25050139377

Committed 28 Apr 2026 11:27AM UTC coverage: 82.841% (-0.008%) from 82.849%

Build # 25050139377

Build Type

push

github

Committed by

jan-jockusch

Commit Message

Add caching to guarded_import to boost performance

Using "import" in Python Scripts triggers the execution of
guarded_import each time. This performs a security test and
then the import itself. The import is fast because the Python
interpreter caches this. The security test is costly, and always
yields the same result. This patch inserts a cache to skip this
test on repeated executions, speeding up the Python Scripts.

Coverage Stats

1487 of 2008 branches covered (74.05%)

Branch coverage included in aggregate %.

5 of 5 new or added lines in 1 file covered. (100.0%)

2 existing lines in 1 file now uncovered.

5103 of 5947 relevant lines covered (85.81%)

4.29 hits per line

Source File
Press 'n' to go to next uncovered line, 'b' for previous

82.68

/src/AccessControl/SecurityInfo.py

##############################################################################
#
# Copyright (c) 2002 Zope Foundation and Contributors.
#
# This software is subject to the provisions of the Zope Public License,
# Version 2.1 (ZPL).  A copy of the ZPL should accompany this distribution.
# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY AND ALL EXPRESS OR IMPLIED
# WARRANTIES ARE DISCLAIMED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
# WARRANTIES OF TITLE, MERCHANTABILITY, AGAINST INFRINGEMENT, AND FITNESS
# FOR A PARTICULAR PURPOSE
#
##############################################################################
"""SecurityInfo objects and access control constants.

   SecurityInfo objects are used in class definitions to allow
   a declarative style of associating access control information
   with class attributes.

   More information on using SecurityInfo and guide to Zope security
   for developers can be found in the dev.zope.org "Declarative Security"
   project:

   http://dev.zope.org/Wikis/DevSite/Projects/DeclarativeSecurity

   While SecurityInfo objects largely remove the need for Python
   programmers to care about the underlying implementation, there
   are several constants defined that should be used by code that
   must set __roles__ attributes directly. (the constants are also
   accessible from the AccessControl namespace). The defined access
   control constants and their meanings are:

   ACCESS_PUBLIC:  accessible from restricted code and possibly
                   through the web (if object has a docstring)

   ACCESS_PRIVATE: accessible only from python code

   ACCESS_NONE:    no access

"""

import sys
from logging import getLogger

from Acquisition import Implicit
from Persistence import Persistent

from AccessControl.class_init import InitializeClass
from AccessControl.ImplPython import _what_not_even_god_should_do


# always patch Persistent before ClassSecurityInfo is used
Persistent.__class_init__ = InitializeClass

LOG = getLogger('SecurityInfo')

# Security constants - these are imported into the AccessControl
# namespace and can be referenced as AccessControl.PUBLIC etc.

ACCESS_NONE = _what_not_even_god_should_do
ACCESS_PRIVATE = ()
ACCESS_PUBLIC = None

_marker = []


class SecurityInfo(Implicit):
    """Encapsulate security information."""

    __security_info__ = 1

    __roles__ = ACCESS_PRIVATE

    def __init__(self):
        self.names = {}
        self.roles = {}
        self._unused_protected_decorators = set()

    def _setaccess(self, names, access):
        for name in names:
            if self.names.get(name, access) != access:
                LOG.warning(
                    f'Conflicting security declarations for {name!r}')
                self._warnings = 1
            self.names[name] = access

    declarePublic__roles__ = ACCESS_PRIVATE

    def declarePublic(self, name, *names):
        """Declare names to be publicly accessible."""
        self._setaccess((name,) + names, ACCESS_PUBLIC)

    declarePrivate__roles__ = ACCESS_PRIVATE

    def declarePrivate(self, name, *names):
        """Declare names to be inaccessible to restricted code."""
        self._setaccess((name,) + names, ACCESS_PRIVATE)

    declareProtected__roles__ = ACCESS_PRIVATE

    def declareProtected(self, permission_name, name, *names):
        """Declare names to be associated with a permission."""
        self._setaccess((name,) + names, permission_name)

    declareObjectPublic__roles__ = ACCESS_PRIVATE

    def declareObjectPublic(self):
        """Declare the object to be publicly accessible."""
        self._setaccess(('',), ACCESS_PUBLIC)

    declareObjectPrivate__roles__ = ACCESS_PRIVATE

    def declareObjectPrivate(self):
        """Declare the object to be inaccessible to restricted code."""
        self._setaccess(('',), ACCESS_PRIVATE)

    declareObjectProtected__roles__ = ACCESS_PRIVATE

    def declareObjectProtected(self, permission_name):
        """Declare the object to be associated with a permission."""
        self._setaccess(('',), permission_name)

    public__roles__ = ACCESS_PRIVATE

    def public(self, func):
        """Decorate a function to be publicly accessible."""
        self.declarePublic(func.__name__)  # NOQA: D001
        return func

    private__roles__ = ACCESS_PRIVATE

    def private(self, func):
        """Decorate a function to be inaccessible to restricted code."""
        self.declarePrivate(func.__name__)  # NOQA: D001
        return func

    protected__roles__ = ACCESS_PRIVATE

    def protected(self, permission_name):
        """Return a decorator to associate a function with a permission."""
        # the decorator returned is remembered in a set and will
        # remove itself upon call. self.apply will check for an empty
        # set and raise an AssertionError otherwise.
        key = f"'{permission_name}':{id(lambda x: x)}"

        def decor(func):
            self.declareProtected(permission_name, func.__name__)  # NOQA: D001
            self._unused_protected_decorators.remove(key)
            return func
        # make sure our key algo creates unique-enough keys
        if key in self._unused_protected_decorators:
            raise KeyError(f"Duplicate key: {key}")
        self._unused_protected_decorators.add(key)
        return decor

    setPermissionDefault__roles__ = ACCESS_PRIVATE

    def setPermissionDefault(self, permission_name, roles):
        """Declare default roles for a permission"""
        rdict = {}
        for role in roles:
            rdict[role] = 1
        if self.roles.get(permission_name, rdict) != rdict:
            LOG.warning('Conflicting default role'
                        ' declarations for permission "%s"' % permission_name)
            self._warnings = 1
        self.roles[permission_name] = rdict

    setDefaultAccess__roles__ = ACCESS_PRIVATE

    def setDefaultAccess(self, access):
        """Declare default attribute access policy.

        This should be a boolean value, a map of attribute names to
        booleans, or a callable (name, value) -> boolean.
        """
        if isinstance(access, str):
            access = access.lower()
            if access == 'allow':
                access = 1
            elif access == 'deny':
                access = 0
            else:
                raise ValueError("'allow' or 'deny' expected")
        self.access = access


class ClassSecurityInfo(SecurityInfo):
    """Encapsulate security information for class objects."""

    __roles__ = ACCESS_PRIVATE

    apply__roles__ = ACCESS_PRIVATE

    def apply(self, classobj):
        """Apply security information to the given class object."""

        # make sure all decorators handed out by security.protected were used
        if self._unused_protected_decorators:
            msg = "Class '%r' has %d non-decorator security.protected calls!"
            raise AssertionError(msg % (classobj,
                                 len(self._unused_protected_decorators)))

        cdict = classobj.__dict__

        # Check the class for an existing __ac_permissions__ and
        # incorporate that if present to support older classes or
        # classes that haven't fully switched to using SecurityInfo.
        if '__ac_permissions__' in cdict:
            for item in cdict['__ac_permissions__']:
                permission_name = item[0]
                self._setaccess(item[1], permission_name)
                if len(item) > 2:
                    self.setPermissionDefault(permission_name, item[2])

        # Set __roles__ for attributes declared public or private.
        # Collect protected attribute names in ac_permissions.
        ac_permissions = {}
        for name, access in self.names.items():
            if access in (ACCESS_PRIVATE, ACCESS_PUBLIC, ACCESS_NONE):
                setattr(classobj, '%s__roles__' % name, access)
            else:
                if access not in ac_permissions:
                    ac_permissions[access] = []
                ac_permissions[access].append(name)

        # Now transform our nested dict structure into the nested tuple
        # structure expected of __ac_permissions__ attributes and set
        # it on the class object.
        getRoles = self.roles.get
        __ac_permissions__ = []
        permissions = sorted(ac_permissions.items())
        for permission_name, names in permissions:
            roles = getRoles(permission_name, ())
            if len(roles):
                entry = (permission_name, tuple(names), tuple(roles.keys()))
            else:
                entry = (permission_name, tuple(names))
            __ac_permissions__.append(entry)
        for permission_name, roles in self.roles.items():
            if permission_name not in ac_permissions:
                entry = (permission_name, (), tuple(roles.keys()))
                __ac_permissions__.append(entry)
        setattr(classobj, '__ac_permissions__', tuple(__ac_permissions__))

        # Take care of default attribute access policy
        access = getattr(self, 'access', _marker)
        if access is not _marker:
            setattr(classobj, '__allow_access_to_unprotected_subobjects__',
                    access)

        if getattr(self, '_warnings', None):
            LOG.warning('Class "%s" had conflicting'
                        ' security declarations' % classobj.__name__)


class ClassSecurityInformation(ClassSecurityInfo):
    # Default policy is disallow
    access = 0


_moduleSecurity = {}
_appliedModuleSecurity = {}


def secureModule(mname, *imp):
    modsec = _moduleSecurity.get(mname, None)
    if modsec is None:
        if mname in _appliedModuleSecurity:
            return sys.modules[mname]
        return  # no MSI, no module

    if imp:
        __import__(mname, *imp)
    module = sys.modules[mname]
    modsec.apply(module.__dict__)
    _appliedModuleSecurity[mname] = modsec
    try:
        del _moduleSecurity[mname]
    except KeyError:
        # In case of access from multiple threads, the del might fail, but that
        # is OK.
        pass
    return module


def ModuleSecurityInfo(module_name=None):
    if module_name is not None:
        modsec = _moduleSecurity.get(module_name, None)
        if modsec is not None:
            return modsec
        modsec = _appliedModuleSecurity.get(module_name, None)
        if modsec is not None:
            # Move security info back to to-apply dict (needed for product
            # refresh). Also invoke this check for parent packages already
            # applied
            del _appliedModuleSecurity[module_name]
            _moduleSecurity[module_name] = modsec
            dot = module_name.rfind('.')
            if dot > 0:
                ModuleSecurityInfo(module_name[:dot])
            return modsec
        dot = module_name.rfind('.')
        if dot > 0:
            # If the module is in a package, recursively make sure
            # there are security declarations for the package steps
            # leading to the module
            modname = module_name[dot + 1:]
            pmodsec = ModuleSecurityInfo(module_name[:dot])
            if modname not in pmodsec.names:
                pmodsec.declarePublic(modname)  # NOQA: D001
    return _ModuleSecurityInfo(module_name)


class _ModuleSecurityInfo(SecurityInfo):
    """Encapsulate security information for modules."""

    __roles__ = ACCESS_PRIVATE
    access = False  # deny by default, prevent acquiring 'access' from module

    def __init__(self, module_name=None):
        self.names = {}
        if module_name is not None:
            global _moduleSecurity  # noqa: F824
            _moduleSecurity[module_name] = self

    __call____roles__ = ACCESS_PRIVATE

    def __call__(self, name, value):
        """Callback for __allow_access_to_unprotected_subobjects__ hook."""
        access = self.names.get(name, _marker)
        if access is not _marker:
            return access == ACCESS_PUBLIC

        return getattr(self, 'access', 0)

    apply__roles__ = ACCESS_PRIVATE

    def apply(self, dict):
        """Apply security information to the given module dict."""

        # Start with default attribute access policy
        access = getattr(self, 'access', _marker)
        if access is not _marker or len(self.names):
            dict['__allow_access_to_unprotected_subobjects__'] = self

        if getattr(self, '_warnings', None):
            LOG.warning('Module "%s" had conflicting'
                        ' security declarations' % dict['__name__'])

    declareProtected__roles__ = ACCESS_PRIVATE

    def declareProtected(self, permission_name, *names):
        """Cannot declare module names protected."""
        pass

    declareObjectProtected__roles__ = ACCESS_PRIVATE

    def declareObjectProtected(self, permission_name):
        """Cannot declare module protected."""
        pass

    setDefaultRoles__roles__ = ACCESS_PRIVATE

    def setDefaultRoles(self, permission_name, roles):
        """Cannot set default roles for permissions in a module."""
        pass

# Handy little utility functions


def allow_module(module_name):
    """Allow a module and all its contents to be used from a
    restricted Script. The argument module_name may be a simple
    or dotted module or package name. Note that if a package
    path is given, all modules in the path will be available."""
    ModuleSecurityInfo(module_name).setDefaultAccess(1)
    dot = module_name.find('.')
    while dot > 0:
        ModuleSecurityInfo(module_name[:dot]).setDefaultAccess(1)
        dot = module_name.find('.', dot + 1)


def allow_class(Class):
    """Allow a class and all of its methods to be used from a
    restricted Script.  The argument Class must be a class."""
    Class._security = sec = ClassSecurityInfo()
    sec.declareObjectPublic()
    sec.setDefaultAccess(1)
    sec.apply(Class)
    InitializeClass(Class)

1	##############################################################################
2	#
3	# Copyright (c) 2002 Zope Foundation and Contributors.
4	#
5	# This software is subject to the provisions of the Zope Public License,
6	# Version 2.1 (ZPL). A copy of the ZPL should accompany this distribution.
7	# THIS SOFTWARE IS PROVIDED "AS IS" AND ANY AND ALL EXPRESS OR IMPLIED
8	# WARRANTIES ARE DISCLAIMED, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
9	# WARRANTIES OF TITLE, MERCHANTABILITY, AGAINST INFRINGEMENT, AND FITNESS
10	# FOR A PARTICULAR PURPOSE
11	#
12	##############################################################################
13	"""SecurityInfo objects and access control constants.	5✔
14
15	SecurityInfo objects are used in class definitions to allow
16	a declarative style of associating access control information
17	with class attributes.
18
19	More information on using SecurityInfo and guide to Zope security
20	for developers can be found in the dev.zope.org "Declarative Security"
21	project:
22
23	http://dev.zope.org/Wikis/DevSite/Projects/DeclarativeSecurity
24
25	While SecurityInfo objects largely remove the need for Python
26	programmers to care about the underlying implementation, there
27	are several constants defined that should be used by code that
28	must set __roles__ attributes directly. (the constants are also
29	accessible from the AccessControl namespace). The defined access
30	control constants and their meanings are:
31
32	ACCESS_PUBLIC: accessible from restricted code and possibly
33	through the web (if object has a docstring)
34
35	ACCESS_PRIVATE: accessible only from python code
36
37	ACCESS_NONE: no access
38
39	"""
40
41	import sys	5✔
42	from logging import getLogger	5✔
43
44	from Acquisition import Implicit	5✔
45	from Persistence import Persistent	5✔
46
47	from AccessControl.class_init import InitializeClass	5✔
48	from AccessControl.ImplPython import _what_not_even_god_should_do	5✔
49
50
51	# always patch Persistent before ClassSecurityInfo is used
52	Persistent.__class_init__ = InitializeClass	5✔
53
54	LOG = getLogger('SecurityInfo')	5✔
55
56	# Security constants - these are imported into the AccessControl
57	# namespace and can be referenced as AccessControl.PUBLIC etc.
58
59	ACCESS_NONE = _what_not_even_god_should_do	5✔
60	ACCESS_PRIVATE = ()	5✔
61	ACCESS_PUBLIC = None	5✔
62
63	_marker = []	5✔
64
65
66	class SecurityInfo(Implicit):	5✔
67	"""Encapsulate security information."""
68
69	__security_info__ = 1	5✔
70
71	__roles__ = ACCESS_PRIVATE	5✔
72
73	def __init__(self):	5✔
74	self.names = {}	5✔
75	self.roles = {}	5✔
76	self._unused_protected_decorators = set()	5✔
77
78	def _setaccess(self, names, access):	5✔
79	for name in names:	5✔
80	if self.names.get(name, access) != access:	5!
81	LOG.warning(	×
82	f'Conflicting security declarations for {name!r}')
83	self._warnings = 1	×
84	self.names[name] = access	5✔
85
86	declarePublic__roles__ = ACCESS_PRIVATE	5✔
87
88	def declarePublic(self, name, *names):	5✔
89	"""Declare names to be publicly accessible."""
90	self._setaccess((name,) + names, ACCESS_PUBLIC)	5✔
91
92	declarePrivate__roles__ = ACCESS_PRIVATE	5✔
93
94	def declarePrivate(self, name, *names):	5✔
95	"""Declare names to be inaccessible to restricted code."""
96	self._setaccess((name,) + names, ACCESS_PRIVATE)	5✔
97
98	declareProtected__roles__ = ACCESS_PRIVATE	5✔
99
100	def declareProtected(self, permission_name, name, *names):	5✔
101	"""Declare names to be associated with a permission."""
102	self._setaccess((name,) + names, permission_name)	5✔
103
104	declareObjectPublic__roles__ = ACCESS_PRIVATE	5✔
105
106	def declareObjectPublic(self):	5✔
107	"""Declare the object to be publicly accessible."""
108	self._setaccess(('',), ACCESS_PUBLIC)	×
109
110	declareObjectPrivate__roles__ = ACCESS_PRIVATE	5✔
111
112	def declareObjectPrivate(self):	5✔
113	"""Declare the object to be inaccessible to restricted code."""
114	self._setaccess(('',), ACCESS_PRIVATE)	×
115
116	declareObjectProtected__roles__ = ACCESS_PRIVATE	5✔
117
118	def declareObjectProtected(self, permission_name):	5✔
119	"""Declare the object to be associated with a permission."""
120	self._setaccess(('',), permission_name)	×
121
122	public__roles__ = ACCESS_PRIVATE	5✔
123
124	def public(self, func):	5✔
125	"""Decorate a function to be publicly accessible."""
126	self.declarePublic(func.__name__) # NOQA: D001	5✔
127	return func	5✔
128
129	private__roles__ = ACCESS_PRIVATE	5✔
130
131	def private(self, func):	5✔
132	"""Decorate a function to be inaccessible to restricted code."""
133	self.declarePrivate(func.__name__) # NOQA: D001	5✔
134	return func	5✔
135
136	protected__roles__ = ACCESS_PRIVATE	5✔
137
138	def protected(self, permission_name):	5✔
139	"""Return a decorator to associate a function with a permission."""
140	# the decorator returned is remembered in a set and will
141	# remove itself upon call. self.apply will check for an empty
142	# set and raise an AssertionError otherwise.
143	key = f"'{permission_name}':{id(lambda x: x)}"	5!
144
145	def decor(func):	5✔
146	self.declareProtected(permission_name, func.__name__) # NOQA: D001	5✔
147	self._unused_protected_decorators.remove(key)	5✔
148	return func	5✔
149	# make sure our key algo creates unique-enough keys
150	if key in self._unused_protected_decorators:	5!
151	raise KeyError(f"Duplicate key: {key}")	×
152	self._unused_protected_decorators.add(key)	5✔
153	return decor	5✔
154
155	setPermissionDefault__roles__ = ACCESS_PRIVATE	5✔
156
157	def setPermissionDefault(self, permission_name, roles):	5✔
158	"""Declare default roles for a permission"""
159	rdict = {}	5✔
160	for role in roles:	5✔
161	rdict[role] = 1	5✔
162	if self.roles.get(permission_name, rdict) != rdict:	5!
163	LOG.warning('Conflicting default role'	×
164	' declarations for permission "%s"' % permission_name)
165	self._warnings = 1	×
166	self.roles[permission_name] = rdict	5✔
167
168	setDefaultAccess__roles__ = ACCESS_PRIVATE	5✔
169
170	def setDefaultAccess(self, access):	5✔
171	"""Declare default attribute access policy.
172
173	This should be a boolean value, a map of attribute names to
174	booleans, or a callable (name, value) -> boolean.
175	"""
176	if isinstance(access, str):	5!
177	access = access.lower()	5✔
178	if access == 'allow':	5!
179	access = 1	5✔
180	elif access == 'deny':	×
181	access = 0	×
182	else:
183	raise ValueError("'allow' or 'deny' expected")	×
184	self.access = access	5✔
185
186
187	class ClassSecurityInfo(SecurityInfo):	5✔
188	"""Encapsulate security information for class objects."""
189
190	__roles__ = ACCESS_PRIVATE	5✔
191
192	apply__roles__ = ACCESS_PRIVATE	5✔
193
194	def apply(self, classobj):	5✔
195	"""Apply security information to the given class object."""
196
197	# make sure all decorators handed out by security.protected were used
198	if self._unused_protected_decorators:	5✔
199	msg = "Class '%r' has %d non-decorator security.protected calls!"	5✔
200	raise AssertionError(msg % (classobj,
201	len(self._unused_protected_decorators)))
202
203	cdict = classobj.__dict__	5✔
204
205	# Check the class for an existing __ac_permissions__ and
206	# incorporate that if present to support older classes or
207	# classes that haven't fully switched to using SecurityInfo.
208	if '__ac_permissions__' in cdict:	5✔
209	for item in cdict['__ac_permissions__']:	5!
210	permission_name = item[0]	×
211	self._setaccess(item[1], permission_name)	×
212	if len(item) > 2:	×
213	self.setPermissionDefault(permission_name, item[2])	×
214
215	# Set __roles__ for attributes declared public or private.
216	# Collect protected attribute names in ac_permissions.
217	ac_permissions = {}	5✔
218	for name, access in self.names.items():	5✔
219	if access in (ACCESS_PRIVATE, ACCESS_PUBLIC, ACCESS_NONE):	5✔
220	setattr(classobj, '%s__roles__' % name, access)	5✔
221	else:
222	if access not in ac_permissions:	5✔
223	ac_permissions[access] = []	5✔
224	ac_permissions[access].append(name)	5✔
225
226	# Now transform our nested dict structure into the nested tuple
227	# structure expected of __ac_permissions__ attributes and set
228	# it on the class object.
229	getRoles = self.roles.get	5✔
230	__ac_permissions__ = []	5✔
231	permissions = sorted(ac_permissions.items())	5✔
232	for permission_name, names in permissions:	5✔
233	roles = getRoles(permission_name, ())	5✔
234	if len(roles):	5✔
235	entry = (permission_name, tuple(names), tuple(roles.keys()))	5✔
236	else:
237	entry = (permission_name, tuple(names))	5✔
238	__ac_permissions__.append(entry)	5✔
239	for permission_name, roles in self.roles.items():	5✔
240	if permission_name not in ac_permissions:	5✔
241	entry = (permission_name, (), tuple(roles.keys()))	5✔
242	__ac_permissions__.append(entry)	5✔
243	setattr(classobj, '__ac_permissions__', tuple(__ac_permissions__))	5✔
244
245	# Take care of default attribute access policy
246	access = getattr(self, 'access', _marker)	5✔
247	if access is not _marker:	5!
248	setattr(classobj, '__allow_access_to_unprotected_subobjects__',	×
249	access)
250
251	if getattr(self, '_warnings', None):	5!
252	LOG.warning('Class "%s" had conflicting'	×
253	' security declarations' % classobj.__name__)
254
255
256	class ClassSecurityInformation(ClassSecurityInfo):	5✔
257	# Default policy is disallow
258	access = 0	5✔
259
260
261	_moduleSecurity = {}	5✔
262	_appliedModuleSecurity = {}	5✔
263
264
265	def secureModule(mname, *imp):	5✔
266	modsec = _moduleSecurity.get(mname, None)	5✔
267	if modsec is None:	5✔
268	if mname in _appliedModuleSecurity:	5✔
269	return sys.modules[mname]	5✔
270	return # no MSI, no module	5✔
271
272	if imp:	5✔
273	__import__(mname, *imp)	5✔
274	module = sys.modules[mname]	5✔
275	modsec.apply(module.__dict__)	5✔
276	_appliedModuleSecurity[mname] = modsec	5✔
277	try:	5✔
278	del _moduleSecurity[mname]	5✔
UNCOV 279	except KeyError:	×
280	# In case of access from multiple threads, the del might fail, but that
281	# is OK.
UNCOV 282	pass	×
283	return module	5✔
284
285
286	def ModuleSecurityInfo(module_name=None):	5✔
287	if module_name is not None:	5!
288	modsec = _moduleSecurity.get(module_name, None)	5✔
289	if modsec is not None:	5✔
290	return modsec	5✔
291	modsec = _appliedModuleSecurity.get(module_name, None)	5✔
292	if modsec is not None:	5✔
293	# Move security info back to to-apply dict (needed for product
294	# refresh). Also invoke this check for parent packages already
295	# applied
296	del _appliedModuleSecurity[module_name]	5✔
297	_moduleSecurity[module_name] = modsec	5✔
298	dot = module_name.rfind('.')	5✔
299	if dot > 0:	5✔
300	ModuleSecurityInfo(module_name[:dot])	5✔
301	return modsec	5✔
302	dot = module_name.rfind('.')	5✔
303	if dot > 0:	5✔
304	# If the module is in a package, recursively make sure
305	# there are security declarations for the package steps
306	# leading to the module
307	modname = module_name[dot + 1:]	5✔
308	pmodsec = ModuleSecurityInfo(module_name[:dot])	5✔
309	if modname not in pmodsec.names:	5!
310	pmodsec.declarePublic(modname) # NOQA: D001	5✔
311	return _ModuleSecurityInfo(module_name)	5✔
312
313
314	class _ModuleSecurityInfo(SecurityInfo):	5✔
315	"""Encapsulate security information for modules."""
316
317	__roles__ = ACCESS_PRIVATE	5✔
318	access = False # deny by default, prevent acquiring 'access' from module	5✔
319
320	def __init__(self, module_name=None):	5✔
321	self.names = {}	5✔
322	if module_name is not None:	5!
323	global _moduleSecurity # noqa: F824
324	_moduleSecurity[module_name] = self	5✔
325
326	__call____roles__ = ACCESS_PRIVATE	5✔
327
328	def __call__(self, name, value):	5✔
329	"""Callback for __allow_access_to_unprotected_subobjects__ hook."""
330	access = self.names.get(name, _marker)	5✔
331	if access is not _marker:	5✔
332	return access == ACCESS_PUBLIC	5✔
333
334	return getattr(self, 'access', 0)	5✔
335
336	apply__roles__ = ACCESS_PRIVATE	5✔
337
338	def apply(self, dict):	5✔
339	"""Apply security information to the given module dict."""
340
341	# Start with default attribute access policy
342	access = getattr(self, 'access', _marker)	5✔
343	if access is not _marker or len(self.names):	5!
344	dict['__allow_access_to_unprotected_subobjects__'] = self	5✔
345
346	if getattr(self, '_warnings', None):	5!
347	LOG.warning('Module "%s" had conflicting'	×
348	' security declarations' % dict['__name__'])
349
350	declareProtected__roles__ = ACCESS_PRIVATE	5✔
351
352	def declareProtected(self, permission_name, *names):	5✔
353	"""Cannot declare module names protected."""
354	pass	×
355
356	declareObjectProtected__roles__ = ACCESS_PRIVATE	5✔
357
358	def declareObjectProtected(self, permission_name):	5✔
359	"""Cannot declare module protected."""
360	pass	×
361
362	setDefaultRoles__roles__ = ACCESS_PRIVATE	5✔
363
364	def setDefaultRoles(self, permission_name, roles):	5✔
365	"""Cannot set default roles for permissions in a module."""
366	pass	×
367
368	# Handy little utility functions
369
370
371	def allow_module(module_name):	5✔
372	"""Allow a module and all its contents to be used from a
373	restricted Script. The argument module_name may be a simple
374	or dotted module or package name. Note that if a package
375	path is given, all modules in the path will be available."""
376	ModuleSecurityInfo(module_name).setDefaultAccess(1)	×
377	dot = module_name.find('.')	×
378	while dot > 0:	×
379	ModuleSecurityInfo(module_name[:dot]).setDefaultAccess(1)	×
380	dot = module_name.find('.', dot + 1)	×
381
382
383	def allow_class(Class):	5✔
384	"""Allow a class and all of its methods to be used from a
385	restricted Script. The argument Class must be a class."""
386	Class._security = sec = ClassSecurityInfo()	×
387	sec.declareObjectPublic()	×
388	sec.setDefaultAccess(1)	×
389	sec.apply(Class)	×
390	InitializeClass(Class)	×

zopefoundation / AccessControl / 25050139377

Source File Press 'n' to go to next uncovered line, 'b' for previous

Source File
Press 'n' to go to next uncovered line, 'b' for previous