FM / v3

/usr/lib/python2.6/site-packages/openstackclient/identity/v3/

/usr/lib/python2.6/site-packages/openstackclient/identity/v3

Name	Size	Mode	Actions
catalog.py	3132	0644	edit dl rm
catalog.pyc	3554	0644	edit dl rm
consumer.py	4575	0644	edit dl rm
consumer.pyc	6030	0644	edit dl rm
credential.py	6437	0644	edit dl rm
credential.pyc	7209	0644	edit dl rm
domain.py	6418	0644	edit dl rm
domain.pyc	7144	0644	edit dl rm
ec2creds.py	7016	0644	edit dl rm
ec2creds.pyc	7275	0644	edit dl rm
endpoint.py	9047	0644	edit dl rm
endpoint.pyc	9143	0644	edit dl rm
federation_protocol.py	7098	0644	edit dl rm
federation_protocol.pyc	7616	0644	edit dl rm
group.py	12320	0644	edit dl rm
group.pyc	12390	0644	edit dl rm
identity_provider.py	8249	0644	edit dl rm
identity_provider.pyc	8303	0644	edit dl rm
mapping.py	6596	0644	edit dl rm
mapping.pyc	7996	0644	edit dl rm
policy.py	5466	0644	edit dl rm
policy.pyc	6785	0644	edit dl rm
project.py	11929	0644	edit dl rm
project.pyc	10268	0644	edit dl rm
region.py	6265	0644	edit dl rm
region.pyc	7129	0644	edit dl rm
role.py	12983	0644	edit dl rm
role.pyc	12124	0644	edit dl rm
role_assignment.py	5661	0644	edit dl rm
role_assignment.pyc	4240	0644	edit dl rm
service.py	6735	0644	edit dl rm
service.pyc	7479	0644	edit dl rm
service_provider.py	7274	0644	edit dl rm
service_provider.pyc	7905	0644	edit dl rm
token.py	6270	0644	edit dl rm
token.pyc	6443	0644	edit dl rm
trust.py	7044	0644	edit dl rm
trust.pyc	7378	0644	edit dl rm
unscoped_saml.py	2818	0644	edit dl rm
unscoped_saml.pyc	3676	0644	edit dl rm
user.py	14451	0644	edit dl rm
user.pyc	11962	0644	edit dl rm
__init__.py	0	0644	edit dl rm
__init__.pyc	171	0644	edit dl rm

Edit: /usr/lib/python2.6/site-packages/openstackclient/identity/v3/role.py (12983B)

#   Copyright 2012-2013 OpenStack Foundation
#
#   Licensed under the Apache License, Version 2.0 (the "License"); you may
#   not use this file except in compliance with the License. You may obtain
#   a copy of the License at
#
#        http://www.apache.org/licenses/LICENSE-2.0
#
#   Unless required by applicable law or agreed to in writing, software
#   distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
#   WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
#   License for the specific language governing permissions and limitations
#   under the License.
#

"""Identity v3 Role action implementations"""

import logging
import six
import sys

from cliff import command
from cliff import lister
from cliff import show
from keystoneclient import exceptions as ksc_exc

from openstackclient.common import utils
from openstackclient.i18n import _  # noqa
from openstackclient.identity import common

def _add_identity_and_resource_options_to_parser(parser):
    domain_or_project = parser.add_mutually_exclusive_group()
    domain_or_project.add_argument(
        '--domain',
        metavar='<domain>',
        help='Include <domain> (name or ID)',
    )
    domain_or_project.add_argument(
        '--project',
        metavar='<project>',
        help='Include <project> (name or ID)',
    )
    user_or_group = parser.add_mutually_exclusive_group()
    user_or_group.add_argument(
        '--user',
        metavar='<user>',
        help='Include <user> (name or ID)',
    )
    user_or_group.add_argument(
        '--group',
        metavar='<group>',
        help='Include <group> (name or ID)',
    )
    common.add_group_domain_option_to_parser(parser)
    common.add_project_domain_option_to_parser(parser)
    common.add_user_domain_option_to_parser(parser)
    common.add_inherited_option_to_parser(parser)

def _process_identity_and_resource_options(parsed_args,
                                           identity_client_manager):
    kwargs = {}
    if parsed_args.user and parsed_args.domain:
        kwargs['user'] = common.find_user(
            identity_client_manager,
            parsed_args.user,
            parsed_args.user_domain,
        ).id
        kwargs['domain'] = common.find_domain(
            identity_client_manager,
            parsed_args.domain,
        ).id
    elif parsed_args.user and parsed_args.project:
        kwargs['user'] = common.find_user(
            identity_client_manager,
            parsed_args.user,
            parsed_args.user_domain,
        ).id
        kwargs['project'] = common.find_project(
            identity_client_manager,
            parsed_args.project,
            parsed_args.project_domain,
        ).id
    elif parsed_args.group and parsed_args.domain:
        kwargs['group'] = common.find_group(
            identity_client_manager,
            parsed_args.group,
            parsed_args.group_domain,
        ).id
        kwargs['domain'] = common.find_domain(
            identity_client_manager,
            parsed_args.domain,
        ).id
    elif parsed_args.group and parsed_args.project:
        kwargs['group'] = common.find_group(
            identity_client_manager,
            parsed_args.group,
            parsed_args.group_domain,
        ).id
        kwargs['project'] = common.find_project(
            identity_client_manager,
            parsed_args.project,
            parsed_args.project_domain,
        ).id
    kwargs['os_inherit_extension_inherited'] = parsed_args.inherited
    return kwargs

class AddRole(command.Command):
    """Adds a role to a user or group on a domain or project"""

log = logging.getLogger(__name__ + '.AddRole')

def get_parser(self, prog_name):
        parser = super(AddRole, self).get_parser(prog_name)
        parser.add_argument(
            'role',
            metavar='<role>',
            help='Role to add to <user> (name or ID)',
        )
        _add_identity_and_resource_options_to_parser(parser)
        return parser

@utils.log_method(log)
    def take_action(self, parsed_args):
        identity_client = self.app.client_manager.identity

if (not parsed_args.user and not parsed_args.domain
                and not parsed_args.group and not parsed_args.project):
            return

role = utils.find_resource(
            identity_client.roles,
            parsed_args.role,
        )

kwargs = _process_identity_and_resource_options(
            parsed_args, self.app.client_manager.identity)
        if not kwargs:
            sys.stderr.write("Role not added, incorrect set of arguments "
                             "provided. See openstack --help for more "
                             "details\n")
            return

identity_client.roles.grant(role.id, **kwargs)
        return

class CreateRole(show.ShowOne):
    """Create new role"""

log = logging.getLogger(__name__ + '.CreateRole')

def get_parser(self, prog_name):
        parser = super(CreateRole, self).get_parser(prog_name)
        parser.add_argument(
            'name',
            metavar='<role-name>',
            help='New role name',
        )
        parser.add_argument(
            '--or-show',
            action='store_true',
            help=_('Return existing role'),
        )
        return parser

@utils.log_method(log)
    def take_action(self, parsed_args):
        identity_client = self.app.client_manager.identity

try:
            role = identity_client.roles.create(name=parsed_args.name)
        except ksc_exc.Conflict as e:
            if parsed_args.or_show:
                role = utils.find_resource(identity_client.roles,
                                           parsed_args.name)
                self.log.info('Returning existing role %s', role.name)
            else:
                raise e

role._info.pop('links')
        return zip(*sorted(six.iteritems(role._info)))

class DeleteRole(command.Command):
    """Delete role(s)"""

log = logging.getLogger(__name__ + '.DeleteRole')

def get_parser(self, prog_name):
        parser = super(DeleteRole, self).get_parser(prog_name)
        parser.add_argument(
            'roles',
            metavar='<role>',
            nargs="+",
            help='Role(s) to delete (name or ID)',
        )
        return parser

@utils.log_method(log)
    def take_action(self, parsed_args):
        identity_client = self.app.client_manager.identity

for role in parsed_args.roles:
            role_obj = utils.find_resource(
                identity_client.roles,
                role,
            )
            identity_client.roles.delete(role_obj.id)
        return

class ListRole(lister.Lister):
    """List roles"""

log = logging.getLogger(__name__ + '.ListRole')

def get_parser(self, prog_name):
        parser = super(ListRole, self).get_parser(prog_name)
        _add_identity_and_resource_options_to_parser(parser)
        return parser

def take_action(self, parsed_args):
        self.log.debug('take_action(%s)' % parsed_args)
        identity_client = self.app.client_manager.identity

if parsed_args.user:
            user = common.find_user(
                identity_client,
                parsed_args.user,
                parsed_args.user_domain,
            )
        elif parsed_args.group:
            group = common.find_group(
                identity_client,
                parsed_args.group,
                parsed_args.group_domain,
            )

if parsed_args.domain:
            domain = common.find_domain(
                identity_client,
                parsed_args.domain,
            )
        elif parsed_args.project:
            project = common.find_project(
                identity_client,
                parsed_args.project,
                parsed_args.project_domain,
            )

# no user or group specified, list all roles in the system
        if not parsed_args.user and not parsed_args.group:
            columns = ('ID', 'Name')
            data = identity_client.roles.list()
        elif parsed_args.user and parsed_args.domain:
            columns = ('ID', 'Name', 'Domain', 'User')
            data = identity_client.roles.list(
                user=user,
                domain=domain,
            )
            for user_role in data:
                user_role.user = user.name
                user_role.domain = domain.name
        elif parsed_args.user and parsed_args.project:
            columns = ('ID', 'Name', 'Project', 'User')
            data = identity_client.roles.list(
                user=user,
                project=project,
            )
            for user_role in data:
                user_role.user = user.name
                user_role.project = project.name
        elif parsed_args.user:
            columns = ('ID', 'Name')
            data = identity_client.roles.list(
                user=user,
                domain='default',
            )
        elif parsed_args.group and parsed_args.domain:
            columns = ('ID', 'Name', 'Domain', 'Group')
            data = identity_client.roles.list(
                group=group,
                domain=domain,
            )
            for group_role in data:
                group_role.group = group.name
                group_role.domain = domain.name
        elif parsed_args.group and parsed_args.project:
            columns = ('ID', 'Name', 'Project', 'Group')
            data = identity_client.roles.list(
                group=group,
                project=project,
            )
            for group_role in data:
                group_role.group = group.name
                group_role.project = project.name
        else:
            sys.stderr.write("Error: If a user or group is specified, either "
                             "--domain or --project must also be specified to "
                             "list role grants.\n")
            return ([], [])

return (columns,
                (utils.get_item_properties(
                    s, columns,
                    formatters={},
                ) for s in data))

class RemoveRole(command.Command):
    """Remove role from domain/project : user/group"""

log = logging.getLogger(__name__ + '.RemoveRole')

def get_parser(self, prog_name):
        parser = super(RemoveRole, self).get_parser(prog_name)
        parser.add_argument(
            'role',
            metavar='<role>',
            help='Role to remove (name or ID)',
        )
        _add_identity_and_resource_options_to_parser(parser)
        return parser

@utils.log_method(log)
    def take_action(self, parsed_args):
        identity_client = self.app.client_manager.identity

if (not parsed_args.user and not parsed_args.domain
                and not parsed_args.group and not parsed_args.project):
            return

role = utils.find_resource(
            identity_client.roles,
            parsed_args.role,
        )

kwargs = _process_identity_and_resource_options(
            parsed_args, self.app.client_manager.identity)
        if not kwargs:
            sys.stderr.write("Role not removed, incorrect set of arguments \
            provided. See openstack --help for more details\n")
            return

identity_client.roles.revoke(role.id, **kwargs)
        return

class SetRole(command.Command):
    """Set role properties"""

log = logging.getLogger(__name__ + '.SetRole')

def get_parser(self, prog_name):
        parser = super(SetRole, self).get_parser(prog_name)
        parser.add_argument(
            'role',
            metavar='<role>',
            help='Role to modify (name or ID)',
        )
        parser.add_argument(
            '--name',
            metavar='<name>',
            help='Set role name',
        )
        return parser

@utils.log_method(log)
    def take_action(self, parsed_args):
        identity_client = self.app.client_manager.identity

if not parsed_args.name:
            return

role = utils.find_resource(
            identity_client.roles,
            parsed_args.role,
        )

identity_client.roles.update(role.id, name=parsed_args.name)
        return

class ShowRole(show.ShowOne):
    """Display role details"""

log = logging.getLogger(__name__ + '.ShowRole')

def get_parser(self, prog_name):
        parser = super(ShowRole, self).get_parser(prog_name)
        parser.add_argument(
            'role',
            metavar='<role>',
            help='Role to display (name or ID)',
        )
        return parser

@utils.log_method(log)
    def take_action(self, parsed_args):
        identity_client = self.app.client_manager.identity

role = utils.find_resource(
            identity_client.roles,
            parsed_args.role,
        )

role._info.pop('links')
        return zip(*sorted(six.iteritems(role._info)))

cmd: