def package_update(context, data_dict):
user = context['auth_user_obj']
package = get_package_object(context, data_dict)
if user_owns_package_as_member(user, package):
return {'success': True}
fallback = get_default_auth('update', 'package_update')
return fallback(context, data_dict)
def package_update(context, data_dict):
user = context['auth_user_obj']
package = get_package_object(context, data_dict)
if user_owns_package_as_member(user, package):
return {'success': True}
fallback = get_default_auth('update', 'package_update')
return fallback(context, data_dict)
def resource_create(context, data_dict):
user = context['auth_user_obj']
package = get_package_object(context, data_dict)
if user_owns_package_as_member(user, package):
return {'success': True}
elif user_is_member_of_package_org(user, package):
return {'success': False}
fallback = get_default_auth('create', 'resource_create')
return fallback(context, data_dict)
def resource_create(context, data_dict):
user = context['auth_user_obj']
package = get_package_object(context, data_dict)
if user_owns_package_as_member(user, package):
return {'success': True}
elif user_is_member_of_package_org(user, package):
return {'success': False}
fallback = get_default_auth('create', 'resource_create')
return fallback(context, data_dict)
def resource_view_update(context, data_dict):
user = context['auth_user_obj']
resource_view = get_resource_view_object(context, data_dict)
resource = get_resource_object(context, {'id': resource_view.resource_id})
if user_owns_package_as_member(user, resource.resource_group.package):
return {'success': True}
elif user_is_member_of_package_org(user, resource.resource_group.package):
return {'success': False}
fallback = get_default_auth('update', 'resource_view_update')
return fallback(context, data_dict)
def resource_view_update(context, data_dict):
user = context['auth_user_obj']
resource_view = get_resource_view_object(context, data_dict)
resource = get_resource_object(context, {'id': resource_view.resource_id})
if user_owns_package_as_member(user, resource.package):
return {'success': True}
elif user_is_member_of_package_org(user, resource.package):
return {'success': False}
fallback = get_default_auth('update', 'resource_view_update')
return fallback(context, data_dict)
def package_create(context, data_dict):
user = context['auth_user_obj']
if data_dict and 'owner_org' in data_dict:
role = users_role_for_group_or_org(data_dict['owner_org'], user.name)
if role == 'member':
return {'success': True}
else:
# If there is no organization, then this should return success if the user can create datasets for *some*
# organisation (see the ckan implementation), so either if anonymous packages are allowed or if we have
# member status in any organization.
if has_user_permission_for_some_org(user.name, 'read'):
return {'success': True}
fallback = get_default_auth('create', 'package_create')
return fallback(context, data_dict)
def resource_create(context, data_dict):
user = context['auth_user_obj']
# ckan.logic.auth._get_object() expects 'id', not 'package_id' as key
package_id = data_dict.get('package_id')
data_dict.update({'id': package_id})
package = get_package_object(context, data_dict)
if user_owns_package_as_member(user, package):
return {'success': True}
elif user_is_member_of_package_org(user, package):
return {'success': False}
fallback = get_default_auth('create', 'resource_create')
return fallback(context, data_dict)
def package_create(context, data_dict):
user = context['auth_user_obj']
if data_dict and 'owner_org' in data_dict:
role = users_role_for_group_or_org(data_dict['owner_org'], user.name)
if role == 'member':
return {'success': True}
else:
# If there is no organization, then this should return success if the user can create datasets for *some*
# organisation (see the ckan implementation), so either if anonymous packages are allowed or if we have
# member status in any organization.
if has_user_permission_for_some_org(user.name, 'read'):
return {'success': True}
fallback = get_default_auth('create', 'package_create')
return fallback(context, data_dict)
def resource_create(context, data_dict):
user = context['auth_user_obj']
# ckan.logic.auth._get_object() expects 'id', not 'package_id' as key
package_id = data_dict.get('package_id')
data_dict.update({'id': package_id})
package = get_package_object(context, data_dict)
if user_owns_package_as_member(user, package):
return {'success': True}
elif user_is_member_of_package_org(user, package):
return {'success': False}
fallback = get_default_auth('create', 'resource_create')
return fallback(context, data_dict)
def resource_view_create(context, data_dict):
user = context['auth_user_obj']
# data_dict provides 'resource_id', while get_resource_object expects 'id'. This is not consistent with the rest of
# the API - so future proof it by catering for both cases in case the API is made consistent (one way or the other)
# later.
if data_dict and 'resource_id' in data_dict:
dc = {'id': data_dict['resource_id'], 'resource_id': data_dict['resource_id']}
elif data_dict and 'id' in data_dict:
dc = {'id': data_dict['id'], 'resource_id': data_dict['id']}
else:
dc = data_dict
resource = get_resource_object(context, dc)
if user_owns_package_as_member(user, resource.resource_group.package):
return {'success': True}
elif user_is_member_of_package_org(user, resource.resource_group.package):
return {'success': False}
fallback = get_default_auth('create', 'resource_view_create')
return fallback(context, data_dict)
def resource_view_create(context, data_dict):
user = context['auth_user_obj']
# data_dict provides 'resource_id', while get_resource_object expects 'id'. This is not consistent with the rest of
# the API - so future proof it by catering for both cases in case the API is made consistent (one way or the other)
# later.
if data_dict and 'resource_id' in data_dict:
dc = {'id': data_dict['resource_id'], 'resource_id': data_dict['resource_id']}
elif data_dict and 'id' in data_dict:
dc = {'id': data_dict['id'], 'resource_id': data_dict['id']}
else:
dc = data_dict
resource = get_resource_object(context, dc)
if user_owns_package_as_member(user, resource.package):
return {'success': True}
elif user_is_member_of_package_org(user, resource.package):
return {'success': False}
fallback = get_default_auth('create', 'resource_view_create')
return fallback(context, data_dict)
def test_get_default_auth(self):
for action in ['create', 'update', 'delete']:
default_module = importlib.import_module('ckan.logic.auth' + '.' + action)
for atype in ['package', 'resource', 'resource_view']:
fn_name = atype + '_' + action
assert_is(getattr(default_module, fn_name), get_default_auth(action, fn_name))
