3
�^� � @ s� d dl mZmZ ddlmZ ddlmZ ddlmZm Z ddl
m Z ddl m
Z
dd lmZ ed
d d d
g�ZG dd� de�ZG dd� de �ZG dd� de �ZdS )� )� defaultdict�
namedtuple� )� RBACRuletype� )�DiffResultDescriptor)�
Difference�Wrapper)�class_wrapper_factory)�role_wrapper_factory)� type_or_attr_wrapper_factoryZmodified_rbacrule�ruleZ
added_defaultZremoved_defaultc @ sh e Zd ZdZed�Zed�Zed�Zed�Zed�Z e
e �Z e
e �Z
dd� Zdd� Zdd � Zd
d � Zd S )
�RBACRulesDifferencez<Determine the difference in RBAC rules between two policies.�diff_role_allows�diff_role_transitionsc C sd | j jdj| �� | j s"| j r*| j� | j| j| jtj t
�| j| jtj t
��\| _ | _ }dS )zAGenerate the difference in role allow rules between the policies.zJGenerating role allow differences from {0.left_policy} to {0.right_policy}N)
�log�info�format�_left_rbac_rules�_right_rbac_rules�_create_rbac_rule_lists� _set_diff�_expand_generatorr Zallow�RoleAllowWrapper�added_role_allows�removed_role_allows)�self�_� r �!/usr/lib64/python3.6/rbacrules.pyr 3 s z$RBACRulesDifference.diff_role_allowsc C s� | j jdj| �� | j s"| j r*| j� | j| j| jtj t
�| j| jtj t
��\}}}g }x:|D ]2\}}t |j �t |j �krf|j
t||j |j �� qfW || _|| _|| _dS )zFGenerate the difference in role_transition rules between the policies.zOGenerating role_transition differences from {0.left_policy} to {0.right_policy}N)r r r r r r r r r Zrole_transition�RoleTransitionWrapperr �default�append�modified_rbacrule_record�added_role_transitions�removed_role_transitions�modified_role_transitions)r ZaddedZremovedZmatchedZmodifiedZ left_ruleZ
right_ruler r r r A s& z)RBACRulesDifference.diff_role_transitionsc C s� | j jdj| �� x$| jj� D ]}| j|j j|� q W | j jdj| �� x$| jj� D ]}| j |j j|� qVW | j jd� dS )z$Create rule lists for both policies.z-Building RBAC rule lists from {0.left_policy}z.Building RBAC rule lists from {0.right_policy}z#Completed building RBAC rule lists.N)
r �debugr Z left_policyZ rbacrulesr Zruletyper" Z right_policyr )r r
r r r r a s z+RBACRulesDifference._create_rbac_rule_listsc C sH | j jd� d| _d| _d| _d| _d| _d| _| jj � | j
j � dS )z%Reset diff results on policy changes.z Resetting RBAC rule differencesN) r r' r r Zmodified_role_allowsr$ r% r& r �clearr )r r r r � _reset_diffo s
z RBACRulesDifference._reset_diffN)�__name__�
__module__� __qualname__�__doc__r r r r$ r% r& r �listr r r r r r) r r r r r # s r c @ s4 e Zd ZdZd
Zdd� Zdd� Zdd � Zd
d � Zd S )r z.Wrap role allow rules to allow set operations.�source�targetc C s, || _ t|j�| _t|j�| _t|�| _d S )N)�originr r/ r0 �hash�key)r r
r r r �__init__� s zRoleAllowWrapper.__init__c C s | j S )N)r3 )r r r r �__hash__� s zRoleAllowWrapper.__hash__c C s | j |j k S )N)r3 )r �otherr r r �__lt__� s zRoleAllowWrapper.__lt__c C s | j |j ko| j|jkS )N)r/ r0 )r r6 r r r �__eq__� s zRoleAllowWrapper.__eq__N)r/ r0 ) r* r+ r, r- � __slots__r4 r5 r7 r8 r r r r r ~ s r c @ s4 e Zd ZdZdZdd� Zdd� Zd d
� Zd d � Zd
S )r z3Wrap role_transition rules to allow set operations.r/ r0 �tclassc C s8 || _ t|j�| _t|j�| _t|j�| _t|�| _d S )N) r1 r r/ r r0 r
r: r2 r3 )r r
r r r r4 � s
z RoleTransitionWrapper.__init__c C s | j S )N)r3 )r r r r r5 � s z RoleTransitionWrapper.__hash__c C s | j |j k S )N)r3 )r r6 r r r r7 � s z RoleTransitionWrapper.__lt__c C s$ | j |j ko"| j|jko"| j|jkS )N)r/ r0 r: )r r6 r r r r8 � s z RoleTransitionWrapper.__eq__N)r/ r0 r: ) r* r+ r, r- r9 r4 r5 r7 r8 r r r r r � s r N)� collectionsr r Z policyrepr Z descriptorsr �
differencer r Zobjclassr
Zrolesr �typesr r# r r r r r r r �<module> s [