Show More
@@ -0,0 +1,19 b'' | |||||
|
1 | # -*- coding: utf-8 -*- | |||
|
2 | ||||
|
3 | # Copyright (C) 2016-2019 RhodeCode GmbH | |||
|
4 | # | |||
|
5 | # This program is free software: you can redistribute it and/or modify | |||
|
6 | # it under the terms of the GNU Affero General Public License, version 3 | |||
|
7 | # (only), as published by the Free Software Foundation. | |||
|
8 | # | |||
|
9 | # This program is distributed in the hope that it will be useful, | |||
|
10 | # but WITHOUT ANY WARRANTY; without even the implied warranty of | |||
|
11 | # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |||
|
12 | # GNU General Public License for more details. | |||
|
13 | # | |||
|
14 | # You should have received a copy of the GNU Affero General Public License | |||
|
15 | # along with this program. If not, see <http://www.gnu.org/licenses/>. | |||
|
16 | # | |||
|
17 | # This program is dual-licensed. If you wish to learn more about the | |||
|
18 | # RhodeCode Enterprise Edition, including its added features, Support services, | |||
|
19 | # and proprietary license terms, please see https://rhodecode.com/licenses/ |
1 | NO CONTENT: file renamed from rhodecode/apps/file_store/local_store.py to rhodecode/apps/file_store/backends/local_store.py |
|
NO CONTENT: file renamed from rhodecode/apps/file_store/local_store.py to rhodecode/apps/file_store/backends/local_store.py |
@@ -25,7 +25,7 b' import pathlib2' | |||||
25 |
|
25 | |||
26 |
|
26 | |||
27 | def get_file_storage(settings): |
|
27 | def get_file_storage(settings): | |
28 | from rhodecode.apps.file_store.local_store import LocalFileStorage |
|
28 | from rhodecode.apps.file_store.backends.local_store import LocalFileStorage | |
29 | from rhodecode.apps.file_store import config_keys |
|
29 | from rhodecode.apps.file_store import config_keys | |
30 | store_path = settings.get(config_keys.store_path) |
|
30 | store_path = settings.get(config_keys.store_path) | |
31 | return LocalFileStorage(base_path=store_path) |
|
31 | return LocalFileStorage(base_path=store_path) |
@@ -46,6 +46,54 b' class FileStoreView(BaseAppView):' | |||||
46 | self.storage = utils.get_file_storage(self.request.registry.settings) |
|
46 | self.storage = utils.get_file_storage(self.request.registry.settings) | |
47 | return c |
|
47 | return c | |
48 |
|
48 | |||
|
49 | def _serve_file(self, file_uid): | |||
|
50 | ||||
|
51 | if not self.storage.exists(file_uid): | |||
|
52 | store_path = self.storage.store_path(file_uid) | |||
|
53 | log.debug('File with FID:%s not found in the store under `%s`', | |||
|
54 | file_uid, store_path) | |||
|
55 | raise HTTPNotFound() | |||
|
56 | ||||
|
57 | db_obj = FileStore().query().filter(FileStore.file_uid == file_uid).scalar() | |||
|
58 | if not db_obj: | |||
|
59 | raise HTTPNotFound() | |||
|
60 | ||||
|
61 | # private upload for user | |||
|
62 | if db_obj.check_acl and db_obj.scope_user_id: | |||
|
63 | log.debug('Artifact: checking scope access for bound artifact user: `%s`', | |||
|
64 | db_obj.scope_user_id) | |||
|
65 | user = db_obj.user | |||
|
66 | if self._rhodecode_db_user.user_id != user.user_id: | |||
|
67 | log.warning('Access to file store object forbidden') | |||
|
68 | raise HTTPNotFound() | |||
|
69 | ||||
|
70 | # scoped to repository permissions | |||
|
71 | if db_obj.check_acl and db_obj.scope_repo_id: | |||
|
72 | log.debug('Artifact: checking scope access for bound artifact repo: `%s`', | |||
|
73 | db_obj.scope_repo_id) | |||
|
74 | repo = db_obj.repo | |||
|
75 | perm_set = ['repository.read', 'repository.write', 'repository.admin'] | |||
|
76 | has_perm = HasRepoPermissionAny(*perm_set)(repo.repo_name, 'FileStore check') | |||
|
77 | if not has_perm: | |||
|
78 | log.warning('Access to file store object `%s` forbidden', file_uid) | |||
|
79 | raise HTTPNotFound() | |||
|
80 | ||||
|
81 | # scoped to repository group permissions | |||
|
82 | if db_obj.check_acl and db_obj.scope_repo_group_id: | |||
|
83 | log.debug('Artifact: checking scope access for bound artifact repo group: `%s`', | |||
|
84 | db_obj.scope_repo_group_id) | |||
|
85 | repo_group = db_obj.repo_group | |||
|
86 | perm_set = ['group.read', 'group.write', 'group.admin'] | |||
|
87 | has_perm = HasRepoGroupPermissionAny(*perm_set)(repo_group.group_name, 'FileStore check') | |||
|
88 | if not has_perm: | |||
|
89 | log.warning('Access to file store object `%s` forbidden', file_uid) | |||
|
90 | raise HTTPNotFound() | |||
|
91 | ||||
|
92 | FileStore.bump_access_counter(file_uid) | |||
|
93 | ||||
|
94 | file_path = self.storage.store_path(file_uid) | |||
|
95 | return FileResponse(file_path) | |||
|
96 | ||||
49 | @LoginRequired() |
|
97 | @LoginRequired() | |
50 | @NotAnonymous() |
|
98 | @NotAnonymous() | |
51 | @CSRFRequired() |
|
99 | @CSRFRequired() | |
@@ -102,54 +150,6 b' class FileStoreView(BaseAppView):' | |||||
102 | return {'store_fid': store_uid, |
|
150 | return {'store_fid': store_uid, | |
103 | 'access_path': h.route_path('download_file', fid=store_uid)} |
|
151 | 'access_path': h.route_path('download_file', fid=store_uid)} | |
104 |
|
152 | |||
105 | def _serve_file(self, file_uid): |
|
|||
106 |
|
||||
107 | if not self.storage.exists(file_uid): |
|
|||
108 | store_path = self.storage.store_path(file_uid) |
|
|||
109 | log.debug('File with FID:%s not found in the store under `%s`', |
|
|||
110 | file_uid, store_path) |
|
|||
111 | raise HTTPNotFound() |
|
|||
112 |
|
||||
113 | db_obj = FileStore().query().filter(FileStore.file_uid == file_uid).scalar() |
|
|||
114 | if not db_obj: |
|
|||
115 | raise HTTPNotFound() |
|
|||
116 |
|
||||
117 | # private upload for user |
|
|||
118 | if db_obj.check_acl and db_obj.scope_user_id: |
|
|||
119 | log.debug('Artifact: checking scope access for bound artifact user: `%s`', |
|
|||
120 | db_obj.scope_user_id) |
|
|||
121 | user = db_obj.user |
|
|||
122 | if self._rhodecode_db_user.user_id != user.user_id: |
|
|||
123 | log.warning('Access to file store object forbidden') |
|
|||
124 | raise HTTPNotFound() |
|
|||
125 |
|
||||
126 | # scoped to repository permissions |
|
|||
127 | if db_obj.check_acl and db_obj.scope_repo_id: |
|
|||
128 | log.debug('Artifact: checking scope access for bound artifact repo: `%s`', |
|
|||
129 | db_obj.scope_repo_id) |
|
|||
130 | repo = db_obj.repo |
|
|||
131 | perm_set = ['repository.read', 'repository.write', 'repository.admin'] |
|
|||
132 | has_perm = HasRepoPermissionAny(*perm_set)(repo.repo_name, 'FileStore check') |
|
|||
133 | if not has_perm: |
|
|||
134 | log.warning('Access to file store object `%s` forbidden', file_uid) |
|
|||
135 | raise HTTPNotFound() |
|
|||
136 |
|
||||
137 | # scoped to repository group permissions |
|
|||
138 | if db_obj.check_acl and db_obj.scope_repo_group_id: |
|
|||
139 | log.debug('Artifact: checking scope access for bound artifact repo group: `%s`', |
|
|||
140 | db_obj.scope_repo_group_id) |
|
|||
141 | repo_group = db_obj.repo_group |
|
|||
142 | perm_set = ['group.read', 'group.write', 'group.admin'] |
|
|||
143 | has_perm = HasRepoGroupPermissionAny(*perm_set)(repo_group.group_name, 'FileStore check') |
|
|||
144 | if not has_perm: |
|
|||
145 | log.warning('Access to file store object `%s` forbidden', file_uid) |
|
|||
146 | raise HTTPNotFound() |
|
|||
147 |
|
||||
148 | FileStore.bump_access_counter(file_uid) |
|
|||
149 |
|
||||
150 | file_path = self.storage.store_path(file_uid) |
|
|||
151 | return FileResponse(file_path) |
|
|||
152 |
|
||||
153 | # ACL is checked by scopes, if no scope the file is accessible to all |
|
153 | # ACL is checked by scopes, if no scope the file is accessible to all | |
154 | @view_config(route_name='download_file') |
|
154 | @view_config(route_name='download_file') | |
155 | def download_file(self): |
|
155 | def download_file(self): |
General Comments 0
You need to be logged in to leave comments.
Login now