syft-rds 0.1.1.dev1__tar.gz → 0.1.1.dev2__tar.gz

{syft_rds-0.1.1.dev1 → syft_rds-0.1.1.dev2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: syft-rds
-Version: 0.1.1.dev1
+Version: 0.1.1.dev2
 Summary: Doing remote data science with SyftBox
 License-File: LICENSE
 Requires-Python: >=3.9

{syft_rds-0.1.1.dev1 → syft_rds-0.1.1.dev2}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "syft-rds"
-version = "0.1.1-dev.1"
+version = "0.1.1-dev.2"
 description = "Doing remote data science with SyftBox"
 readme = "README.md"
 requires-python = ">=3.9"

{syft_rds-0.1.1.dev1 → syft_rds-0.1.1.dev2}/src/syft_rds/__init__.py

@@ -1,4 +1,4 @@
-__version__ = "0.1.1-dev.1"
+__version__ = "0.1.1-dev.2"
 
 from syft_rds.utils.paths import RDS_NOTEBOOKS_PATH, RDS_REPO_PATH  # noqa
 from syft_rds.jupyter_utils.display import display  # noqa

{syft_rds-0.1.1.dev1 → syft_rds-0.1.1.dev2}/src/syft_rds/server/routers/job_router.py

@@ -4,6 +4,7 @@ from loguru import logger
 from syft_core import SyftBoxURL
 from syft_event import SyftEvents
 from syft_event.types import Request
+import yaml
 from syft_rds.models.models import (
     Dataset,
     GetAllRequest,
@@ -140,6 +141,12 @@ def _handle_enclave_update(existing_item: Job, app: SyftEvents) -> None:
 
     enclave_data_dir = client.app_data("enclave") / "data" / existing_item.enclave
     enclave_data_dir.mkdir(parents=True, exist_ok=True)
+    add_permission_rule(
+        path=enclave_data_dir,
+        pattern="**",
+        read=[existing_item.enclave],
+        write=[],
+    )
 
     dataset_store: YAMLStore[Dataset] = app.state["dataset_store"]
     dataset: Dataset = dataset_store.get_one(name=existing_item.dataset_name)
@@ -167,3 +174,39 @@ def _handle_enclave_update(existing_item: Job, app: SyftEvents) -> None:
         public_key_path=enclave_public_key,
         output_file_path=output_file_path,
     )
+
+
+# TODO: Move this to syft core
+def add_permission_rule(path: str, pattern: str, read: list[str], write: list[str]):
+    """
+    Adds or updates a permission rule in syft.pub.yaml in the given path (must be a folder).
+    If a rule with the same pattern exists, update only missing read/write entries (no duplicates).
+    Raises ValueError if path is not a directory.
+    """
+    folder = Path(path)
+    if not folder.is_dir():
+        raise ValueError(f"Provided path '{path}' is not a directory.")
+    yaml_file = folder / "syft.pub.yaml"
+    rule = {"pattern": pattern, "access": {"read": read, "write": write}}
+    if yaml_file.exists():
+        with open(yaml_file, "r") as f:
+            data = yaml.safe_load(f) or {}
+    else:
+        data = {}
+    if "rules" not in data or not isinstance(data["rules"], list):
+        data["rules"] = []
+    # Check for existing pattern
+    for existing_rule in data["rules"]:
+        if existing_rule.get("pattern") == pattern:
+            # Update read and write lists, avoiding duplicates
+            existing_access = existing_rule.setdefault("access", {})
+            for key, new_values in [("read", read), ("write", write)]:
+                existing = set(existing_access.get(key, []))
+                updated = list(existing.union(new_values))
+                existing_access[key] = updated
+            break
+    else:
+        # No existing pattern, append new rule
+        data["rules"].append(rule)
+    with open(yaml_file, "w") as f:
+        yaml.safe_dump(data, f, sort_keys=False)