels)
cb6314b09e0f [schema, ui] fix is_subobject to skip cw_source relation (else everything is considered as a subobject, since this relation is now composite)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6949
diff changeset
   687
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   688
    def attribute_definitions(self):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   689
        """return an iterator on attribute definitions
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   690
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   691
        attribute relations are a subset of subject relations where the
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   692
        object's type is a final entity
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   693
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   694
        an attribute definition is a 2-uple :
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   695
        * name of the relation
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   696
        * schema of the destination entity type
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   697
        """
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   698
        iter = super(CubicWebEntitySchema, self).attribute_definitions()
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   699
        for rschema, attrschema in iter:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   700
            if rschema.type == 'has_text':
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   701
                continue
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   702
            yield rschema, attrschema
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   703
2128
464edb198faa drop @ wildcard in relation subject/object, override main_attribute for proper behaviour
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2126
diff changeset
   704
    def main_attribute(self):
464edb198faa drop @ wildcard in relation subject/object, override main_attribute for proper behaviour
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2126
diff changeset
   705
        """convenience method that returns the *main* (i.e. the first non meta)
464edb198faa drop @ wildcard in relation subject/object, override main_attribute for proper behaviour
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2126
diff changeset
   706
        attribute defined in the entity schema
464edb198faa drop @ wildcard in relation subject/object, override main_attribute for proper behaviour
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2126
diff changeset
   707
        """
464edb198faa drop @ wildcard in relation subject/object, override main_attribute for proper behaviour
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2126
diff changeset
   708
        for rschema, _ in self.attribute_definitions():
2622
3c7edaa6c6d2 oops, should have been in a earlier commit (META_RELATION_TYPES renaming)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2616
diff changeset
   709
            if not (rschema in META_RTYPES
2128
464edb198faa drop @ wildcard in relation subject/object, override main_attribute for proper behaviour
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2126
diff changeset
   710
                    or self.is_metadata(rschema)):
464edb198faa drop @ wildcard in relation subject/object, override main_attribute for proper behaviour
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2126
diff changeset
   711
                return rschema
464edb198faa drop @ wildcard in relation subject/object, override main_attribute for proper behaviour
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2126
diff changeset
   712
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   713
    def add_subject_relation(self, rschema):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   714
        """register the relation schema as possible subject relation"""
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   715
        super(CubicWebEntitySchema, self).add_subject_relation(rschema)
7467
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   716
        if rschema.final:
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   717
            if self.rdef(rschema).get('fulltextindexed'):
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   718
                self._update_has_text()
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   719
        elif rschema.fulltext_container:
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   720
            self._update_has_text()
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   721
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   722
    def add_object_relation(self, rschema):
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   723
        """register the relation schema as possible object relation"""
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   724
        super(CubicWebEntitySchema, self).add_object_relation(rschema)
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   725
        if rschema.fulltext_container:
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   726
            self._update_has_text()
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   727
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   728
    def del_subject_relation(self, rtype):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   729
        super(CubicWebEntitySchema, self).del_subject_relation(rtype)
7467
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   730
        if 'has_text' in self.subjrels:
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   731
            self._update_has_text(deletion=True)
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   732
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   733
    def del_object_relation(self, rtype):
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   734
        super(CubicWebEntitySchema, self).del_object_relation(rtype)
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   735
        if 'has_text' in self.subjrels:
5a6b3e51807d [schema] fix computing of has_text relation: when a fulltext_container relation is added, we need to recompute has_text for the target entity type as well. Also, avoid computation when not needed
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7152
diff changeset
   736
            self._update_has_text(deletion=True)
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   737
2632
920bfaff60a4 B [schema update] may remove has_text unexpectedly, give another argument to fix it
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2622
diff changeset
   738
    def _update_has_text(self, deletion=False):
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   739
        may_need_has_text, has_has_text = False, False
2632
920bfaff60a4 B [schema update] may remove has_text unexpectedly, give another argument to fix it
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2622
diff changeset
   740
        need_has_text = None
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   741
        for rschema in self.subject_relations():
3689
deb13e88e037 follow yams 0.25 api changes to improve performance
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3554
diff changeset
   742
            if rschema.final:
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   743
                if rschema == 'has_text':
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   744
                    has_has_text = True
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   745
                elif self.rdef(rschema).get('fulltextindexed'):
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   746
                    may_need_has_text = True
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   747
            elif rschema.fulltext_container:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   748
                if rschema.fulltext_container == 'subject':
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   749
                    may_need_has_text = True
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   750
                else:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   751
                    need_has_text = False
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   752
        for rschema in self.object_relations():
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   753
            if rschema.fulltext_container:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   754
                if rschema.fulltext_container == 'object':
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   755
                    may_need_has_text = True
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   756
                else:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   757
                    need_has_text = False
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   758
        if need_has_text is None:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   759
            need_has_text = may_need_has_text
2632
920bfaff60a4 B [schema update] may remove has_text unexpectedly, give another argument to fix it
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2622
diff changeset
   760
        if need_has_text and not has_has_text and not deletion:
4755
13a5d3a7410e [schema] tweaks meta-relations and schema/workflow entities attributes permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4754
diff changeset
   761
            rdef = ybo.RelationDefinition(self.type, 'has_text', 'String',
13a5d3a7410e [schema] tweaks meta-relations and schema/workflow entities attributes permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4754
diff changeset
   762
                                          __permissions__=RO_ATTR_PERMS)
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   763
            self.schema.add_relation_def(rdef)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   764
        elif not need_has_text and has_has_text:
5122
c06078d59e87 [schema] ensure we don't remove has_text relation type unfortunatly
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5030
diff changeset
   765
            # use rschema.del_relation_def and not schema.del_relation_def to
c06078d59e87 [schema] ensure we don't remove has_text relation type unfortunatly
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5030
diff changeset
   766
            # avoid deleting the relation type accidentally...
c06078d59e87 [schema] ensure we don't remove has_text relation type unfortunatly
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5030
diff changeset
   767
            self.schema['has_text'].del_relation_def(self, self.schema['String'])
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   768
5896
67683b7e591a cleanups
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5768
diff changeset
   769
    def schema_entity(self): # XXX @property for consistency with meta
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   770
        """return True if this entity type is used to build the schema"""
2126
a25859917ccc stop using meta attribute from yams schema. Use instead sets defining meta relations and another defining schema types. Refactor various schema view based on this
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
   771
        return self.type in SCHEMA_TYPES
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   772
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   773
    def rql_expression(self, expression, mainvars=None, eid=None):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   774
        """rql expression factory"""
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   775
        return ERQLExpression(expression, mainvars, eid)
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   776
2252
dd9758cb77e1 cleanup
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2222
diff changeset
   777
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   778
class CubicWebRelationSchema(RelationSchema):
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   779
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   780
    def __init__(self, schema=None, rdef=None, eid=None, **kwargs):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   781
        if rdef is not None:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   782
            # if this relation is inlined
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   783
            self.inlined = rdef.inlined
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   784
        super(CubicWebRelationSchema, self).__init__(schema, rdef, **kwargs)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   785
        if eid is None and rdef is not None:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   786
            eid = getattr(rdef, 'eid', None)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   787
        self.eid = eid
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   788
2126
a25859917ccc stop using meta attribute from yams schema. Use instead sets defining meta relations and another defining schema types. Refactor various schema view based on this
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
   789
    @property
a25859917ccc stop using meta attribute from yams schema. Use instead sets defining meta relations and another defining schema types. Refactor various schema view based on this
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
   790
    def meta(self):
2622
3c7edaa6c6d2 oops, should have been in a earlier commit (META_RELATION_TYPES renaming)
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2616
diff changeset
   791
        return self.type in META_RTYPES
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   792
5896
67683b7e591a cleanups
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5768
diff changeset
   793
    def schema_relation(self): # XXX @property for consistency with meta
2126
a25859917ccc stop using meta attribute from yams schema. Use instead sets defining meta relations and another defining schema types. Refactor various schema view based on this
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
   794
        """return True if this relation type is used to build the schema"""
a25859917ccc stop using meta attribute from yams schema. Use instead sets defining meta relations and another defining schema types. Refactor various schema view based on this
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
   795
        return self.type in SCHEMA_TYPES
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   796
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   797
    def may_have_permission(self, action, req, eschema=None, role=None):
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   798
        if eschema is not None:
4019
7f68077d2c3b api update
Sandrine Ribeau <sandrine.ribeau@logilab.fr>
parents: 4005
diff changeset
   799
            for tschema in self.targets(eschema, role):
7f68077d2c3b api update
Sandrine Ribeau <sandrine.ribeau@logilab.fr>
parents: 4005
diff changeset
   800
                rdef = self.role_rdef(eschema, tschema, role)
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   801
                if rdef.may_have_permission(action, req):
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   802
                    return True
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   803
        else:
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   804
            for rdef in self.rdefs.itervalues():
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   805
                if rdef.may_have_permission(action, req):
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   806
                    return True
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   807
        return False
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   808
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   809
    def has_perm(self, _cw, action, **kwargs):
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   810
        """return true if the action is granted globaly or localy"""
4575
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   811
        if self.final:
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   812
            assert not ('fromeid' in kwargs or 'toeid' in kwargs), kwargs
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   813
            assert action in ('read', 'update')
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   814
            if 'eid' in kwargs:
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   815
                subjtype = _cw.describe(kwargs['eid'])[0]
4575
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   816
            else:
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   817
                subjtype = objtype = None
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   818
        else:
4575
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   819
            assert not 'eid' in kwargs, kwargs
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   820
            assert action in ('read', 'add', 'delete')
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   821
            if 'fromeid' in kwargs:
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   822
                subjtype = _cw.describe(kwargs['fromeid'])[0]
5746
f4fc424747db [security] SchemaRelation.has_perm grows to new arguments allowing to specify subject/object entity type when actual eid are not known, but their types are
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5703
diff changeset
   823
            elif 'frometype' in kwargs:
f4fc424747db [security] SchemaRelation.has_perm grows to new arguments allowing to specify subject/object entity type when actual eid are not known, but their types are
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5703
diff changeset
   824
                subjtype = kwargs.pop('frometype')
4575
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   825
            else:
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   826
                subjtype = None
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   827
            if 'toeid' in kwargs:
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   828
                objtype = _cw.describe(kwargs['toeid'])[0]
5746
f4fc424747db [security] SchemaRelation.has_perm grows to new arguments allowing to specify subject/object entity type when actual eid are not known, but their types are
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5703
diff changeset
   829
            elif 'toetype' in kwargs:
f4fc424747db [security] SchemaRelation.has_perm grows to new arguments allowing to specify subject/object entity type when actual eid are not known, but their types are
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5703
diff changeset
   830
                objtype = kwargs.pop('toetype')
4575
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   831
            else:
4a7fe84f7803 [schema] fix RelationSchema.has_perm to properly works with attribute relations
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4574
diff changeset
   832
                objtype = None
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   833
        if objtype and subjtype:
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   834
            return self.rdef(subjtype, objtype).has_perm(_cw, action, **kwargs)
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   835
        elif subjtype:
4004
c52619c738a5 api renaming update
Sandrine Ribeau <sandrine.ribeau@logilab.fr>
parents: 4003
diff changeset
   836
            for tschema in self.targets(subjtype, 'subject'):
c52619c738a5 api renaming update
Sandrine Ribeau <sandrine.ribeau@logilab.fr>
parents: 4003
diff changeset
   837
                rdef = self.rdef(subjtype, tschema)
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   838
                if not rdef.has_perm(_cw, action, **kwargs):
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   839
                    return False
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   840
        elif objtype:
4004
c52619c738a5 api renaming update
Sandrine Ribeau <sandrine.ribeau@logilab.fr>
parents: 4003
diff changeset
   841
            for tschema in self.targets(objtype, 'object'):
c52619c738a5 api renaming update
Sandrine Ribeau <sandrine.ribeau@logilab.fr>
parents: 4003
diff changeset
   842
                rdef = self.rdef(tschema, objtype)
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   843
                if not rdef.has_perm(_cw, action, **kwargs):
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   844
                    return False
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   845
        else:
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   846
            for rdef in self.rdefs.itervalues():
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
   847
                if not rdef.has_perm(_cw, action, **kwargs):
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   848
                    return False
4233
94ffaecd8e8c ouch, has_perm was always returning False...
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4181
diff changeset
   849
        return True
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   850
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   851
    @deprecated('use .rdef(subjtype, objtype).role_cardinality(role)')
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   852
    def cardinality(self, subjtype, objtype, target):
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   853
        return self.rdef(subjtype, objtype).role_cardinality(target)
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   854
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   855
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   856
class CubicWebSchema(Schema):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   857
    """set of entities and relations schema defining the possible data sets
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   858
    used in an application
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   859
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   860
    :type name: str
2476
1294a6bdf3bf application -> instance where it makes sense
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2460
diff changeset
   861
    :ivar name: name of the schema, usually the instance identifier
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   862
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   863
    :type base: str
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   864
    :ivar base: path of the directory where the schema is defined
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   865
    """
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   866
    reading_from_database = False
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   867
    entity_class = CubicWebEntitySchema
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   868
    relation_class = CubicWebRelationSchema
2958
44e5446b649b no inference for the identity relation
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2926
diff changeset
   869
    no_specialization_inference = ('identity',)
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   870
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   871
    def __init__(self, *args, **kwargs):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   872
        self._eid_index = {}
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   873
        super(CubicWebSchema, self).__init__(*args, **kwargs)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   874
        ybo.register_base_types(self)
2300
c8151d004e06 meta has been drop
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2293
diff changeset
   875
        rschema = self.add_relation_type(ybo.RelationType('eid'))
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   876
        rschema.final = True
2300
c8151d004e06 meta has been drop
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2293
diff changeset
   877
        rschema = self.add_relation_type(ybo.RelationType('has_text'))
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   878
        rschema.final = True
2300
c8151d004e06 meta has been drop
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2293
diff changeset
   879
        rschema = self.add_relation_type(ybo.RelationType('identity'))
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   880
        rschema.final = False
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   881
7440
539de926ec9d [test] fix failure introduced by 1719eab69551: the regexp should be fixed, not the error message
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7383
diff changeset
   882
    etype_name_re = r'[A-Z][A-Za-z0-9]*[a-z]+[A-Za-z0-9]*$'
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   883
    def add_entity_type(self, edef):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   884
        edef.name = edef.name.encode()
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   885
        edef.name = bw_normalize_etype(edef.name)
7383
1719eab69551 [schema] fix imprecise error message
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 7152
diff changeset
   886
        if not re.match(self.etype_name_re, edef.name):
6861
9d4e11d6e783 [schema] ease understanding of schema naming error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6827
diff changeset
   887
            raise BadSchemaDefinition(
9d4e11d6e783 [schema] ease understanding of schema naming error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6827
diff changeset
   888
                '%r is not a valid name for an entity type. It should start '
9d4e11d6e783 [schema] ease understanding of schema naming error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6827
diff changeset
   889
                'with an upper cased letter and be followed by at least a '
9d4e11d6e783 [schema] ease understanding of schema naming error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6827
diff changeset
   890
                'lower cased letter' % edef.name)
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   891
        eschema = super(CubicWebSchema, self).add_entity_type(edef)
3689
deb13e88e037 follow yams 0.25 api changes to improve performance
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3554
diff changeset
   892
        if not eschema.final:
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   893
            # automatically add the eid relation to non final entity types
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   894
            rdef = ybo.RelationDefinition(eschema.type, 'eid', 'Int',
4755
13a5d3a7410e [schema] tweaks meta-relations and schema/workflow entities attributes permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4754
diff changeset
   895
                                          cardinality='11', uid=True,
13a5d3a7410e [schema] tweaks meta-relations and schema/workflow entities attributes permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4754
diff changeset
   896
                                          __permissions__=RO_ATTR_PERMS)
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   897
            self.add_relation_def(rdef)
4755
13a5d3a7410e [schema] tweaks meta-relations and schema/workflow entities attributes permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4754
diff changeset
   898
            rdef = ybo.RelationDefinition(eschema.type, 'identity', eschema.type,
13a5d3a7410e [schema] tweaks meta-relations and schema/workflow entities attributes permissions
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4754
diff changeset
   899
                                          __permissions__=RO_REL_PERMS)
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   900
            self.add_relation_def(rdef)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   901
        self._eid_index[eschema.eid] = eschema
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   902
        return eschema
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   903
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   904
    def add_relation_type(self, rdef):
6861
9d4e11d6e783 [schema] ease understanding of schema naming error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6827
diff changeset
   905
        if not rdef.name.islower():
9d4e11d6e783 [schema] ease understanding of schema naming error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6827
diff changeset
   906
            raise BadSchemaDefinition(
9d4e11d6e783 [schema] ease understanding of schema naming error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6827
diff changeset
   907
                '%r is not a valid name for a relation type. It should be '
9d4e11d6e783 [schema] ease understanding of schema naming error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6827
diff changeset
   908
                'lower cased' % rdef.name)
9d4e11d6e783 [schema] ease understanding of schema naming error
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6827
diff changeset
   909
        rdef.name = rdef.name.encode()
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   910
        rschema = super(CubicWebSchema, self).add_relation_type(rdef)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   911
        self._eid_index[rschema.eid] = rschema
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   912
        return rschema
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   913
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   914
    def add_relation_def(self, rdef):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   915
        """build a part of a relation schema
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   916
        (i.e. add a relation between two specific entity's types)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   917
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   918
        :type subject: str
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   919
        :param subject: entity's type that is subject of the relation
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   920
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   921
        :type rtype: str
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   922
        :param rtype: the relation's type (i.e. the name of the relation)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   923
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   924
        :type obj: str
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   925
        :param obj: entity's type that is object of the relation
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   926
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   927
        :rtype: RelationSchema
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   928
        :param: the newly created or just completed relation schema
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   929
        """
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   930
        rdef.name = rdef.name.lower()
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   931
        rdef.subject = bw_normalize_etype(rdef.subject)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   932
        rdef.object = bw_normalize_etype(rdef.object)
6191
ece6996e6ac8 [schema deserial] fix loading of schema when mapping an entity type to an existing one
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 6109
diff changeset
   933
        rdefs = super(CubicWebSchema, self).add_relation_def(rdef)
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   934
        if rdefs:
1034
0356bbfb2f26 fix to pass arguments to base class
sylvain.thenault@logilab.fr
parents: 1016
diff changeset
   935
            try:
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   936
                self._eid_index[rdef.eid] = rdefs
1034
0356bbfb2f26 fix to pass arguments to base class
sylvain.thenault@logilab.fr
parents: 1016
diff changeset
   937
            except AttributeError:
0356bbfb2f26 fix to pass arguments to base class
sylvain.thenault@logilab.fr
parents: 1016
diff changeset
   938
                pass # not a serialized schema
4003
b9436fe77c9e fix bad merge
Sandrine Ribeau <sandrine.ribeau@logilab.fr>
parents: 3998
diff changeset
   939
        return rdefs
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   940
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   941
    def del_relation_type(self, rtype):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   942
        rschema = self.rschema(rtype)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   943
        self._eid_index.pop(rschema.eid, None)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   944
        super(CubicWebSchema, self).del_relation_type(rtype)
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   945
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   946
    def del_relation_def(self, subjtype, rtype, objtype):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   947
        for k, v in self._eid_index.items():
3877
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   948
            if not isinstance(v, RelationDefinitionSchema):
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   949
                continue
7ca53fc72a0a reldefsecurity branch :
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3827
diff changeset
   950
            if v.subject == subjtype and v.rtype == rtype and v.object == objtype:
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   951
                del self._eid_index[k]
2718
3a56b87bb5d6 [schema] break when found
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2716
diff changeset
   952
                break
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   953
        super(CubicWebSchema, self).del_relation_def(subjtype, rtype, objtype)
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   954
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   955
    def del_entity_type(self, etype):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   956
        eschema = self.eschema(etype)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   957
        self._eid_index.pop(eschema.eid, None)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   958
        # deal with has_text first, else its automatic deletion (see above)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   959
        # may trigger an error in ancestor's del_entity_type method
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   960
        if 'has_text' in eschema.subject_relations():
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   961
            self.del_relation_def(etype, 'has_text', 'String')
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   962
        super(CubicWebSchema, self).del_entity_type(etype)
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
   963
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   964
    def schema_by_eid(self, eid):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   965
        return self._eid_index[eid]
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
   966
7152
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   967
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   968
# additional cw specific constraints ###########################################
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   969
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   970
class BaseRQLConstraint(RRQLExpression, BaseConstraint):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   971
    """base class for rql constraints"""
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   972
    distinct_query = None
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   973
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   974
    def serialize(self):
9253
77e31ede9b04 [schema] drop very old bw compat (pre 3.5.10)
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 9246
diff changeset
   975
        # start with a semicolon for bw compat, see below
7152
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   976
        return ';' + ','.join(sorted(self.mainvars)) + ';' + self.expression
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   977
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   978
    @classmethod
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   979
    def deserialize(cls, value):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   980
        _, mainvars, expression = value.split(';', 2)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   981
        return cls(expression, mainvars)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   982
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   983
    def check(self, entity, rtype, value):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   984
        """return true if the value satisfy the constraint, else false"""
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   985
        # implemented as a hook in the repository
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   986
        return 1
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   987
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   988
    def __str__(self):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   989
        if self.distinct_query:
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   990
            selop = 'Any'
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   991
        else:
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   992
            selop = 'DISTINCT Any'
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   993
        return '%s(%s %s WHERE %s)' % (self.__class__.__name__, selop,
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   994
                                       ','.join(sorted(self.mainvars)),
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   995
                                       self.expression)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   996
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   997
    def __repr__(self):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   998
        return '<%s @%#x>' % (self.__str__(), id(self))
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
   999
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1000
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1001
class RQLVocabularyConstraint(BaseRQLConstraint):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1002
    """the rql vocabulary constraint:
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1003
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1004
    limit the proposed values to a set of entities returned by a rql query,
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1005
    but this is not enforced at the repository level
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1006
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1007
     `expression` is additional rql restriction that will be added to
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1008
     a predefined query, where the S and O variables respectivly represent
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1009
     the subject and the object of the relation
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1010
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1011
     `mainvars` is a set of variables that should be used as selection variable
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1012
     (eg `'Any %s WHERE ...' % mainvars`). If not specified, an attempt will be
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1013
     done to guess it according to variable used in the expression.
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1014
    """
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1015
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1016
    def repo_check(self, session, eidfrom, rtype, eidto):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1017
        """raise ValidationError if the relation doesn't satisfy the constraint
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1018
        """
7990
a673d1d9a738 [diet] drop pre 3.6 API compatibility (but attempt to keep data cmopatibility). Closes #2017916
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7973
diff changeset
  1019
        pass # this is a vocabulary constraint, not enforced
7152
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1020
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1021
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1022
class RepoEnforcedRQLConstraintMixIn(object):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1023
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1024
    def __init__(self, expression, mainvars=None, msg=None):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1025
        super(RepoEnforcedRQLConstraintMixIn, self).__init__(expression, mainvars)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1026
        self.msg = msg
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1027
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1028
    def serialize(self):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1029
        # start with a semicolon for bw compat, see below
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1030
        return ';%s;%s\n%s' % (','.join(sorted(self.mainvars)), self.expression,
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1031
                               self.msg or '')
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1032
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1033
    def deserialize(cls, value):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1034
        value, msg = value.split('\n', 1)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1035
        _, mainvars, expression = value.split(';', 2)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1036
        return cls(expression, mainvars, msg)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1037
    deserialize = classmethod(deserialize)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1038
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1039
    def repo_check(self, session, eidfrom, rtype, eidto=None):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1040
        """raise ValidationError if the relation doesn't satisfy the constraint
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1041
        """
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1042
        if not self.match_condition(session, eidfrom, eidto):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1043
            # XXX at this point if both or neither of S and O are in mainvar we
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1044
            # dunno if the validation error `occurred` on eidfrom or eidto (from
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1045
            # user interface point of view)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1046
            #
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1047
            # possible enhancement: check entity being created, it's probably
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1048
            # the main eid unless this is a composite relation
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1049
            if eidto is None or 'S' in self.mainvars or not 'O' in self.mainvars:
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1050
                maineid = eidfrom
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1051
                qname = role_name(rtype, 'subject')
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1052
            else:
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1053
                maineid = eidto
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1054
                qname = role_name(rtype, 'object')
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1055
            if self.msg:
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1056
                msg = session._(self.msg)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1057
            else:
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1058
                msg = '%(constraint)s %(expression)s failed' % {
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1059
                    'constraint':  session._(self.type()),
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1060
                    'expression': self.expression}
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1061
            raise ValidationError(maineid, {qname: msg})
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1062
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
  1063
    def exec_query(self, _cw, eidfrom, eidto):
7152
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1064
        if eidto is None:
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1065
            # checking constraint for an attribute relation
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1066
            expression = 'S eid %(s)s, ' + self.expression
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1067
            args = {'s': eidfrom}
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1068
        else:
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1069
            expression = 'S eid %(s)s, O eid %(o)s, ' + self.expression
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1070
            args = {'s': eidfrom, 'o': eidto}
7640
85ebdbbcb321 [schema] closes #1816439: RQLConstraint does not take variable U into account
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7603
diff changeset
  1071
        if 'U' in self.rqlst.defined_vars:
85ebdbbcb321 [schema] closes #1816439: RQLConstraint does not take variable U into account
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7603
diff changeset
  1072
            expression = 'U eid %(u)s, ' + expression
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
  1073
            args['u'] = _cw.user.eid
7152
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1074
        rql = 'Any %s WHERE %s' % (','.join(sorted(self.mainvars)), expression)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1075
        if self.distinct_query:
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1076
            rql = 'DISTINCT ' + rql
8540
fee98af8bb33 [schema] rename schema permissions function: session may also be a request, use _cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 8258
diff changeset
  1077
        return _cw.execute(rql, args, build_descr=False)
7152
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1078
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1079
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1080
class RQLConstraint(RepoEnforcedRQLConstraintMixIn, RQLVocabularyConstraint):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1081
    """the rql constraint is similar to the RQLVocabularyConstraint but
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1082
    are also enforced at the repository level
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1083
    """
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1084
    distinct_query = False
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1085
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1086
    def match_condition(self, session, eidfrom, eidto):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1087
        return self.exec_query(session, eidfrom, eidto)
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1088
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1089
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1090
class RQLUniqueConstraint(RepoEnforcedRQLConstraintMixIn, BaseRQLConstraint):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1091
    """the unique rql constraint check that the result of the query isn't
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1092
    greater than one.
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1093
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1094
    You *must* specify `mainvars` when instantiating the constraint since there
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1095
    is no way to guess it correctly (e.g. if using S,O or U the constraint will
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1096
    always be satisfied because we've to use a DISTINCT query).
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1097
    """
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1098
    # XXX turns mainvars into a required argument in __init__
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1099
    distinct_query = True
9227
762a331db741 [schema] fix spurious warning when rqlexpr/constraint mainvars specify a non predefined variable. Closes #3098165
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 9173
diff changeset
  1100
7152
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1101
    def match_condition(self, session, eidfrom, eidto):
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1102
        return len(self.exec_query(session, eidfrom, eidto)) <= 1
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1103
39c1ffc7d93f [schema, refactoring] use RQLExpression as base class for RQL constraint classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7103
diff changeset
  1104
629
59b6542f5729 provide a new WorkflowableEntityType base class (will be refactored later, maybe with schema interfaces)
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents: 628
diff changeset
  1105
# workflow extensions #########################################################
2926
4484387ed012 when adding/removing cubes, we should add/remove entity types in correct order if one inherits from another
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1106
2460
ce1a7ffc6c90 fix a couple NameErrors
Aurelien Campeas <aurelien.campeas@logilab.fr>
parents: 2459
diff changeset
  1107
from yams.buildobjs import _add_relation as yams_add_relation
629
59b6542f5729 provide a new WorkflowableEntityType base class (will be refactored later, maybe with schema interfaces)
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents: 628
diff changeset
  1108
59b6542f5729 provide a new WorkflowableEntityType base class (will be refactored later, maybe with schema interfaces)
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents: 628
diff changeset
  1109
class workflowable_definition(ybo.metadefinition):
59b6542f5729 provide a new WorkflowableEntityType base class (will be refactored later, maybe with schema interfaces)
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents: 628
diff changeset
  1110
    """extends default EntityType's metaclass to add workflow relations
5378
0f54a0e128ac [schema] cleanup
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5372
diff changeset
  1111
    (i.e. in_state, wf_info_for and custom_workflow). This is the default
0f54a0e128ac [schema] cleanup
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5372
diff changeset
  1112
    metaclass for WorkflowableEntityType.
629
59b6542f5729 provide a new WorkflowableEntityType base class (will be refactored later, maybe with schema interfaces)
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents: 628
diff changeset
  1113
    """
59b6542f5729 provide a new WorkflowableEntityType base class (will be refactored later, maybe with schema interfaces)
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents: 628
diff changeset
  1114
    def __new__(mcs, name, bases, classdict):
2920
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1115
        abstract = classdict.pop('__abstract__', False)
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1116
        cls = super(workflowable_definition, mcs).__new__(mcs, name, bases,
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1117
                                                          classdict)
629
59b6542f5729 provide a new WorkflowableEntityType base class (will be refactored later, maybe with schema interfaces)
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents: 628
diff changeset
  1118
        if not abstract:
2920
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1119
            make_workflowable(cls)
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1120
        return cls
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1121
5379
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1122
class WorkflowableEntityType(ybo.EntityType):
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1123
    """Use this base class instead of :class:`EntityType` to have workflow
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1124
    relations (i.e. `in_state`, `wf_info_for` and `custom_workflow`) on your
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1125
    entity type.
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1126
    """
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1127
    __metaclass__ = workflowable_definition
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1128
    __abstract__ = True
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1129
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1130
2957
2daabf4c646e [schema] make_workflowable now take an option description for the in_state relation
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2931
diff changeset
  1131
def make_workflowable(cls, in_state_descr=None):
5378
0f54a0e128ac [schema] cleanup
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5372
diff changeset
  1132
    """Adds workflow relations as :class:`WorkflowableEntityType`, but usable on
0f54a0e128ac [schema] cleanup
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5372
diff changeset
  1133
    existing classes which are not using that base class.
0f54a0e128ac [schema] cleanup
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5372
diff changeset
  1134
    """
2920
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1135
    existing_rels = set(rdef.name for rdef in cls.__relations__)
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1136
    # let relation types defined in cw.schemas.workflow carrying
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1137
    # cardinality, constraints and other relation definition properties
5379
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1138
    etype = getattr(cls, 'name', cls.__name__)
2920
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1139
    if 'custom_workflow' not in existing_rels:
5379
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1140
        rdef = ybo.RelationDefinition(etype, 'custom_workflow', 'Workflow')
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1141
        yams_add_relation(cls.__relations__, rdef)
2920
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1142
    if 'in_state' not in existing_rels:
5379
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1143
        rdef = ybo.RelationDefinition(etype, 'in_state', 'State',
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1144
                                      description=in_state_descr)
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1145
        yams_add_relation(cls.__relations__, rdef)
2920
64322aa83a1d start a new workflow engine
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2782
diff changeset
  1146
    if 'wf_info_for' not in existing_rels:
5379
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1147
        rdef = ybo.RelationDefinition('TrInfo', 'wf_info_for', etype)
c082dea0731b [schema] update for yams 0.29: BoundConstraint renamed to BoundaryConstraint; new constraint messages; ObjectRelation deprecated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 5378
diff changeset
  1148
        yams_add_relation(cls.__relations__, rdef)
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
  1149
629
59b6542f5729 provide a new WorkflowableEntityType base class (will be refactored later, maybe with schema interfaces)
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents: 628
diff changeset
  1150
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1151
# schema loading ##############################################################
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1152
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1153
CONSTRAINTS['RQLConstraint'] = RQLConstraint
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1154
CONSTRAINTS['RQLUniqueConstraint'] = RQLUniqueConstraint
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1155
CONSTRAINTS['RQLVocabularyConstraint'] = RQLVocabularyConstraint
3980
b17cf4a2e09e this constraint is actually unusable in yams schema for cw
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3979
diff changeset
  1156
CONSTRAINTS.pop('MultipleStaticVocabularyConstraint', None) # don't want this in cw yams schema
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1157
PyFileReader.context.update(CONSTRAINTS)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1158
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1159
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1160
class BootstrapSchemaLoader(SchemaLoader):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1161
    """cubicweb specific schema loader, loading only schema necessary to read
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1162
    the persistent schema
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1163
    """
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1164
    schemacls = CubicWebSchema
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1165
1034
0356bbfb2f26 fix to pass arguments to base class
sylvain.thenault@logilab.fr
parents: 1016
diff changeset
  1166
    def load(self, config, path=(), **kwargs):
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1167
        """return a Schema instance from the schema definition read
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1168
        from <directory>
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1169
        """
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1170
        return super(BootstrapSchemaLoader, self).load(
1034
0356bbfb2f26 fix to pass arguments to base class
sylvain.thenault@logilab.fr
parents: 1016
diff changeset
  1171
            path, config.appid, register_base_types=False, **kwargs)
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
  1172
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1173
    def _load_definition_files(self, cubes=None):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1174
        # bootstraping, ignore cubes
2735
39c942241b48 no need for lib_directory
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2730
diff changeset
  1175
        filepath = join(cubicweb.CW_SOFTWARE_ROOT, 'schemas', 'bootstrap.py')
2142
098aa2075903 include_schema_files is useless
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 1977
diff changeset
  1176
        self.info('loading %s', filepath)
9366
bcbc92223b35 set proper PACKAGE information for yams 0.39
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 9283
diff changeset
  1177
        with tempattr(ybo, 'PACKAGE', 'cubicweb'): # though we don't care here
bcbc92223b35 set proper PACKAGE information for yams 0.39
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 9283
diff changeset
  1178
            self.handle_file(filepath)
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
  1179
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1180
    def unhandled_file(self, filepath):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1181
        """called when a file without handler associated has been found"""
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1182
        self.warning('ignoring file %r', filepath)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1183
7083
b8e35cde46e9 help pylint by explicitely defining some attributes
Alexandre Fayolle <alexandre.fayolle@logilab.fr>
parents: 6861
diff changeset
  1184
    # these are overridden by set_log_methods below
b8e35cde46e9 help pylint by explicitely defining some attributes
Alexandre Fayolle <alexandre.fayolle@logilab.fr>
parents: 6861
diff changeset
  1185
    # only defining here to prevent pylint from complaining
b8e35cde46e9 help pylint by explicitely defining some attributes
Alexandre Fayolle <alexandre.fayolle@logilab.fr>
parents: 6861
diff changeset
  1186
    info = warning = error = critical = exception = debug = lambda msg,*a,**kw: None
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1187
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1188
class CubicWebSchemaLoader(BootstrapSchemaLoader):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1189
    """cubicweb specific schema loader, automatically adding metadata to the
2476
1294a6bdf3bf application -> instance where it makes sense
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2460
diff changeset
  1190
    instance's schema
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1191
    """
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1192
1034
0356bbfb2f26 fix to pass arguments to base class
sylvain.thenault@logilab.fr
parents: 1016
diff changeset
  1193
    def load(self, config, **kwargs):
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1194
        """return a Schema instance from the schema definition read
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1195
        from <directory>
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1196
        """
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1197
        self.info('loading %s schemas', ', '.join(config.cubes()))
2782
998f24dabd0d compute extrapath, necessary for proper schema module detection when CW_CUBES_PATH is set
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2742
diff changeset
  1198
        self.extrapath = {}
998f24dabd0d compute extrapath, necessary for proper schema module detection when CW_CUBES_PATH is set
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2742
diff changeset
  1199
        for cubesdir in config.cubes_search_path():
998f24dabd0d compute extrapath, necessary for proper schema module detection when CW_CUBES_PATH is set
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2742
diff changeset
  1200
            if cubesdir != config.CUBES_DIR:
998f24dabd0d compute extrapath, necessary for proper schema module detection when CW_CUBES_PATH is set
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2742
diff changeset
  1201
                self.extrapath[cubesdir] = 'cubes'
372
a8a975a88368 check apphome is not None
Sylvain Thenault <sylvain.thenault@logilab.fr>
parents: 0
diff changeset
  1202
        if config.apphome:
2598
a66fe74bd9fc [R schema] dont give an iterator, it's a trap
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2596
diff changeset
  1203
            path = tuple(reversed([config.apphome] + config.cubes_path()))
372
a8a975a88368 check apphome is not None
Sylvain Thenault <sylvain.thenault@logilab.fr>
parents: 0
diff changeset
  1204
        else:
2598
a66fe74bd9fc [R schema] dont give an iterator, it's a trap
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2596
diff changeset
  1205
            path = tuple(reversed(config.cubes_path()))
2526
40e41eb34a7d we've to call cleanup_sys_modules manually for proper schema modules cleanup
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2476
diff changeset
  1206
        try:
40e41eb34a7d we've to call cleanup_sys_modules manually for proper schema modules cleanup
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2476
diff changeset
  1207
            return super(CubicWebSchemaLoader, self).load(config, path=path, **kwargs)
40e41eb34a7d we've to call cleanup_sys_modules manually for proper schema modules cleanup
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2476
diff changeset
  1208
        finally:
40e41eb34a7d we've to call cleanup_sys_modules manually for proper schema modules cleanup
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2476
diff changeset
  1209
            # we've to cleanup modules imported from cubicweb.schemas as well
2735
39c942241b48 no need for lib_directory
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2730
diff changeset
  1210
            cleanup_sys_modules([join(cubicweb.CW_SOFTWARE_ROOT, 'schemas')])
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1211
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1212
    def _load_definition_files(self, cubes):
2741
148d0cea1fb5 [schema] oops
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2736
diff changeset
  1213
        for filepath in (join(cubicweb.CW_SOFTWARE_ROOT, 'schemas', 'bootstrap.py'),
148d0cea1fb5 [schema] oops
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2736
diff changeset
  1214
                         join(cubicweb.CW_SOFTWARE_ROOT, 'schemas', 'base.py'),
148d0cea1fb5 [schema] oops
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2736
diff changeset
  1215
                         join(cubicweb.CW_SOFTWARE_ROOT, 'schemas', 'workflow.py'),
148d0cea1fb5 [schema] oops
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2736
diff changeset
  1216
                         join(cubicweb.CW_SOFTWARE_ROOT, 'schemas', 'Bookmark.py')):
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1217
            self.info('loading %s', filepath)
9366
bcbc92223b35 set proper PACKAGE information for yams 0.39
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 9283
diff changeset
  1218
            with tempattr(ybo, 'PACKAGE', 'cubicweb'):
bcbc92223b35 set proper PACKAGE information for yams 0.39
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 9283
diff changeset
  1219
                self.handle_file(filepath)
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1220
        for cube in cubes:
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1221
            for filepath in self.get_schema_files(cube):
9366
bcbc92223b35 set proper PACKAGE information for yams 0.39
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 9283
diff changeset
  1222
                with tempattr(ybo, 'PACKAGE', basename(cube)):
bcbc92223b35 set proper PACKAGE information for yams 0.39
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 9283
diff changeset
  1223
                    self.handle_file(filepath)
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1224
7083
b8e35cde46e9 help pylint by explicitely defining some attributes
Alexandre Fayolle <alexandre.fayolle@logilab.fr>
parents: 6861
diff changeset
  1225
    # these are overridden by set_log_methods below
b8e35cde46e9 help pylint by explicitely defining some attributes
Alexandre Fayolle <alexandre.fayolle@logilab.fr>
parents: 6861
diff changeset
  1226
    # only defining here to prevent pylint from complaining
b8e35cde46e9 help pylint by explicitely defining some attributes
Alexandre Fayolle <alexandre.fayolle@logilab.fr>
parents: 6861
diff changeset
  1227
    info = warning = error = critical = exception = debug = lambda msg,*a,**kw: None
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1228
2459
d088d0ff48a1 move RichString and co to yams, keeping only a small monkeypatch for cw-page-template here
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2456
diff changeset
  1229
set_log_methods(CubicWebSchemaLoader, getLogger('cubicweb.schemaloader'))
d088d0ff48a1 move RichString and co to yams, keeping only a small monkeypatch for cw-page-template here
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2456
diff changeset
  1230
set_log_methods(BootstrapSchemaLoader, getLogger('cubicweb.bootstrapschemaloader'))
d088d0ff48a1 move RichString and co to yams, keeping only a small monkeypatch for cw-page-template here
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2456
diff changeset
  1231
set_log_methods(RQLExpression, getLogger('cubicweb.schema'))
d088d0ff48a1 move RichString and co to yams, keeping only a small monkeypatch for cw-page-template here
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2456
diff changeset
  1232
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1233
# _() is just there to add messages to the catalog, don't care about actual
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1234
# translation
7797
a71618a75b53 backport stable
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7782
diff changeset
  1235
MAY_USE_TEMPLATE_FORMAT = set(('managers',))
2459
d088d0ff48a1 move RichString and co to yams, keeping only a small monkeypatch for cw-page-template here
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2456
diff changeset
  1236
NEED_PERM_FORMATS = [_('text/cubicweb-page-template')]
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1237
2531
531ea4e7013e [cleanup] nicer imports
Nicolas Chauvat <nicolas.chauvat@logilab.fr>
parents: 2526
diff changeset
  1238
@monkeypatch(FormatConstraint)
3347
428f95118556 fix vocab param to avoid deprecation warning
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3287
diff changeset
  1239
def vocabulary(self, entity=None, form=None):
3401
f893f4f199fc use ._cw instead of req on appobject classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3369
diff changeset
  1240
    cw = None
3347
428f95118556 fix vocab param to avoid deprecation warning
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3287
diff changeset
  1241
    if form is None and entity is not None:
3401
f893f4f199fc use ._cw instead of req on appobject classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3369
diff changeset
  1242
        cw = entity._cw
3347
428f95118556 fix vocab param to avoid deprecation warning
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3287
diff changeset
  1243
    elif form is not None:
3401
f893f4f199fc use ._cw instead of req on appobject classes
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3369
diff changeset
  1244
        cw = form._cw
4757
5d937aeaa6fb do not check for use template permission when session is super session or integrity hooks are deactivated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4755
diff changeset
  1245
    if cw is not None:
4835
13b0b96d7982 [repo] enhanced security handling: deprecates unsafe_execute, in favor of explicit read/write security control using the `enabled_security` context manager. Also code executed on the repository side is now unsafe by default.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4834
diff changeset
  1246
        if hasattr(cw, 'write_security'): # test it's a session and not a request
4757
5d937aeaa6fb do not check for use template permission when session is super session or integrity hooks are deactivated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4755
diff changeset
  1247
            # cw is a server session
4835
13b0b96d7982 [repo] enhanced security handling: deprecates unsafe_execute, in favor of explicit read/write security control using the `enabled_security` context manager. Also code executed on the repository side is now unsafe by default.
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4834
diff changeset
  1248
            hasperm = not cw.write_security or \
4843
5f7363416765 fix hooks control method name + other litle cleanups
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4835
diff changeset
  1249
                      not cw.is_hook_category_activated('integrity') or \
7797
a71618a75b53 backport stable
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7782
diff changeset
  1250
                      cw.user.matching_groups(MAY_USE_TEMPLATE_FORMAT)
4757
5d937aeaa6fb do not check for use template permission when session is super session or integrity hooks are deactivated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4755
diff changeset
  1251
        else:
7797
a71618a75b53 backport stable
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 7782
diff changeset
  1252
            hasperm = cw.user.matching_groups(MAY_USE_TEMPLATE_FORMAT)
4757
5d937aeaa6fb do not check for use template permission when session is super session or integrity hooks are deactivated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4755
diff changeset
  1253
        if hasperm:
5d937aeaa6fb do not check for use template permission when session is super session or integrity hooks are deactivated
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4755
diff changeset
  1254
            return self.regular_formats + tuple(NEED_PERM_FORMATS)
2459
d088d0ff48a1 move RichString and co to yams, keeping only a small monkeypatch for cw-page-template here
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2456
diff changeset
  1255
    return self.regular_formats
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1256
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1257
# XXX monkey patch PyFileReader.import_erschema until bw_normalize_etype is
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1258
# necessary
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1259
orig_import_erschema = PyFileReader.import_erschema
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1260
def bw_import_erschema(self, ertype, schemamod=None, instantiate=True):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1261
    return orig_import_erschema(self, bw_normalize_etype(ertype), schemamod, instantiate)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1262
PyFileReader.import_erschema = bw_import_erschema
1451
982e8616d9a2 delete-trailing-whitespaces
sylvain.thenault@logilab.fr
parents: 1398
diff changeset
  1263
0
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1264
# XXX itou for some Statement methods
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1265
from rql import stmts
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1266
orig_get_etype = stmts.ScopeNode.get_etype
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1267
def bw_get_etype(self, name):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1268
    return orig_get_etype(self, bw_normalize_etype(name))
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1269
stmts.ScopeNode.get_etype = bw_get_etype
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1270
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1271
orig_add_main_variable_delete = stmts.Delete.add_main_variable
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1272
def bw_add_main_variable_delete(self, etype, vref):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1273
    return orig_add_main_variable_delete(self, bw_normalize_etype(etype), vref)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1274
stmts.Delete.add_main_variable = bw_add_main_variable_delete
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1275
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1276
orig_add_main_variable_insert = stmts.Insert.add_main_variable
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1277
def bw_add_main_variable_insert(self, etype, vref):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1278
    return orig_add_main_variable_insert(self, bw_normalize_etype(etype), vref)
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1279
stmts.Insert.add_main_variable = bw_add_main_variable_insert
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1280
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1281
orig_set_statement_type = stmts.Select.set_statement_type
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1282
def bw_set_statement_type(self, etype):
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1283
    return orig_set_statement_type(self, bw_normalize_etype(etype))
b97547f5f1fa Showtime !
Adrien Di Mascio <Adrien.DiMascio@logilab.fr>
parents:
diff changeset
  1284
stmts.Select.set_statement_type = bw_set_statement_type
2736
c5048502409f restore backward compat, still imported a lot
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2735
diff changeset
  1285
c5048502409f restore backward compat, still imported a lot
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 2735
diff changeset
  1286
# XXX deprecated
3978
2c95e3033f64 finish yesterday work on rql constraints:
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3968
diff changeset
  1287
4717
535705688f4f proper deprecation warning when import class that should be imported from yams
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4702
diff changeset
  1288
from yams.constraints import StaticVocabularyConstraint
535705688f4f proper deprecation warning when import class that should be imported from yams
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4702
diff changeset
  1289
8125
7070250bf50d [schema] React to yams improvement of metadata attribute handling.
Pierre-Yves David <pierre-yves.david@logilab.fr>
parents: 8027
diff changeset
  1290
RichString = moved('yams.buildobjs', 'RichString')
4717
535705688f4f proper deprecation warning when import class that should be imported from yams
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4702
diff changeset
  1291
535705688f4f proper deprecation warning when import class that should be imported from yams
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4702
diff changeset
  1292
StaticVocabularyConstraint = class_moved(StaticVocabularyConstraint)
535705688f4f proper deprecation warning when import class that should be imported from yams
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 4702
diff changeset
  1293
FormatConstraint = class_moved(FormatConstraint)
3978
2c95e3033f64 finish yesterday work on rql constraints:
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3968
diff changeset
  1294
2c95e3033f64 finish yesterday work on rql constraints:
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3968
diff changeset
  1295
PyFileReader.context['ERQLExpression'] = yobsolete(ERQLExpression)
2c95e3033f64 finish yesterday work on rql constraints:
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3968
diff changeset
  1296
PyFileReader.context['RRQLExpression'] = yobsolete(RRQLExpression)
2c95e3033f64 finish yesterday work on rql constraints:
Sylvain Thénault <sylvain.thenault@logilab.fr>
parents: 3968
diff changeset
  1297
PyFileReader.context['WorkflowableEntityType'] = WorkflowableEntityType