qiEISrSSKrSSKrSSKJr SSKJr SSKJrJ r J r J r SSK J r Sr\R"S5rS rS rS rS rS r"SS5rg)a Implements the `LockManager` object that provides the locking functionality. The LockManager requires a LockStorageDict object to implement persistence. Two alternative lock storage classes are defined in the lock_storage module: - wsgidav.lock_man.lock_storage.LockStorageDict - wsgidav.lock_man.lock_storage.LockStorageShelve The lock data model is a dictionary with these fields: root: Resource URL. principal: Name of the authenticated user that created the lock. type: Must be 'write'. scope: Must be 'shared' or 'exclusive'. depth: Must be '0' or 'infinity'. owner: String identifying the owner. timeout: Seconds remaining until lock expiration. This value is passed to create() and refresh() expire: Converted timeout for persistence: expire = time() + timeout. token: Automatically generated unique token. N)pformat)util) HTTP_LOCKEDDAVErrorDAVErrorConditionPRECONDITION_CODE_LockConflict) ReadWriteLockreStructuredTextzwsgidav.lock_mancnS[R"[[R"S555-$)Nzopaquelocktoken:)rto_strhexrandom getrandbitsR/home/kali/flask_env/lib/python3.13/site-packages/wsgidav/lock_man/lock_manager.pygenerate_lock_tokenr=s&  C0B0B30G,H I IIrclU(de[R"U5nSURS5-nU$)N/)rr strip)paths rnormalize_lock_rootrAs. K4 ;;t D C D Krcf[US5nUS:=(a U[R"5:$)Nexpirer)floattime)lockrs ris_lock_expiredrIs* 4> "F Q; /6DIIK//rc U(dgUSS:aSRUS5nOBSR[R"US5US[R"5- 5nSRUR SS5S S UR S 5UR S 5UR S 5UR S5U5$)zReturn readable rep.z Lock: Nonerrz Infinite ({})z{} (in {} seconds)z-Lock(<{}..>, {!r}, {}, {}, depth-{}, until {}tokenz??????????????????????????????root principalscopedepth)formatr get_log_timerget) lock_dictrs r lock_stringr,Ns Q '' ((;<%,,   i1 2Ih4G$))+4U  ; A A gx(B/ f k" g g rc[R"US5(deUSRS5(deUSS:XdeUSS;deUSS;de[R"US 5(dU5e[ US 5nUS :d US :XdS 5e[R"US5(deSU;a![R"US5(degg)Nr$rtypewriter&shared exclusiver'0infinityownertimeoutrztimeout must be positive or -1r%r!)ris_str startswithis_bytesr)rr7s r validate_lockr<es ;;tF| $ $$ $ < " "3 ' '' ' <7 "" " =3 33 3 =- -- - ==g ' '-- 'DO$G Q;'R-I)II ' ;;tK( ) )) )${{4=))))rc\rSrSrSrSrSrSrSrSSjr Sr S r S S .S jr S S .Sjr SrSrSS.SjrS S.SjrSrSrSS.SjrSrSrSrg ) LockManagerwzA Implements locking functionality using a custom storage layer. i: c[US5(de[5UlXlURR 5 g)z( storage: LockManagerStorage object get_lock_listN)hasattrr _lockstorageopen)selfrDs r__init__LockManager.__init__s5 w0000"_   rc8URR5 g)N)rDcloserFs r__del__LockManager.__del__s rcPURRSUR<S3$)N()) __class____name__rDrKs r__repr__LockManager.__repr__s%..))*!DLL+;1==rc 0n0n0n0n[RUSU35 URRSSSSS9HnUSn[ U5XW'UR US/5R U5 UR US/5R U5 UR US /5R U5 M [RS [US S S 935 U(ad[RS[USS S 935 [RS[USS S 935 [RS[USS S 935 gg)Nz: rTF include_rootinclude_children token_onlyr!r%r6r$zLocks: r)indentwidthzLocks by URL: zLocks by principal: zLocks by owner: )_loggerinforDrAr, setdefaultappendr)rFmsgurlDict ownerDictuserDict tokenDictrtoks r_dumpLockManager._dumpsN   vRu%&LL.. dTe/ Dw-C(.IN   [ 12 6 = =c B  g 3 : :3 ?   tF|R 0 7 7 <   x !3 GHIJ  LL?771C+P*QR S LL'#(N'OP  LL,WYqPS-T,UV W rcUc[RnOUS:aSnUUUUUUUS.nURRXh5 U$)aeAcquire lock and return lock_dict. principal Name of the principal. lock_type Must be 'write'. lock_scope Must be 'shared' or 'exclusive'. lock_depth Must be '0' or 'infinity'. lock_owner String identifying the owner. path Resource URL. timeout Seconds to live This function does NOT check, if the new lock creates a conflict! rr8)r$r.r&r'r6r7r%)r>LOCK_TIME_OUT_DEFAULTrDcreate) rFr% lock_type lock_scope lock_depth lock_ownerrr7r+s r_generate_lockLockManager._generate_locksX, ?!77G q[G"  D,rc [U5nURR5 URXX4X5 UR XrX4XQU5URR 5 $!URR 5 f=f)zCheck for permissions and acquire a lock. On success return new lock dictionary. On error raise a DAVError with an embedded DAVErrorCondition. )rrC acquire_write_check_lock_permissionrqrelease) rFurlrmrnrorpr7r% token_lists racquireLockManager.acquirest""#&   " !  ' '  &&jjw JJ   DJJ   s &A((BNr7cZUc[RnURRXS9$)z0Set new timeout for lock, if existing and valid.r{)r>rkrDrefresh)rFr!r7s rr}LockManager.refreshs* ?!77G||##E#;;rkeyc`US;deURRU5nUbUcU$X2$)zReturn lock_dict, or None, if not found or invalid. Side effect: if lock is expired, it will be purged and None is returned. key: name of lock attribute that will be returned instead of a dictionary. ) Nr.r&r'r6r$r7r%r!)rDr*)rFr!rrs rget_lockLockManager.get_locksG    ||& ;$,Kyrc:URRU5 g)z Delete lock.N)rDdelete)rFr!s rrvLockManager.release s E"rc(URUSS9U:H$)zCReturn True, if exists, is valid, and bound to .r%r)r)rFr!r%s ris_token_locked_by_user#LockManager.is_token_locked_by_users}}U }4 AArF recursivecT[U5nURRUSUSS9nU$)zReturn list of lock_dict, if is protected by at least one direct, valid lock. Side effect: expired locks for this url are purged. TFrV)rrDrA)rFrwrlockLists rget_url_lock_listLockManager.get_url_lock_lists7 "#&<<-- dY5. r)r%c[U5n/nUnU(arURRUSSSS9nUH1nXA:wa USS:waMUb X&S:XdM URU5 M3 [R "U5nU(aMrU$)zReturn a list of valid lockDicts, that protect directly or indirectly. If a principal is given, only locks owned by this principal are returned. Side effect: expired locks for this path and all parents are purged. TFrVr'r5r%)rrDrArarget_uri_parent)rFrwr%ru lock_listrs rget_indirect_url_lock_list&LockManager.get_indirect_url_lock_lists "#&  22u3I"8W  ; $ +5F(FOOD)"##A&Aarc@URU5n[U5S:$)z'Return True, if url is directly locked.r)rlen)rFrwrs r is_url_lockedLockManager.is_url_locked8s!))#.8}q  rc`URUSS9nU=(a [R"X15$)z?Check, if url (or any of it's parents) is locked by lock_token.r$r)rris_equal_or_child_uri)rFrw lock_tokenlockUrls ris_url_locked_by_token"LockManager.is_url_locked_by_token=s*-- -7C455gCCrcURR5 URXS9nUHnURUS5 M URR5 g!URR5 f=f)Nrr!)rCrtrrv)rFrwrrrs rremove_all_locks_from_url%LockManager.remove_all_locks_from_urlBsg   " !--c-GH  T']+! JJ   DJJ   s ,A##A?c US:XdeUS;deUS;de[RSUSUSUSUS3 5 [[5nURR 5 UnU(aUR U5n U H}n [RSUS[U 535 X:wa U SS :waM7U S S :XaUS :XaMH[RS [U 535 URU S 5 M [R"U5nU(aMUS :XazURRUSSSS9n U HXn [R"XS 5(de[RS[U 535 URU S 5 MZ URR5 [UR 5S:a[#[$US9eg!URR5 f=f)aCheck, if can lock , otherwise raise an error. If locking would create a conflict, DAVError(HTTP_LOCKED) is raised. An embedded DAVErrorCondition contains the conflicting resource. @see http://www.webdav.org/specs/rfc4918.html#lock-model - Parent locks WILL NOT be conflicting, if they are depth-0. - Exclusive depth-infinity parent locks WILL be conflicting, even if they are owned by . - Child locks WILL NOT be conflicting, if we request a depth-0 lock. - Exclusive child locks WILL be conflicting, even if they are owned by . (7.7) - It is not enough to check whether a lock is owned by , but also the token must be passed with the request. (Because may run two different applications on his client.) - cannot lock-exclusive, if he holds a parent shared-lock. (This would only make sense, if he was the only shared-lock holder.) - TODO: litmus tries to acquire a shared lock on one resource twice (locks: 27 'double_sharedlock') and fails, when we return HTTP_LOCKED. So we allow multi shared locks on a resource even for the same principal. @param url: URL that shall be locked @param lock_type: "write" @param lock_scope: "shared"|"exclusive" @param lock_depth: "0"|"infinity" @param token_list: list of lock tokens, that the user submitted in If: header @param principal: name of the principal requesting a lock @return: None (or raise) r/r0r3zcheckLockPermission(, rPz check parent r'r5r&r1 -> DENIED due to locked parent r$FTrV -> DENIED due to locked child r err_conditionN)r^debugrrrC acquire_readrr,add_hrefrrrDrA is_child_urirvrhrefsrr) rFrwrmrnrorxr%errcondrrr child_ockss rru"LockManager._check_lock_permissionKsFG###4444.... "3%r*R |2i[PQ R $$BC !! !A 2215 %DMM$5aS;t;L:M"NOxDMZ$? g(2zX7M!MM:;t;L:MN$$T&\2&''*!!$Z'!\\77edu8 'D,,Sv,????MM$CKPTDUCV"WX$$T&\2 ' JJ    w}}  !;g> > JJ   s%B:G#!BG##G?c L[R"U5(deUS;de[RSUSUSUSUS3 5 [ [ 5nUR R5 UnU(aURU5n[RSU35 UH|n[RS[U535 Xa:wa USS:waM4XHS :Xa US U;aMG[RS [U535 URUS 5 M~ [R"U5nU(aMUS:XazURRUS SS S9n U HXn[R"XS 5(de[RS[U535 URUS 5 MZ UR R5 [!UR"5S:a[%[&US9eg!UR R5 f=f)amCheck, if can modify , otherwise raise HTTP_LOCKED. If modifying is prevented by a lock, DAVError(HTTP_LOCKED) is raised. An embedded DAVErrorCondition contains the conflicting locks. may be modified by , if it is not currently locked directly or indirectly (i.e. by a locked parent). For depth-infinity operations, also must not have locked children. It is not enough to check whether a lock is owned by , but also the token must be passed with the request. Because may run two different applications. See http://www.webdav.org/specs/rfc4918.html#lock-model http://www.webdav.org/specs/rfc4918.html#rfc.section.7.4 TODO: verify assumptions: - Parent locks WILL NOT be conflicting, if they are depth-0. - Exclusive child locks WILL be conflicting, even if they are owned by . @param url: URL that shall be modified, created, moved, or deleted @param depth: "0"|"infinity" @param token_list: list of lock tokens, that the principal submitted in If: header @param principal: name of the principal requesting a lock @return: None or raise error r3zcheck_write_permission(rrPz checking z lock=r'r5r%r!rr$FTrVrrrN)rr9r^rrrrCrrr,rrrDrArrvrrrr) rFrwr'rxr%rrrrrs rcheck_write_permission"LockManager.check_write_permissions8{{3)))) %cU"UG2j\I;a P $$BC !" !A 2215  A3/0%DMMJ{4/@.A"BCxDMZ$? ";&77DMZ{4?P>QR ((f6&''*#!& "!\\77edu8 'D,,Sv,????MM$CKPTDUCV"WX$$T&\2 ' JJ    w}}  !;g> > JJ   s2CHBHH#)rCrD))rR __module__ __qualname____firstlineno____doc__rkrGrLrSrhrqryr}rrvrrrrrrrur__static_attributes__rrrr>r>ws #>X2&P!<)-< &*0#B38 <@2! D ;@!VpNrr>)rrrpprintrwsgidavrwsgidav.dav_errorrrrrwsgidav.rw_lockr __docformat__get_module_loggerr^rrrr,r<r>rrrrsd B  *"  !3 4J0 . *$zzr