�
z fc @ s� d Z d d l m Z e d d d �[ d d g Z d d l m Z d d d � � YZ d
� d e d � Z d � Z e
d
k r� e � n d S( s� Bastionification utility.
A bastion (for another object -- the 'original') is an object that has
the same methods as the original but does not give access to its
instance variables. Bastions have a number of uses, but the most
obvious one is to provide code executing in restricted mode with a
safe interface to an object implemented in unrestricted mode.
The bastionification routine has an optional second argument which is
a filter function. Only those methods for which the filter method
(called with the method name as argument) returns true are accessible.
The default filter method returns true unless the method name begins
with an underscore.
There are a number of possible implementations of bastions. We use a
'lazy' approach where the bastion's __getattr__() discipline does all
the work for a particular method the first time it is used. This is
usually fastest, especially if the user doesn't call all available
methods. The retrieved methods are stored as instance variables of
the bastion, so the overhead is only occurred on the first use of each
method.
Detail: the bastion class has a __repr__() discipline which includes
the repr() of the original object. This is precomputed when the
bastion is created.
i����( t warnpy3ks1 the Bastion module has been removed in Python 3.0t
stackleveli t BastionClasst Bastion( t
MethodTypec B s) e Z d Z d � Z d � Z d � Z RS( s Helper class used by the Bastion() function.
You could subclass this and pass the subclass as the bastionclass
argument to the Bastion() function, as long as the constructor has
the same signature (a get() function and a name for the object).
c C s | | _ | | _ d S( s� Constructor.
Arguments:
get - a function that gets the attribute value (by name)
name - a human-readable name for the original object
(suggestion: use repr(object))
N( t _get_t _name_( t selft gett name( ( s /usr/lib64/python2.7/Bastion.pyt __init__/ s
c C s d | j S( s� Return a representation string.
This includes the name passed in to the constructor, so that
if you print the bastion during debugging, at least you have
some idea of what it is.
s <Bastion for %s>( R ( R ( ( s /usr/lib64/python2.7/Bastion.pyt __repr__< s c C s | j | � } | | j | <| S( s� Get an as-yet undefined attribute value.
This calls the get() function that was passed to the
constructor. The result is stored as an instance variable so
that the next time the same attribute is requested,
__getattr__() won't be invoked.
If the get() function raises an exception, this is simply
passed on -- exceptions are not cached.
( R t __dict__( R R t attribute( ( s /usr/lib64/python2.7/Bastion.pyt __getattr__F s
( t __name__t
__module__t __doc__R
R R ( ( ( s /usr/lib64/python2.7/Bastion.pyR % s
c C s | d d k S( Ni t _( ( R ( ( s /usr/lib64/python2.7/Bastion.pyt <lambda>W t c C sL t d � | | d � } | d � } | d k r? t | � } n | | | � S( s� Create a bastion for an object, using an optional filter.
See the Bastion module's documentation for background.
Arguments:
object - the original object
filter - a predicate that decides whether a function name is OK;
by default all names are OK that don't start with '_'
name - the name of the object; default repr(object)
bastionclass - class used to create the bastion; default BastionClass
s/ This code is not secure in Python 2.2 and laterc S sA | | � r4 t | | � } t | � t k r4 | Sn t | � d S( s6 Internal function for Bastion(). See source comments.N( t getattrt typeR t AttributeError( R t objectt filterR
( ( s /usr/lib64/python2.7/Bastion.pyt get1u s
c S s
| | � S( s6 Internal function for Bastion(). See source comments.( ( R R ( ( s /usr/lib64/python2.7/Bastion.pyt get2} s N( t RuntimeErrort Nonet repr( R R R t bastionclassR R ( ( s /usr/lib64/python2.7/Bastion.pyR W s c B s� d d
d � � Y} | � } e | � } d } | d Ud Gd Gd GHd d l } | j � } | j d � } | | _ | j | � d S(
s Test the Bastion() function.t Originalc B s, e Z d � Z d � Z d � Z d � Z RS( c S s
d | _ d S( Ni ( t sum( R ( ( s /usr/lib64/python2.7/Bastion.pyR
� s c S s | j | � d S( N( t _add( R t n( ( s /usr/lib64/python2.7/Bastion.pyt add� s c S s | j | | _ d S( N( R! ( R R# ( ( s /usr/lib64/python2.7/Bastion.pyR" � s c S s | j S( N( R! ( R ( ( s /usr/lib64/python2.7/Bastion.pyt total� s ( R R R
R$ R" R% ( ( ( s /usr/lib64/python2.7/Bastion.pyR � s s� if 1:
b.add(81)
b.add(18)
print "b.total() =", b.total()
try:
print "b.sum =", b.sum,
except:
print "inaccessible"
else:
print "accessible"
try:
print "b._add =", b._add,
except:
print "inaccessible"
else:
print "accessible"
try:
print "b._get_.func_defaults =", map(type, b._get_.func_defaults),
except:
print "inaccessible"
else:
print "accessible"
Nt =i s Using rexec:i����t __main__( s ====================s ====================( R t rexect RExect
add_modulet bt r_exec( R t oR+ t testcodeR( t rt m( ( s /usr/lib64/python2.7/Bastion.pyt _test� s
R' N( ( R t warningsR t __all__t typesR R R R R1 R ( ( ( s /usr/lib64/python2.7/Bastion.pyt <module> s 2. -