2i#6dZddlZddlZddlmZddlmZddlmZm Z ddl m Z m Z ddl mZmZddlmZmZdd lmZmZdd lmZddlmZdd lmZdd lmZej<eZ d Z!dZ"dZ# ddZ$ddl%m&Z'ddl m(Z(dZ)dZ*dZ+ddZ,ddZ-dZ.y)a  django-guardian helper functions. Functions defined within this module should be considered as django-guardian's internal functionality. They are **not** guaranteed to be stable - which means they actual input parameters/output type may change in future releases. N)chain)settings)REDIRECT_FIELD_NAMEget_user_model) AnonymousUserGroup)ObjectDoesNotExistPermissionDenied)ModelQuerySet)HttpResponseForbiddenHttpResponseNotFound)render)get_content_type)NotUserNorGroupcttjjtjj|SN)ospathabspathjoin)ps E/var/www/html/acx/venv/lib/python3.12/site-packages/guardian/utils.pyrs RWW__RWW\\1%56ct}|jtji}|jj di|S)zs Returns ``User`` instance (not ``AnonymousUser``) depending on ``ANONYMOUS_USER_NAME`` configuration. )rUSERNAME_FIELDguardian_settingsANONYMOUS_USER_NAMEobjectsget)Userlookups rget_anonymous_userr%s=  D!!#4#H#H IF 4<<   %f %%rct|tr t}t|tr*|j}|t k(r|dfS|t k(rd|fSt|trt|dt r|dfSt|trt|dt rd|fSt|t r|dfSt|t rd|fStd|z)a Returns (user_obj, None) or (None, group_obj) tuple depending on what is given. Also accepts AnonymousUser instance but would return ``User`` instead - it is convenient and needed for authorization backend to support anonymous users. :param identity: either ``User`` or ``Group`` instance :raises ``NotUserNorGroup``: if cannot return proper identity instance **Examples**:: >>> from django.contrib.auth.models import User >>> user = User.objects.create(username='joe') >>> get_identity(user) (, None) >>> group = Group.objects.create(name='users') >>> get_identity(group) (None, ) >>> anon = AnonymousUser() >>> get_identity(anon) (, None) >>> get_identity("not instance") ... NotUserNorGroup: User/AnonymousUser or Group instance is required (got ) Nrz9User/AnonymousUser or Group instance is required (got %s)) isinstancerr%r modelrrlistr)identityidentity_model_types r get_identityr,%s>(M*%'(H%&nn ."2 2T> ! E )> !(D!j!n>N&O~(D!j!e&DX~(N,-~(E"X~ %'/0 11rc f|xstj}|xst}d} |rtfd|D} | s-|rt fd|D} ntfd|D} | s|rSt j r#tt j} d| _ | St jrttS|rSt jr#tt j} d| _ | St jrt t#Sddlm} | j)||Sy) NFc3TK|]}jj|!ywruserhas_perm).0permrequests r z"get_40x_or_None..ks Ldgll33D9Ls%(c3VK|] }jj|"ywrr/r2r3objr4s rr5z"get_40x_or_None..o*"5&*#*,,"7"7c"B"5&)c3VK|] }jj|"ywrr/r7s rr5z"get_40x_or_None..rr9r:iir)redirect_to_login)r LOGIN_URLrallanyr RENDER_403r TEMPLATE_403 status_code RAISE_403r r RENDER_404 TEMPLATE_404 RAISE_404r rdjango.contrib.auth.viewsr< get_full_path) r4permsr8 login_urlredirect_field_name return_403 return_404accept_global_permsany_permhas_permissionsresponser<s ` ` rget_40x_or_NonerR^s$/X//I-D1D OLeLL  !"5.3"55O""5.3"55O   ++!'+<+I+IJ'*$",,&&(* *  ++!'+<+I+IJ'*$",,((') ) C$W%:%:%<%.%8: :' r)apps)ImproperlyConfiguredc tt|}tj|dS#t$r }t dj |d}~wt$r!}t dj ||d}~wwxYw)z> Return the model that matches the guardian settings. F) require_readyz-{} must be of the form 'app_label.model_name'Nz3{} refers to model '{}' that has not been installed)getattrr django_apps get_model ValueErrorrTformat LookupError) setting_name setting_valuees rget_obj_perm_model_by_confr`s} 1<@ $$]%HH q"#R#Y#YZg#hiopp " A H HWd e  s &) A:A  A:A55A:ct}t}d}t|jj j |jj j D]H}|j tjd||jfz|j|dz }Jtjd|z|S)z Seeks and removes all object permissions entries pointing at non-existing targets. Returns number of removed objects. rzRemoving %s (pk=%d)z5Total removed orphan object permissions instances: %d) get_user_obj_perms_modelget_group_obj_perms_modelrr!r>iteratorcontent_objectloggerdebugpkdeleteinfo)UserObjectPermissionGroupObjectPermissiondeletedr3s rclean_orphan_obj_permsros4557G*22668AAC+33779BBDF    & LL.$@ A KKM qLG   KKG Nrc||St|tr |j}d|jj D}|D]}t |dd}|st ||s ||us%t |dds3|jjrN|jjd}t|t|jjk(s|cS|S)z Return the matching object permission model for the obj class Defaults to returning the generic object permission when no direct foreignkey is defined or obj is None Nc3hK|]*}|js |jr|jr|,ywr) one_to_many one_to_one auto_created)r2fs rr5z&get_obj_perms_model..s,GAMMQ\\q~~Gs02 related_modelenabledTrf) r'r __class___meta get_fieldsrW issubclassr! is_generic get_fieldr remote_fieldr()r8base_cls generic_clsfieldsattrr(fks rget_obj_perms_modelrs {#ummG--/GF !ot4 j1[(WUIt-L==++-[[**+;<#C(,ddlm}td}t|||S)z Returns model class that connects given ``obj`` and User class. If obj is not specified, then user generic object permission model returned is determined by the guardian setting 'USER_OBJ_PERMS_MODEL' r)UserObjectPermissionBaseUSER_OBJ_PERMS_MODEL)guardian.modelsrr`r)r8rrls rrcrcs$ 956LM s$<>R SSrc>ddlm}td}t|||S)z Returns model class that connects given ``obj`` and Group class. If obj is not specified, then group generic object permission model returned is determined byt the guardian setting 'GROUP_OBJ_PERMS_MODEL'. r)GroupObjectPermissionBaseGROUP_OBJ_PERMS_MODEL)rrr`r)r8rrms rrdrds$ :67NO s$=?T UUrc6t|dr t|dyy)N_guardian_perms_cacheTF)hasattrdelattr)r8s revict_obj_perms_cacherss+,,- r)NNNFFFFr)/__doc__loggingr itertoolsr django.confrdjango.contrib.authrrdjango.contrib.auth.modelsrrdjango.core.exceptionsr r django.db.modelsr r django.httpr rdjango.shortcutsr guardian.confrguardian.ctypesrguardian.exceptionsr getLogger__name__rgrr%r,rR django.appsrSrXrTr`rorrcrdrrrrrs  C;G,C#7,/   8 $ 6&61r9=9>:?",:^,7 4>TVr