AccessControl 7.6__cp315-cp315-win_amd64.whl

AccessControl/ZopeSecurityPolicy.py

@@ -0,0 +1,61 @@
+##############################################################################
+#
+# Copyright (c) 2002 Zope Foundation and Contributors.
+#
+# This software is subject to the provisions of the Zope Public License,
+# Version 2.1 (ZPL).  A copy of the ZPL should accompany this distribution.
+# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY AND ALL EXPRESS OR IMPLIED
+# WARRANTIES ARE DISCLAIMED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF TITLE, MERCHANTABILITY, AGAINST INFRINGEMENT, AND FITNESS
+# FOR A PARTICULAR PURPOSE
+#
+##############################################################################
+"""Define Zope's default security policy
+"""
+
+from types import MethodType
+
+# AccessControl.Implementation inserts:
+#   ZopeSecurityPolicy, getRoles, rolesForPermissionOn
+from AccessControl.SimpleObjectPolicies import _noroles
+
+
+rolesForPermissionOn = None  # XXX:  avoid import loop
+
+tuple_or_list = (tuple, list)
+
+
+def getRoles(container, name, value, default):
+
+    global rolesForPermissionOn  # XXX:  avoid import loop
+
+    if rolesForPermissionOn is None:
+        from .PermissionRole import rolesForPermissionOn
+
+    roles = getattr(value, '__roles__', _noroles)
+    if roles is _noroles:
+        if not name or not isinstance(name, str):
+            return default
+
+        if isinstance(value, MethodType):
+            container = value.__self__
+
+        cls = getattr(container, '__class__', None)
+        if cls is None:
+            return default
+
+        roles = getattr(cls, name + '__roles__', _noroles)
+        if roles is _noroles:
+            return default
+
+        value = container
+
+    if roles is None or isinstance(roles, tuple_or_list):
+        return roles
+
+    # Do not override global variable `rolesForPermissionOn`.
+    roles_rolesForPermissionOn = getattr(roles, 'rolesForPermissionOn', None)
+    if roles_rolesForPermissionOn is not None:
+        roles = roles_rolesForPermissionOn(value)
+
+    return roles

AccessControl/__init__.py

@@ -0,0 +1,55 @@
+##############################################################################
+#
+# Copyright (c) 2002 Zope Foundation and Contributors.
+#
+# This software is subject to the provisions of the Zope Public License,
+# Version 2.1 (ZPL).  A copy of the ZPL should accompany this distribution.
+# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY AND ALL EXPRESS OR IMPLIED
+# WARRANTIES ARE DISCLAIMED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+# WARRANTIES OF TITLE, MERCHANTABILITY, AGAINST INFRINGEMENT, AND FITNESS
+# FOR A PARTICULAR PURPOSE
+#
+##############################################################################
+
+# This has to happen early so things get initialized properly
+from AccessControl.Implementation import setImplementation
+from AccessControl.safe_formatter import safe_format
+from AccessControl.safe_formatter import safe_format_map
+from AccessControl.SecurityInfo import ACCESS_NONE
+from AccessControl.SecurityInfo import ACCESS_PRIVATE
+from AccessControl.SecurityInfo import ACCESS_PUBLIC
+from AccessControl.SecurityInfo import ClassSecurityInfo
+from AccessControl.SecurityInfo import ModuleSecurityInfo
+from AccessControl.SecurityInfo import allow_class
+from AccessControl.SecurityInfo import allow_module
+from AccessControl.SecurityInfo import freeze_security_declarations
+from AccessControl.SecurityInfo import secureModule
+from AccessControl.SecurityManagement import getSecurityManager
+from AccessControl.SecurityManagement import setSecurityPolicy
+from AccessControl.SimpleObjectPolicies import allow_type
+from AccessControl.unauthorized import Unauthorized
+from AccessControl.ZopeGuards import full_write_guard
+from AccessControl.ZopeGuards import get_safe_globals
+from AccessControl.ZopeGuards import safe_builtins
+
+
+ModuleSecurityInfo('AccessControl').declarePublic('getSecurityManager')  # NOQA
+
+# allow imports of utility_builtins
+
+for name in ('string', 'math', 'random'):
+    ModuleSecurityInfo(name).setDefaultAccess('allow')
+
+ModuleSecurityInfo('DateTime').declarePublic('DateTime')  # NOQA: D001
+
+# We want to allow all methods on string type except "format".
+# That one needs special handling to avoid access to attributes.
+rules = {m: True for m in dir(str) if not m.startswith('_')}
+rules['format'] = safe_format
+rules['format_map'] = safe_format_map
+allow_type(str, rules)
+
+zodbupdate_decode_dict = {
+    'AccessControl.users User name': 'utf-8',
+    'AccessControl.users User __': 'utf-8',
+}

AccessControl/_compat.h

@@ -0,0 +1,18 @@
+/*****************************************************************************
+
+  Copyright (c) 2012 Zope Foundation and Contributors.
+  All Rights Reserved.
+
+  This software is subject to the provisions of the Zope Public License,
+  Version 2.1 (ZPL).  A copy of the ZPL should accompany this distribution.
+  THIS SOFTWARE IS PROVIDED "AS IS" AND ANY AND ALL EXPRESS OR IMPLIED
+  WARRANTIES ARE DISCLAIMED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+  WARRANTIES OF TITLE, MERCHANTABILITY, AGAINST INFRINGEMENT, AND FITNESS
+  FOR A PARTICULAR PURPOSE
+
+ ****************************************************************************/
+
+#include "Python.h"
+
+#define NATIVE_FORMAT PyUnicode_Format
+#define NATIVE_GET_SIZE PyUnicode_GET_LENGTH