pygments-ayu-syntax

<html> <head> <script> function initCodeBlock(id); { var el = document.getElementById(id); } </script> <style> .syntax { border: 1px solid #d0d0d0; background-color: #f0f0f0; margin-left: 10px; margin-right: 10px; } .syntaxheader { margin-top: 15px; margin-bottom: 0px; text-align: right; font-size: 11px; border-bottom: 0; padding: 3px; } .linenos { float: left; display: block; } .linenos pre { padding-right: 7px; padding-left: 7px; color: #666; } pre.syntax { padding: 5px; margin-top: 0px; } .syntax .cm { color: #60a0b0; font-style: italic; } /* comments */ .syntax .cm-proc { color: #007020; font-style: normal; } /* preproc */ .syntax .kw { color: #007020; font-weight: bold; } /* keywords */ .syntax .kw-pseudo { font-weight: normal; } /* pseudo keywords */ .syntax .op { color: #666666; } /* operators */ .syntax .op-word { color: #007020; font-weight: bold; } /* word operators */ .syntax .bn { color: #007020; } /* builtins */ .syntax .fun { color: #06287e; } /* func name */ .syntax .cls { color: #0e84b5; font-weight: bold; } /* class names */ .syntax .exc { color: #007020; } /* exceptions */ .syntax .var { color: #bb60d5; } /* variables */ .syntax .const { color: #60add5; } /* constants */ .syntax .entity { color: #d55537; font-weight: bold; } /* entities */ .syntax .attr { color: #4070a0; } /* attributes */ .syntax .tag { color: #062873; font-weight: bold; } /* tag names */ .syntax .deco { color: #555555; font-weight: bold; } /* decorators */ .syntax .st { color: #4070a0; } /* strings */ .syntax .st-int { color: #70a0d0; font-style: italic; } /* interpolated str */ .syntax .st-esc { color: #4070a0; font-weight: bold; } /* escaped str */ .syntax .st-re { color: #235388; } /* regular expr */ .syntax .st-sym { color: #517918; } /* symbols */ .syntax .st-oth { color: #c65d09; } /* other strings */ .syntax .nb { color: #40a070; } /* numbers */ .syntax .gen-hd { font-weight: bold; color: blue; } /* headings */ .syntax .gen-sh { font-weight: bold; color: purple; } /* subheadings */ .syntax .gen-del { color: red; } /* deleted text */ .syntax .gen-ins { color: green; } /* inserted text */ .syntax .gen-em { font-style: italic; } /* emphasized text */ .syntax .gen-sr { font-weight: bold; } /* strong emph. text */ .syntax .err { border: 1px solid red; } /* parser errors */ </style> </head> <body> <pre id="code-block" class="syntax"># -*- coding: utf-8 -*- """ pocoo.pkg.core.acl ~~~~~~~~~~~~~~~~~~ Pocoo ACL System. """ from pocoo.db import meta from pocoo.pkg.core.forum import Site, Forum, Thread from pocoo.pkg.core.user import User, Group from pocoo.pkg.core.db import users, groups, group_members, privileges, \ forums, posts, acl_mapping, acl_subjects, acl_objects class AclManager(object): """ Manager object to manage ALCs. """ STRONG_NO = -1 WEAK_NO = 0 WEAK_YES = 1 STRONG_YES = 2 def __init__(self, ctx, subject): self.ctx = ctx self.subject = subject if isinstance(subject, User): self._type = 'user' elif isinstance(subject, Group): self._type = 'group' else: raise ValueError('neither user or group specified') def allow(self, privilege, obj, force=False): """Allows the subject privilege on obj.""" return self._set(privilege, obj, 1 + bool(force)) def default(self, privilege, obj): """Sets the state for privilege on obj back to weak yes.""" return self._set(privilege, obj, 0) def deny(self, privilege, obj, force=False): """Denies the subject privilege on obj.""" return self._set(privilege, obj, -1 - bool(force)) def can_access(self, privilege, obj): """Checks if the current subject with the required privilege somehow. Either directly or when the subject is a user and one of its groups can access it.""" #XXX: maybe this could be one big query instead of 4 #XXX: this currently does not work correctly, therefore return True return True if not isinstance(obj, (Forum, Thread, Site.__class__)): raise TypeError('obj must be a forum, thread or site') privilege = privilege.upper() s = self._get_subject_join().alias('s').c def do_check(obj, tendency): db = self.ctx.engine o = self._get_object_join(obj).alias('o').c # self check r = db.execute(meta.select([acl_mapping.c.state], (acl_mapping.c.priv_id == privileges.c.priv_id) & (acl_mapping.c.subject_id == s.subject_id) & (acl_mapping.c.object_id == o.object_id) & (privileges.c.name == privilege) )) row = r.fetchone() if row is not None: if row['state'] in (self.STRONG_NO, self.STRONG_YES): return row['state'] == self.STRONG_YES tendency = row['state'] # if the controlled subject is a user check all groups if isinstance(self.subject, User): r = db.execute(meta.select([acl_mapping.c.state], (acl_mapping.c.object_id == o.object_id) & (acl_mapping.c.subject_id == groups.c.subject_id) & (groups.c.group_id == group_members.c.group_id) & (group_members.c.user_id == self.subject.user_id) )) while True: row = r.fetchone() if row is None: break state = row[0] if state in (self.STRONG_YES, self.STRONG_NO): return state == self.STRONG_YES if tendency is None: tendency = state elif tendency == self.WEAK_NO and state == self.WEAK_YES: tendency = self.WEAK_YES # check related objects if isinstance(obj, Thread): return do_check(obj.forum, tendency) elif isinstance(obj, Forum): return do_check(Site, tendency) else: return tendency return do_check(obj, None) in (self.WEAK_YES, self.STRONG_YES) def _set(self, privilege, obj, state): """Helper functions for settings privileges.""" privilege = privilege.upper() if self.subject.subject_id is None: self._bootstrap() if obj.object_id is None: self._bootstrap_object(obj) # special state "0" which means delete if not state: p = meta.select([privileges.c.priv_id], privileges.c.name == privilege) self.ctx.engine.execute(acl_mapping.delete( (acl_mapping.c.priv_id == p.c.priv_id) & (acl_mapping.c.subject_id == self.subject.subject_id) & (acl_mapping.c.object_id == obj.object_id) )) return # touch privilege and check existing mapping priv_id = self._fetch_privilege(privilege) r = self.ctx.engine.execute(meta.select([acl_mapping.c.state], (acl_mapping.c.priv_id == priv_id) & (acl_mapping.c.subject_id == self.subject.subject_id) & (acl_mapping.c.object_id == obj.object_id) )) row = r.fetchone() if row is not None: # this rule exists already if row['state'] == state: return # goddamn, same rule - different state, delete old first self._set(privilege, obj, 0) # insert new rule self.ctx.engine.execute(acl_mapping.insert(), priv_id = priv_id, subject_id = self.subject.subject_id, object_id = obj.object_id, state = state ) def _bootstrap(self): """This method is automatically called when subject_id is None and an subject_id is required.""" r = self.ctx.engine.execute(acl_subjects.insert(), subject_type = self._type ) self.subject.subject_id = r.last_inserted_ids()[0] self.subject.save() def _bootstrap_object(self, obj): """Like _bootstrap but works for objects.""" objtype = self._get_object_type(obj) r = self.ctx.engine.execute(acl_objects.insert(), object_type = objtype ) obj.object_id = r.last_inserted_ids()[0] obj.save() def _get_object_type(self, obj): if isinstance(obj, Forum): return 'forum' elif isinstance(obj, Thread): return 'thread' elif obj is Site: return 'site' raise TypeError('obj isn\'t a forum or thread') def _get_object_join(self, obj): """Returns a subjoin for the object id.""" t = self._get_object_type(obj) if t == 'forum': return meta.select([forums.c.object_id], forums.c.forum_id == obj.forum_id ) elif t == 'thread': return meta.select([posts.c.object_id], posts.c.post_id == obj.post_id ) else: # XXX: it works ^^ # i really want something like meta.select('0 as group_id') class Fake(object): def alias(self, n): class _C(object): class c(object): object_id = 0 return _C return Fake() def _get_subject_join(self): """Returns a subjoin for the subject id.""" if self._type == 'user': return meta.select([users.c.subject_id], users.c.user_id == self.subject.user_id ) return meta.select([groups.c.subject_id], groups.c.group_id == self.subject.group_id ) def _fetch_privilege(self, name): """Returns the priv_id for the given privilege. If it doesn\'t exist by now the system will create a new privilege.""" r = self.ctx.engine.execute(meta.select([privileges.c.priv_id], privileges.c.name == name )) row = r.fetchone() if row is not None: return row[0] r = self.ctx.engine.execute(privileges.insert(), name = name ) return r.last_inserted_ids()[0] def __repr__(self): if self._type == 'user': id_ = self.subject.user_id else: id_ = self.subject.group_id if self.subject.subject_id is None: return '<%s %s:%d inactive>' % ( self.__class__.__name__, self._type, id_ ) return '<%s %s:%d active as %d>' % ( self.__class__.__name__, self._type, id_, self.subject.subject_id )