Nwg|%jdZddlmZddlmZdZGddZGddeZGd d eZGd d Z Gd dZ GddZ Gddee Z Gdde ZGddeZGddeZGddeZGddeZGddeZGd d!eZGd"d#eZy$)%z2 Provides a set of pluggable permission policies. )Http404) exceptions)GETHEADOPTIONSc*eZdZdZdZdZdZdZy)OperationHolderMixinc$tt||SN OperandHolderANDselfothers Q/var/www/horilla/myenv/lib/python3.12/site-packages/rest_framework/permissions.py__and__zOperationHolderMixin.__and__ sS$..c$tt||Sr r ORrs r__or__zOperationHolderMixin.__or__sRu--rc$tt||Sr r rs r__rand__zOperationHolderMixin.__rand__sS%..rc$tt||Sr rrs r__ror__zOperationHolderMixin.__ror__sR--rc"tt|Sr )SingleOperandHolderNOTrs r __invert__zOperationHolderMixin.__invert__s"3--rN)__name__ __module__ __qualname__rrrrr!rrr r s/./..rr ceZdZdZdZy)rc ||_||_yr )operator_class op1_class)rr(r)s r__init__zSingleOperandHolder.__init__s,"rcH|j|i|}|j|Sr )r)r()rargskwargsop1s r__call__zSingleOperandHolder.__call__!s(dnnd-f-""3''rN)r"r#r$r*r/r%rrrrs #(rrc$eZdZdZdZdZdZy)r c.||_||_||_yr )r(r) op2_class)rr(r)r2s rr*zOperandHolder.__init__'s,""rcn|j|i|}|j|i|}|j||Sr )r)r2r()rr,r-r.op2s rr/zOperandHolder.__call__,s?dnnd-f-dnnd-f-""3,,rct|txrO|j|jk(xr4|j|jk(xr|j|jk(Sr ) isinstancer r(r)r2rs r__eq__zOperandHolder.__eq__1sV um , .   5#7#7 7 . NNeoo - . NNeoo -  rcZt|j|j|jfSr )hashr(r)r2r s r__hash__zOperandHolder.__hash__9s"T(($..$..IJJrN)r"r#r$r*r/r7r:r%rrr r &s# -  Krr ceZdZdZdZdZy)rc ||_||_yr r.r4rr.r4s rr*z AND.__init__>rcv|jj||xr|jj||Sr r.has_permissionr4rrequestviews rrBzAND.has_permissionB4 HH # #GT 2 3 HH # #GT 2 rcz|jj|||xr|jj|||Sr )r.has_object_permissionr4rrDrEobjs rrHzAND.has_object_permissionHs8 HH * *7D# > ? HH * *7D# > rNr"r#r$r*rBrHr%rrrr=s  rrceZdZdZdZdZy)rc ||_||_yr r=r>s rr*z OR.__init__Pr?rcv|jj||xs|jj||Sr rArCs rrBzOR.has_permissionTrFrc|jj||xr|jj|||xs;|jj||xr|jj|||Sr )r.rBrHr4rIs rrHzOR.has_object_permissionZsn HH # #GT 2 C..wcB  HH # #GT 2 C..wcB  rNrKr%rrrrOs  rrceZdZdZdZdZy)rc||_yr )r.)rr.s rr*z NOT.__init__es rc<|jj|| Sr )r.rBrCs rrBzNOT.has_permissionhs88**7D999rc>|jj||| Sr )r.rHrIs rrHzNOT.has_object_permissionks8811'4EEErNrKr%rrrrds:Frrc eZdZy)BasePermissionMetaclassN)r"r#r$r%rrrUrUosrrUceZdZdZdZdZy)BasePermissionzH A base class from which all permission classes should inherit. cyzL Return `True` if permission is granted, `False` otherwise. Tr%rCs rrBzBasePermission.has_permissionxrcyrYr%rIs rrHz$BasePermission.has_object_permission~rZrN)r"r#r$__doc__rBrHr%rrrWrWss rrW) metaclassceZdZdZdZy)AllowAnyz Allow any access. This isn't strictly required, since you could use an empty permission_classes list, but it's useful because it makes the intention more explicit. cy)NTr%rCs rrBzAllowAny.has_permissionsrNr"r#r$r\rBr%rrr_r_s rr_ceZdZdZdZy)IsAuthenticatedz4 Allows access only to authenticated users. c\t|jxr|jjSr )booluseris_authenticatedrCs rrBzIsAuthenticated.has_permissions GLLBW\\%B%BCCrNrar%rrrcrcs DrrcceZdZdZdZy) IsAdminUserz, Allows access only to admin users. c\t|jxr|jjSr )rerfis_staffrCs rrBzIsAdminUser.has_permissions GLL:W\\%:%:;;rNrar%rrriris |j }|*Jdj|jj|S|j S)N get_querysetquerysetz[Cannot apply {} on a view that does not set `.queryset` or have a `.get_queryset()` method.z{}.get_queryset() returned None)hasattrgetattrformat __class__r"rr)rrErs r _querysetz DjangoModelPermissions._querysetst^,tZ.: * > &(( )  *; 4 (((*H' 1889P9PQ 'O}}rc |jr"|jjs |jryt|ddry|j |}|j |j |j}|jj|S)NF_ignore_model_permissionsT) rfrgauthenticated_users_onlyrrrromodel has_perms)rrDrErpermss rrBz%DjangoModelPermissions.has_permissionsp||||,,1N1N 44e <>>$'--gnnhnnM||%%e,,rN) r"r#r$r\rrrrrBr%rrrrrrsI 34567889I $ B  -rrrceZdZdZdZy)$DjangoModelPermissionsOrAnonReadOnlyzj Similar to DjangoModelPermissions, except that anonymous users are allowed read-only access. FN)r"r#r$r\rr%rrrrs %rrc8eZdZdZgggdgdgdgdgdZdZdZy) DjangoObjectPermissionsa The request is authenticated using Django's object-level permissions. It requires an object-permissions-enabled backend, such as Django Guardian. It ensures that the user is authenticated, and has the appropriate `add`/`change`/`delete` permissions on the object using .has_perms. This permission can only be applied against view classes that provide a `.queryset` attribute. rsrtrurvc|jj|jjd}||jvrt j ||j|Dcgc]}||z c}Scc}w)Nr|rrs rget_required_object_permissionsz7DjangoObjectPermissions.get_required_object_permissionssc"22#//44   '--f5 5*...*@A$v AAArc8|j|}|j}|j}|j|j|}|j ||sC|jt vrt|jd|}|j ||styy)NrFT)rrrfrrorrpr) rrDrErJrrrfr read_permss rrHz-DjangoObjectPermissions.has_object_permission!s>>$'NN ||44W^^YO~~eS) ~~- ==eYOJ>>*c2 rN)r"r#r$r\rrrHr%rrrrs< 34567889I BrrN)r\ django.httprrest_frameworkrrpr rr rrrtyperUrWr_rcrirmrrrrr%rrrs %) .."(.(K(K.  $  *FF 2D 6$ ~ DnD<.<    F-^F-R%+A%949r