Source code for wsgidav.dav_provider

# (c) 2009-2018 Martin Wendt and contributors; see WsgiDAV https://github.com/mar10/wsgidav
# Original PyFileServer (c) 2005 Ho Chun Wei.
# Licensed under the MIT license:
# http://www.opensource.org/licenses/mit-license.php
"""
Abstract base class for DAV resource providers.

This module serves these purposes:

  1. Documentation of the DAVProvider interface
  2. Common base class for all DAV providers
  3. Default implementation for most functionality that a resource provider must
     deliver.

If no default implementation can be provided, then all write actions generate
FORBIDDEN errors. Read requests generate NOT_IMPLEMENTED errors.


**_DAVResource, DAVCollection, DAVNonCollection**

Represents an existing (i.e. mapped) WebDAV resource or collection.

A _DAVResource object is created by a call to the DAVProvider.

The resource may then be used to query different attributes like ``res.name``,
``res.isCollection``, ``res.getContentLength()``, and ``res.supportEtag()``.

It also implements operations, that require an *existing* resource, like:
``getPreferredPath()``, ``createCollection()``, or ``getPropertyValue()``.

Usage::

    res = provider.getResourceInst(path, environ)
    if res is not None:
        print(res.getName())



**DAVProvider**

A DAV provider represents a shared WebDAV system.

There is only one provider instance per share, which is created during
server start-up. After that, the dispatcher (``request_resolver.RequestResolver``)
parses the request URL and adds it to the WSGI environment, so it
can be accessed like this::

    provider = environ["wsgidav.provider"]

The main purpose of the provider is to create _DAVResource objects for URLs::

    res = provider.getResourceInst(path, environ)


**Supporting Objects**
The DAVProvider takes two supporting objects:

propertyManager
   An object that provides storage for dead properties assigned for webDAV resources.

   PropertyManagers must provide the methods as described in
   ``wsgidav.interfaces.propertymanagerinterface``

   See property_manager.PropertyManager for a sample implementation
   using shelve.

lockManager
   An object that provides storage for locks made on webDAV resources.

   LockManagers must provide the methods as described in
   ``wsgidav.interfaces.lockmanagerinterface``

   See lock_manager.LockManager for a sample implementation
   using shelve.

See :doc:`reference_guide` for more information about the WsgiDAV architecture.
"""
import os
import sys
import time
import traceback

from wsgidav import compat, util, xml_tools
from wsgidav.dav_error import (
    HTTP_FORBIDDEN,
    HTTP_NOT_FOUND,
    DAVError,
    PRECONDITION_CODE_ProtectedProperty,
    asDAVError
)
# Trick PyDev to do intellisense and don't produce warnings:
from wsgidav.util import etree  # noqa

if False:
    from xml.etree import ElementTree as etree  # noqa


__docformat__ = "reStructuredText"

_logger = util.getModuleLogger(__name__)

_standardLivePropNames = ["{DAV:}creationdate",
                          "{DAV:}displayname",
                          "{DAV:}getcontenttype",
                          "{DAV:}resourcetype",
                          "{DAV:}getlastmodified",
                          "{DAV:}getcontentlength",
                          "{DAV:}getetag",
                          "{DAV:}getcontentlanguage",
                          #                          "{DAV:}source", # removed in rfc4918
                          ]
_lockPropertyNames = ["{DAV:}lockdiscovery",
                      "{DAV:}supportedlock"]

# DAVHRES_Continue = "continue"
# DAVHRES_Done = "done"

# ========================================================================
# _DAVResource
# ========================================================================


class _DAVResource(object):
    r"""Represents a single existing DAV resource instance.

    A resource may be a collection (aka 'folder') or a non-collection (aka
    'file').
    _DAVResource is the common base class for the specialized classes::

        _DAVResource
          +- DAVCollection
          \- DAVNonCollection

    Instances of this class are created through the DAVProvider::

        res = provider.getResourceInst(path, environ)
        if res and res.isCollection():
            print(res.getDisplayName())

    In the example above, res will be ``None``, if the path cannot be mapped to
    an existing resource.
    The following attributes and methods are considered 'cheap'::

        res.path
        res.provider
        res.name
        res.isCollection
        res.environ

    Querying other attributes is considered 'expensive' and may be delayed until
    the first access.

        getContentLength()
        getContentType()
        getCreationDate()
        getDisplayName()
        getEtag()
        getLastModified()
        supportRanges()

        supportEtag()
        supportModified()
        supportContentLength()

    These functions return ``None``, if the property is not available, or
    not supported.

    See also DAVProvider.getResourceInst().
    """

    def __init__(self, path, isCollection, environ):
        assert compat.is_native(path)
        assert path == "" or path.startswith("/")
        self.provider = environ["wsgidav.provider"]
        self.path = path
        self.isCollection = isCollection
        self.environ = environ
        self.name = util.getUriName(self.path)

    def __repr__(self):
        return "{}({!r})".format(self.__class__.__name__, self.path)

#    def getContentLanguage(self):
#        """Contains the Content-Language header returned by a GET without accept
#        headers.
#
#        The getcontentlanguage property MUST be defined on any DAV compliant
#        resource that returns the Content-Language header on a GET.
#        """
#        raise NotImplementedError

    def getContentLength(self):
        """Contains the Content-Length header returned by a GET without accept
        headers.

        The getcontentlength property MUST be defined on any DAV compliant
        resource that returns the Content-Length header in response to a GET.

        This method MUST be implemented by non-collections only.
        """
        if self.isCollection:
            return None
        raise NotImplementedError

    def getContentType(self):
        """Contains the Content-Type header returned by a GET without accept
        headers.

        This getcontenttype property MUST be defined on any DAV compliant
        resource that returns the Content-Type header in response to a GET.
        See http://www.webdav.org/specs/rfc4918.html#PROPERTY_getcontenttype

        This method MUST be implemented by non-collections only.
        """
        if self.isCollection:
            return None
        raise NotImplementedError

    def getCreationDate(self):
        """Records the time and date the resource was created.

        The creationdate property should be defined on all DAV compliant
        resources. If present, it contains a timestamp of the moment when the
        resource was created (i.e., the moment it had non-null state).

        This method SHOULD be implemented, especially by non-collections.
        """
        return None

    def getDirectoryInfo(self):
        """Return a list of dictionaries with information for directory
        rendering.

        This default implementation return None, so the dir browser will
        traverse all members.

        This method COULD be implemented for collection resources.
        """
        assert self.isCollection
        return None

    def getDisplayName(self):
        """Provides a name for the resource that is suitable for presentation to
        a user.

        The displayname property should be defined on all DAV compliant
        resources. If present, the property contains a description of the
        resource that is suitable for presentation to a user.

        This default implementation returns `name`, which is the last path
        segment.
        """
        return self.name

    def getDisplayInfo(self):
        """Return additional info dictionary for displaying (optional).

        This information is not part of the DAV specification, but meant for use
        by the dir browser middleware.

        This default implementation returns ``{'type': '...'}``
        """
        if self.isCollection:
            return {"type": "Directory"}
        elif os.extsep in self.name:
            ext = self.name.split(os.extsep)[-1].upper()
            if len(ext) < 5:
                return {"type": "{}-File".format(ext)}
        return {"type": "File"}

    def getEtag(self):
        """
        See http://www.webdav.org/specs/rfc4918.html#PROPERTY_getetag

        This method SHOULD be implemented, especially by non-collections.
        """
        return None

    def getLastModified(self):
        """Contains the Last-Modified header returned by a GET method without
        accept headers.

        Return None, if this live property is not supported.

        Note that the last-modified date on a resource may reflect changes in
        any part of the state of the resource, not necessarily just a change to
        the response to the GET method. For example, a change in a property may
        cause the last-modified date to change. The getlastmodified property
        MUST be defined on any DAV compliant resource that returns the
        Last-Modified header in response to a GET.

        This method SHOULD be implemented, especially by non-collections.
        """
        return None

    def supportRanges(self):
        """Return True, if this non-resource supports Range on GET requests.

        This method MUST be implemented by non-collections only.
        """
        raise NotImplementedError

    def supportContentLength(self):
        """Return True, if this resource supports Content-Length.

        This default implementation checks `self.getContentLength() is None`.
        """
        return self.getContentLength() is not None

    def supportEtag(self):
        """Return True, if this resource supports ETags.

        This default implementation checks `self.getEtag() is None`.
        """
        return self.getEtag() is not None

    def supportModified(self):
        """Return True, if this resource supports last modified dates.

        This default implementation checks `self.getLastModified() is None`.
        """
        return self.getLastModified() is not None

    def getPreferredPath(self):
        """Return preferred mapping for a resource mapping.

        Different URLs may map to the same resource, e.g.:
            '/a/b' == '/A/b' == '/a/b/'
        getPreferredPath() returns the same value for all these variants, e.g.:
            '/a/b/'   (assuming resource names considered case insensitive)

        @param path: a UTF-8 encoded, unquoted byte string.
        @return: a UTF-8 encoded, unquoted byte string.
        """
        if self.path in ("", "/"):
            return "/"
        # Append '/' for collections
        if self.isCollection and not self.path.endswith("/"):
            return self.path + "/"
        # TODO: handle case-sensitivity, depending on OS
        # (FileSystemProvider could do this with os.path:
        # (?) on unix we can assume that the path already matches exactly the case of filepath
        # on windows we could use path.lower() or get the real case from the
        # file system
        return self.path

    def getRefUrl(self):
        """Return the quoted, absolute, unique URL of a resource, relative to appRoot.

        Byte string, UTF-8 encoded, quoted.
        Starts with a '/'. Collections also have a trailing '/'.

        This is basically the same as getPreferredPath, but deals with
        'virtual locations' as well.

        e.g. '/a/b' == '/A/b' == '/bykey/123' == '/byguid/abc532'

        getRefUrl() returns the same value for all these URLs, so it can be
        used as a key for locking and persistence storage.

        DAV providers that allow virtual-mappings must override this method.

        See also comments in DEVELOPERS.txt glossary.
        """
        return compat.quote(self.provider.sharePath + self.getPreferredPath())

#    def getRefKey(self):
#        """Return an unambigous identifier string for a resource.
#
#        Since it is always unique for one resource, <refKey> is used as key for
#        the lock- and property storage dictionaries.
#
#        This default implementation calls getRefUrl(), and strips a possible
#        trailing '/'.
#        """
#        refKey = self.getRefUrl(path)
#        if refKey == "/":
#            return refKey
#        return refKey.rstrip("/")

    def getHref(self):
        """Convert path to a URL that can be passed to XML responses.

        Byte string, UTF-8 encoded, quoted.

        See http://www.webdav.org/specs/rfc4918.html#rfc.section.8.3
        We are using the path-absolute option. i.e. starting with '/'.
        URI ; See section 3.2.1 of [RFC2068]
        """
        # Nautilus chokes, if href encodes '(' as '%28'
        # So we don't encode 'extra' and 'safe' characters (see rfc2068 3.2.1)
        safe = "/" + "!*'()," + "$-_|."
        return compat.quote(self.provider.mountPath + self.provider.sharePath
                            + self.getPreferredPath(), safe=safe)

#    def getParent(self):
#        """Return parent _DAVResource or None.
#
#        There is NO checking, if the parent is really a mapped collection.
#        """
#        parentpath = util.getUriParent(self.path)
#        if not parentpath:
#            return None
#        return self.provider.getResourceInst(parentpath)

    def getMemberList(self):
        """Return a list of direct members (_DAVResource or derived objects).

        This default implementation calls self.getMemberNames() and
        self.getMember() for each of them.
        A provider COULD overwrite this for performance reasons.
        """
        if not self.isCollection:
            raise NotImplementedError
        memberList = []
        for name in self.getMemberNames():
            member = self.getMember(name)
            assert member is not None
            memberList.append(member)
        return memberList

    def getMemberNames(self):
        """Return list of (direct) collection member names (UTF-8 byte strings).

        Every provider MUST provide this method for collection resources.
        """
        raise NotImplementedError

    def getDescendants(self, collections=True, resources=True,
                       depthFirst=False, depth="infinity", addSelf=False):
        """Return a list _DAVResource objects of a collection (children,
        grand-children, ...).

        This default implementation calls self.getMemberList() recursively.

        This function may also be called for non-collections (with addSelf=True).

        :Parameters:
            depthFirst : bool
                use <False>, to list containers before content.
                (e.g. when moving / copying branches.)
                Use <True>, to list content before containers.
                (e.g. when deleting branches.)
            depth : string
                '0' | '1' | 'infinity'
        """
        assert depth in ("0", "1", "infinity")
        res = []
        if addSelf and not depthFirst:
            res.append(self)
        if depth != "0" and self.isCollection:
            for child in self.getMemberList():
                if not child:
                    self.getMemberList()
                want = (collections and child.isCollection) or (
                    resources and not child.isCollection)
                if want and not depthFirst:
                    res.append(child)
                if child.isCollection and depth == "infinity":
                    res.extend(child.getDescendants(
                        collections, resources, depthFirst, depth, addSelf=False))
                if want and depthFirst:
                    res.append(child)
        if addSelf and depthFirst:
            res.append(self)
        return res

    # --- Properties ---------------------------------------------------------

    def getPropertyNames(self, isAllProp):
        """Return list of supported property names in Clark Notation.

        Note that 'allprop', despite its name, which remains for
        backward-compatibility, does not return every property, but only dead
        properties and the live properties defined in RFC4918.

        This default implementation returns a combination of:

        - Supported standard live properties in the {DAV:} namespace, if the
          related getter method returns not None.
        - {DAV:}lockdiscovery and {DAV:}supportedlock, if a lock manager is
          present
        - If a property manager is present, then a list of dead properties is
          appended

        A resource provider may override this method, to add a list of
        supported custom live property names.
        """
        # Live properties
        propNameList = []

        propNameList.append("{DAV:}resourcetype")

        if self.getCreationDate() is not None:
            propNameList.append("{DAV:}creationdate")
        if self.getContentLength() is not None:
            assert not self.isCollection
            propNameList.append("{DAV:}getcontentlength")
        if self.getContentType() is not None:
            propNameList.append("{DAV:}getcontenttype")
        if self.getLastModified() is not None:
            propNameList.append("{DAV:}getlastmodified")
        if self.getDisplayName() is not None:
            propNameList.append("{DAV:}displayname")
        if self.getEtag() is not None:
            propNameList.append("{DAV:}getetag")

        # Locking properties
        if self.provider.lockManager and not self.preventLocking():
            propNameList.extend(_lockPropertyNames)

        # Dead properties
        if self.provider.propManager:
            refUrl = self.getRefUrl()
            propNameList.extend(
                self.provider.propManager.getProperties(refUrl, self.environ))

        return propNameList

    def getProperties(self, mode, nameList=None):
        """Return properties as list of 2-tuples (name, value).

        If mode is 'propname', then None is returned for the value.

        name
            the property name in Clark notation.
        value
            may have different types, depending on the status:
            - string or unicode: for standard property values.
            - etree.Element: for complex values.
            - DAVError in case of errors.
            - None: if mode == 'propname'.

        @param mode: "allprop", "propname", or "named"
        @param nameList: list of property names in Clark Notation (required for mode 'named')

        This default implementation basically calls self.getPropertyNames() to
        get the list of names, then call self.getPropertyValue on each of them.
        """
        assert mode in ("allprop", "propname", "named")

        if mode in ("allprop", "propname"):
            # TODO: 'allprop' could have nameList, when <include> option is
            # implemented
            assert nameList is None
            nameList = self.getPropertyNames(mode == "allprop")
        else:
            assert nameList is not None

        propList = []
        namesOnly = (mode == "propname")
        for name in nameList:
            try:
                if namesOnly:
                    propList.append((name, None))
                else:
                    value = self.getPropertyValue(name)
                    propList.append((name, value))
            except DAVError as e:
                propList.append((name, e))
            except Exception as e:
                propList.append((name, asDAVError(e)))
                if self.provider.verbose >= 2:
                    traceback.print_exc(10, sys.stdout)

        return propList

    def getPropertyValue(self, propname):
        """Return the value of a property.

        propname:
            the property name in Clark notation.
        return value:
            may have different types, depending on the status:

            - string or unicode: for standard property values.
            - lxml.etree.Element: for complex values.

            If the property is not available, a DAVError is raised.

        This default implementation handles ``{DAV:}lockdiscovery`` and
        ``{DAV:}supportedlock`` using the associated lock manager.

        All other *live* properties (i.e. propname starts with ``{DAV:}``) are
        delegated to the self.xxx() getters.

        Finally, other properties are considered *dead*, and are handled  by
        the associated property manager.
        """
        refUrl = self.getRefUrl()

        # lock properties
        lm = self.provider.lockManager
        if lm and propname == "{DAV:}lockdiscovery":
            # TODO: we return HTTP_NOT_FOUND if no lockmanager is present.
            # Correct?
            activelocklist = lm.getUrlLockList(refUrl)
            lockdiscoveryEL = etree.Element(propname)
            for lock in activelocklist:
                activelockEL = etree.SubElement(
                    lockdiscoveryEL, "{DAV:}activelock")

                locktypeEL = etree.SubElement(activelockEL, "{DAV:}locktype")
                # Note: make sure `{DAV:}` is not handled as format tag:
                etree.SubElement(locktypeEL, "{}{}" .format("{DAV:}", lock["type"]))

                lockscopeEL = etree.SubElement(activelockEL, "{DAV:}lockscope")
                # Note: make sure `{DAV:}` is not handled as format tag:
                etree.SubElement(lockscopeEL, "{}{}".format("{DAV:}", lock["scope"]))

                etree.SubElement(activelockEL, "{DAV:}depth").text = lock[
                    "depth"]
                if lock["owner"]:
                    # lock["owner"] is an XML string
                    # owner may be empty (#64)
                    ownerEL = xml_tools.stringToXML(lock["owner"])
                    activelockEL.append(ownerEL)

                timeout = lock["timeout"]
                if timeout < 0:
                    timeout = "Infinite"
                else:
                    # The time remaining on the lock
                    expire = lock["expire"]
                    timeout = "Second-" + str(int(expire - time.time()))
                etree.SubElement(activelockEL, "{DAV:}timeout").text = timeout

                locktokenEL = etree.SubElement(activelockEL, "{DAV:}locktoken")
                etree.SubElement(locktokenEL, "{DAV:}href").text = lock["token"]

                # TODO: this is ugly:
                #       res.getPropertyValue("{DAV:}lockdiscovery")
                #
#                lockRoot = self.getHref(self.provider.refUrlToPath(lock["root"]))
                lockPath = self.provider.refUrlToPath(lock["root"])
                lockRes = self.provider.getResourceInst(lockPath, self.environ)
                # FIXME: test for None
                lockHref = lockRes.getHref()

                lockrootEL = etree.SubElement(activelockEL, "{DAV:}lockroot")
                etree.SubElement(lockrootEL, "{DAV:}href").text = lockHref

            return lockdiscoveryEL

        elif lm and propname == "{DAV:}supportedlock":
            # TODO: we return HTTP_NOT_FOUND if no lockmanager is present. Correct?
            # TODO: the lockmanager should decide about it's features
            supportedlockEL = etree.Element(propname)

            lockentryEL = etree.SubElement(supportedlockEL, "{DAV:}lockentry")
            lockscopeEL = etree.SubElement(lockentryEL, "{DAV:}lockscope")
            etree.SubElement(lockscopeEL, "{DAV:}exclusive")
            locktypeEL = etree.SubElement(lockentryEL, "{DAV:}locktype")
            etree.SubElement(locktypeEL, "{DAV:}write")

            lockentryEL = etree.SubElement(supportedlockEL, "{DAV:}lockentry")
            lockscopeEL = etree.SubElement(lockentryEL, "{DAV:}lockscope")
            etree.SubElement(lockscopeEL, "{DAV:}shared")
            locktypeEL = etree.SubElement(lockentryEL, "{DAV:}locktype")
            etree.SubElement(locktypeEL, "{DAV:}write")

            return supportedlockEL

        elif propname.startswith("{DAV:}"):
            # Standard live property (raises HTTP_NOT_FOUND if not supported)
            if propname == "{DAV:}creationdate" and self.getCreationDate() is not None:
                # Note: uses RFC3339 format (ISO 8601)
                return util.getRfc3339Time(self.getCreationDate())
            elif propname == "{DAV:}getcontenttype" and self.getContentType() is not None:
                return self.getContentType()
            elif propname == "{DAV:}resourcetype":
                if self.isCollection:
                    resourcetypeEL = etree.Element(propname)
                    etree.SubElement(resourcetypeEL, "{DAV:}collection")
                    return resourcetypeEL
                return ""
            elif propname == "{DAV:}getlastmodified" and self.getLastModified() is not None:
                # Note: uses RFC1123 format
                return util.getRfc1123Time(self.getLastModified())
            elif propname == "{DAV:}getcontentlength" and self.getContentLength() is not None:
                # Note: must be a numeric string
                return str(self.getContentLength())
            elif propname == "{DAV:}getetag" and self.getEtag() is not None:
                return self.getEtag()
            elif propname == "{DAV:}displayname" and self.getDisplayName() is not None:
                return self.getDisplayName()

            # Unsupported, no persistence available, or property not found
            raise DAVError(HTTP_NOT_FOUND)

        # Dead property
        pm = self.provider.propManager
        if pm:
            value = pm.getProperty(refUrl, propname, self.environ)
            if value is not None:
                return xml_tools.stringToXML(value)

        # No persistence available, or property not found
        raise DAVError(HTTP_NOT_FOUND)

    def setPropertyValue(self, propname, value, dryRun=False):
        """Set a property value or remove a property.

        value == None means 'remove property'.
        Raise HTTP_FORBIDDEN if property is read-only, or not supported.

        When dryRun is True, this function should raise errors, as in a real
        run, but MUST NOT change any data.

        This default implementation

        - raises HTTP_FORBIDDEN, if trying to modify a locking property
        - raises HTTP_FORBIDDEN, if trying to modify an immutable {DAV:}
          property
        - stores everything else as dead property, if a property manager is
          present.
        - raises HTTP_FORBIDDEN, else

        Removing a non-existing prop is NOT an error.

        Note: RFC 4918 states that {DAV:}displayname 'SHOULD NOT be protected'

        A resource provider may override this method, to update supported custom
        live properties.
        """
        assert value is None or xml_tools.isEtreeElement(value)

        if propname in _lockPropertyNames:
            # Locking properties are always read-only
            raise DAVError(HTTP_FORBIDDEN,
                           errcondition=PRECONDITION_CODE_ProtectedProperty)

        # Live property
        _config = self.environ["wsgidav.config"]
        mutableLiveProps = _config.get("mutable_live_props", [])
        # Accept custom live property updates on resources if configured.
        if propname.startswith("{DAV:}") and \
                propname in _standardLivePropNames and \
                propname in mutableLiveProps:
            # Please note that some properties should not be mutable according
            # to RFC4918. This includes the 'getlastmodified' property, which
            # it may still make sense to make mutable in order to support time
            # stamp changes from e.g. utime calls or the touch or rsync -a
            # commands.
            if propname in ("{DAV:}getlastmodified", "{DAV:}lastmodified") \
                    and hasattr(self, "setLastModified"):
                return self.setLastModified(self.path, value.text, dryRun)

            # Unsupported or not allowed
            raise DAVError(HTTP_FORBIDDEN)

        # Dead property
        pm = self.provider.propManager
        if pm and not propname.startswith("{DAV:}"):
            refUrl = self.getRefUrl()
            if value is None:
                return pm.removeProperty(refUrl, propname, dryRun, self.environ)
            else:
                value = etree.tostring(value)
                return pm.writeProperty(refUrl, propname, value, dryRun, self.environ)

        raise DAVError(HTTP_FORBIDDEN)

    def removeAllProperties(self, recursive):
        """Remove all associated dead properties."""
        if self.provider.propManager:
            self.provider.propManager.removeProperties(self.getRefUrl(), self.environ)

    # --- Locking ------------------------------------------------------------

    def preventLocking(self):
        """Return True, to prevent locking.

        This default implementation returns ``False``, so standard processing
        takes place: locking (and refreshing of locks) is implemented using
        the lock manager, if one is configured.
        """
        return False

    def isLocked(self):
        """Return True, if URI is locked."""
        if self.provider.lockManager is None:
            return False
        return self.provider.lockManager.isUrlLocked(self.getRefUrl())

    def removeAllLocks(self, recursive):
        if self.provider.lockManager:
            self.provider.lockManager.removeAllLocksFromUrl(self.getRefUrl())

    # --- Read / write -------------------------------------------------------

    def createEmptyResource(self, name):
        """Create and return an empty (length-0) resource as member of self.

        Called for LOCK requests on unmapped URLs.

        Preconditions (to be ensured by caller):

          - this must be a collection
          - <self.path + name> must not exist
          - there must be no conflicting locks

        Returns a DAVResuource.

        This method MUST be implemented by all providers that support write
        access.
        This default implementation simply raises HTTP_FORBIDDEN.
        """
        assert self.isCollection
        raise DAVError(HTTP_FORBIDDEN)

    def createCollection(self, name):
        """Create a new collection as member of self.

        Preconditions (to be ensured by caller):

          - this must be a collection
          - <self.path + name> must not exist
          - there must be no conflicting locks

        This method MUST be implemented by all providers that support write
        access.
        This default implementation raises HTTP_FORBIDDEN.
        """
        assert self.isCollection
        raise DAVError(HTTP_FORBIDDEN)

    def getContent(self):
        """Open content as a stream for reading.

        Returns a file-like object / stream containing the contents of the
        resource specified.
        The calling application will close() the stream.

        This method MUST be implemented by all providers.
        """
        assert not self.isCollection
        raise NotImplementedError

    def beginWrite(self, contentType=None):
        """Open content as a stream for writing.

        This method MUST be implemented by all providers that support write
        access.
        """
        assert not self.isCollection
        raise DAVError(HTTP_FORBIDDEN)

    def endWrite(self, withErrors):
        """Called when PUT has finished writing.

        This is only a notification. that MAY be handled.
        """
        pass

    def handleDelete(self):
        """Handle a DELETE request natively.

        This method is called by the DELETE handler after checking for valid
        request syntax and making sure that there are no conflicting locks and
        If-headers.
        Depending on the return value, this provider can control further
        processing:

        False:
            handleDelete() did not do anything. WsgiDAV will process the request
            by calling delete() for every resource, bottom-up.
        True:
            handleDelete() has successfully performed the DELETE request.
            HTTP_NO_CONTENT will be reported to the DAV client.
        List of errors:
            handleDelete() tried to perform the delete request, but failed
            completely or partially. A list of errors is returned like
            ``[ (<ref-url>, <DAVError>), ... ]``
            These errors will be reported to the client.
        DAVError raised:
            handleDelete() refuses to perform the delete request. The DAVError
            will be reported to the client.

        An implementation may choose to apply other semantics and return True.
        For example deleting '/by_tag/cool/myres' may simply remove the 'cool'
        tag from 'my_res'.
        In this case, the resource might still be available by other URLs, so
        locks and properties are not removed.

        This default implementation returns ``False``, so standard processing
        takes place.

        Implementation of this method is OPTIONAL.
        """
        return False

    def supportRecursiveDelete(self):
        """Return True, if delete() may be called on non-empty collections
        (see comments there).

        This method MUST be implemented for collections (not called on
        non-collections).
        """
        assert self.isCollection
        raise NotImplementedError

    def delete(self):
        """Remove this resource (recursive).

        Preconditions (ensured by caller):

          - there are no conflicting locks or If-headers
          - if supportRecursiveDelete() is False, and this is a collection,
            all members have already been deleted.

        When supportRecursiveDelete is True, this method must be prepared to
        handle recursive deletes. This implies that child errors must be
        reported as tuple list [ (<ref-url>, <DAVError>), ... ].
        See http://www.webdav.org/specs/rfc4918.html#delete-collections

        This function

          - removes this resource
          - if this is a non-empty collection, also removes all members.
            Note that this may only occur, if supportRecursiveDelete is True.
          - For recursive deletes, return a list of error tuples for all failed
            resource paths.
          - removes associated direct locks
          - removes associated dead properties
          - raises HTTP_FORBIDDEN for read-only resources
          - raises HTTP_INTERNAL_ERROR on error

        This method MUST be implemented by all providers that support write
        access.
        """
        raise NotImplementedError

    def handleCopy(self, destPath, depthInfinity):
        """Handle a COPY request natively.

        This method is called by the COPY handler after checking for valid
        request syntax and making sure that there are no conflicting locks and
        If-headers.
        Depending on the return value, this provider can control further
        processing:

        False:
            handleCopy() did not do anything. WsgiDAV will process the request
            by calling copyMoveSingle() for every resource, bottom-up.
        True:
            handleCopy() has successfully performed the COPY request.
            HTTP_NO_CONTENT/HTTP_CREATED will be reported to the DAV client.
        List of errors:
            handleCopy() tried to perform the copy request, but failed
            completely or partially. A list of errors is returned like
            ``[ (<ref-url>, <DAVError>), ... ]``
            These errors will be reported to the client.
        DAVError raised:
            handleCopy() refuses to perform the copy request. The DAVError
            will be reported to the client.

        An implementation may choose to apply other semantics and return True.
        For example copying '/by_tag/cool/myres' to '/by_tag/hot/myres' may
        simply add a 'hot' tag.
        In this case, the resource might still be available by other URLs, so
        locks and properties are not removed.

        This default implementation returns ``False``, so standard processing
        takes place.

        Implementation of this method is OPTIONAL.
        """
        return False

    def copyMoveSingle(self, destPath, isMove):
        """Copy or move this resource to destPath (non-recursive).

        Preconditions (ensured by caller):

          - there must not be any conflicting locks on destination
          - overwriting is only allowed (i.e. destPath exists), when source and
            dest are of the same type ((non-)collections) and a Overwrite='T'
            was passed
          - destPath must not be a child path of this resource

        This function

          - Overwrites non-collections content, if destination exists.
          - MUST NOT copy collection members.
          - MUST NOT copy locks.
          - SHOULD copy live properties, when appropriate.
            E.g. displayname should be copied, but creationdate should be
            reset if the target did not exist before.
            See http://www.webdav.org/specs/rfc4918.html#dav.properties
          - SHOULD copy dead properties.
          - raises HTTP_FORBIDDEN for read-only providers
          - raises HTTP_INTERNAL_ERROR on error

        When isMove is True,

          - Live properties should be moved too (e.g. creationdate)
          - Non-collections must be moved, not copied
          - For collections, this function behaves like in copy-mode:
            detination collection must be created and properties are copied.
            Members are NOT created.
            The source collection MUST NOT be removed.

        This method MUST be implemented by all providers that support write
        access.
        """
        raise NotImplementedError

    def handleMove(self, destPath):
        """Handle a MOVE request natively.

        This method is called by the MOVE handler after checking for valid
        request syntax and making sure that there are no conflicting locks and
        If-headers.
        Depending on the return value, this provider can control further
        processing:

        False:
            handleMove() did not do anything. WsgiDAV will process the request
            by calling delete() and copyMoveSingle() for every resource,
            bottom-up.
        True:
            handleMove() has successfully performed the MOVE request.
            HTTP_NO_CONTENT/HTTP_CREATED will be reported to the DAV client.
        List of errors:
            handleMove() tried to perform the move request, but failed
            completely or partially. A list of errors is returned like
            ``[ (<ref-url>, <DAVError>), ... ]``
            These errors will be reported to the client.
        DAVError raised:
            handleMove() refuses to perform the move request. The DAVError
            will be reported to the client.

        An implementation may choose to apply other semantics and return True.
        For example moving '/by_tag/cool/myres' to '/by_tag/hot/myres' may
        simply remove the 'cool' tag from 'my_res' and add a 'hot' tag instead.
        In this case, the resource might still be available by other URLs, so
        locks and properties are not removed.

        This default implementation returns ``False``, so standard processing
        takes place.

        Implementation of this method is OPTIONAL.
        """
        return False

    def supportRecursiveMove(self, destPath):
        """Return True, if moveRecursive() is available (see comments there)."""
        assert self.isCollection
        raise NotImplementedError

    def moveRecursive(self, destPath):
        """Move this resource and members to destPath.

        This method is only called, when supportRecursiveMove() returns True.

        MOVE is frequently used by clients to rename a file without changing its
        parent collection, so it's not appropriate to reset all live properties
        that are set at resource creation. For example, the DAV:creationdate
        property value SHOULD remain the same after a MOVE.

        Preconditions (ensured by caller):

          - there must not be any conflicting locks or If-header on source
          - there must not be any conflicting locks or If-header on destination
          - destPath must not exist
          - destPath must not be a member of this resource

        This method must be prepared to handle recursive moves. This implies
        that child errors must be reported as tuple list
        [ (<ref-url>, <DAVError>), ... ].
        See http://www.webdav.org/specs/rfc4918.html#move-collections

        This function

          - moves this resource and all members to destPath.
          - MUST NOT move associated locks.
            Instead, if the source (or children thereof) have locks, then
            these locks should be removed.
          - SHOULD maintain associated live properties, when applicable
            See http://www.webdav.org/specs/rfc4918.html#dav.properties
          - MUST maintain associated dead properties
          - raises HTTP_FORBIDDEN for read-only resources
          - raises HTTP_INTERNAL_ERROR on error

        An implementation may choose to apply other semantics.
        For example copying '/by_tag/cool/myres' to '/by_tag/new/myres' may
        simply add a 'new' tag to 'my_res'.

        This method is only called, when self.supportRecursiveMove() returns
        True. Otherwise, the request server implements MOVE using delete/copy.

        This method MAY be implemented in order to improve performance.
        """
        raise DAVError(HTTP_FORBIDDEN)

    def resolve(self, scriptName, pathInfo):
        """Return a _DAVResource object for the path (None, if not found).

        `pathInfo`: is a URL relative to this object.

        DAVCollection.resolve() provides an implementation.
        """
        raise NotImplementedError

    def finalizeHeaders(self, environ, responseHeaders):
        """Perform custom operations on the response headers.

        This gets called before the response is started.
        It enables adding additional headers or modifying the default ones.
        """
        pass


# ========================================================================
# DAVNonCollection
# ========================================================================
[docs]class DAVNonCollection(_DAVResource): """ A DAVNonCollection is a _DAVResource, that has content (like a 'file' on a filesystem). A DAVNonCollecion is able to read and write file content. See also _DAVResource """ def __init__(self, path, environ): _DAVResource.__init__(self, path, False, environ)
[docs] def getContentLength(self): """Returns the byte length of the content. MUST be implemented. See also _DAVResource.getContentLength() """ raise NotImplementedError
[docs] def getContentType(self): """Contains the Content-Type header returned by a GET without accept headers. This getcontenttype property MUST be defined on any DAV compliant resource that returns the Content-Type header in response to a GET. See http://www.webdav.org/specs/rfc4918.html#PROPERTY_getcontenttype """ raise NotImplementedError
[docs] def getContent(self): """Open content as a stream for reading. Returns a file-like object / stream containing the contents of the resource specified. The application will close() the stream. This method MUST be implemented by all providers. """ raise NotImplementedError
[docs] def supportRanges(self): """Return True, if this non-resource supports Range on GET requests. This default implementation returns False. """ return False
[docs] def beginWrite(self, contentType=None): """Open content as a stream for writing. This method MUST be implemented by all providers that support write access. """ raise DAVError(HTTP_FORBIDDEN)
[docs] def endWrite(self, withErrors): """Called when PUT has finished writing. This is only a notification that MAY be handled. """ pass
[docs] def resolve(self, scriptName, pathInfo): """Return a _DAVResource object for the path (None, if not found). Since non-collection don't have members, we return None if path is not empty. """ if pathInfo in ("", "/"): return self return None
# ======================================================================== # DAVCollection # ========================================================================
[docs]class DAVCollection(_DAVResource): """ A DAVCollection is a _DAVResource, that has members (like a 'folder' on a filesystem). A DAVCollecion 'knows' its members, and how to obtain them from the backend storage. There is also optional built-in support for member caching. See also _DAVResource """ def __init__(self, path, environ): _DAVResource.__init__(self, path, True, environ) # Allow caching of members # self.memberCache = {"enabled": False, # "expire": 10, # Purge, if not used for n seconds # "maxAge": 60, # Force purge, if older than n seconds # "created": None, # "lastUsed": None, # "members": None, # } # def _cacheSet(self, members): # if self.memberCache["enabled"]: # if not members: # # We cannot cache None, because _cacheGet() == None means 'not in cache' # members = [] # self.memberCache["created"] = self.memberCache["lastUsed"] = datetime.now() # self.memberCache["members"] = members # # def _cacheGet(self): # if not self.memberCache["enabled"]: # return None # now = datetime.now() # if (now - self.memberCache["lastUsed"]) > self.memberCache["expire"]: # return None # elif (now - self.memberCache["created"]) > self.memberCache["maxAge"]: # return None # self.memberCache["lastUsed"] = datetime.now() # return self.memberCache["members"] # # def _cachePurge(self): # self.memberCache["created"] = self.memberCache["lastUsed"] = None # self.memberCache["members"] = None # def getContentLanguage(self): # return None
[docs] def getContentLength(self): return None
[docs] def getContentType(self): return None
[docs] def createEmptyResource(self, name): """Create and return an empty (length-0) resource as member of self. Called for LOCK requests on unmapped URLs. Preconditions (to be ensured by caller): - this must be a collection - <self.path + name> must not exist - there must be no conflicting locks Returns a DAVResuource. This method MUST be implemented by all providers that support write access. This default implementation simply raises HTTP_FORBIDDEN. """ raise DAVError(HTTP_FORBIDDEN)
[docs] def createCollection(self, name): """Create a new collection as member of self. Preconditions (to be ensured by caller): - this must be a collection - <self.path + name> must not exist - there must be no conflicting locks This method MUST be implemented by all providers that support write access. This default implementation raises HTTP_FORBIDDEN. """ assert self.isCollection raise DAVError(HTTP_FORBIDDEN)
[docs] def getMember(self, name): """Return child resource with a given name (None, if not found). This method COULD be overridden by a derived class, for performance reasons. This default implementation calls self.provider.getResourceInst(). """ assert self.isCollection return self.provider.getResourceInst(util.joinUri(self.path, name), self.environ)
[docs] def getMemberNames(self): """Return list of (direct) collection member names (UTF-8 byte strings). This method MUST be implemented. """ assert self.isCollection raise NotImplementedError
[docs] def supportRecursiveDelete(self): """Return True, if delete() may be called on non-empty collections (see comments there). This default implementation returns False. """ return False
[docs] def delete(self): """Remove this resource (possibly recursive). This method MUST be implemented if resource allows write access. See _DAVResource.delete() """ raise DAVError(HTTP_FORBIDDEN)
[docs] def copyMoveSingle(self, destPath, isMove): """Copy or move this resource to destPath (non-recursive). This method MUST be implemented if resource allows write access. See _DAVResource.copyMoveSingle() """ raise DAVError(HTTP_FORBIDDEN)
[docs] def supportRecursiveMove(self, destPath): """Return True, if moveRecursive() is available (see comments there).""" return False
[docs] def moveRecursive(self, destPath): """Move this resource and members to destPath. This method MAY be implemented in order to improve performance. """ raise DAVError(HTTP_FORBIDDEN)
[docs] def resolve(self, scriptName, pathInfo): """Return a _DAVResource object for the path (None, if not found). `pathInfo`: is a URL relative to this object. """ if pathInfo in ("", "/"): return self assert pathInfo.startswith("/") name, rest = util.popPath(pathInfo) res = self.getMember(name) if res is None or rest in ("", "/"): return res return res.resolve(util.joinUri(scriptName, name), rest)
# ======================================================================== # DAVProvider # ========================================================================
[docs]class DAVProvider(object): """Abstract base class for DAV resource providers. There will be only one DAVProvider instance per share (not per request). """ def __init__(self): self.mountPath = "" self.sharePath = None self.lockManager = None self.propManager = None self.verbose = 2 self._count_getResourceInst = 0 self._count_getResourceInstInit = 0 # self.caseSensitiveUrls = True def __repr__(self): return self.__class__.__name__
[docs] def isReadOnly(self): return False
[docs] def setMountPath(self, mountPath): """Set application root for this resource provider. This is the value of SCRIPT_NAME, when WsgiDAVApp is called. """ assert mountPath in ("", "/") or not mountPath.endswith("/") self.mountPath = mountPath
[docs] def setSharePath(self, sharePath): """Set application location for this resource provider. @param sharePath: a UTF-8 encoded, unquoted byte string. """ # if isinstance(sharePath, unicode): # sharePath = sharePath.encode("utf8") assert sharePath == "" or sharePath.startswith("/") if sharePath == "/": sharePath = "" # This allows to code 'absPath = sharePath + path' assert sharePath in ("", "/") or not sharePath.endswith("/") self.sharePath = sharePath
[docs] def setLockManager(self, lockManager): assert not lockManager or hasattr(lockManager, "checkWritePermission"), \ "Must be compatible with wsgidav.lock_manager.LockManager" self.lockManager = lockManager
[docs] def setPropManager(self, propManager): assert not propManager or hasattr(propManager, "copyProperties"), \ "Must be compatible with wsgidav.property_manager.PropertyManager" self.propManager = propManager
[docs] def refUrlToPath(self, refUrl): """Convert a refUrl to a path, by stripping the share prefix. Used to calculate the <path> from a storage key by inverting getRefUrl(). """ return "/" + compat.unquote(util.lstripstr(refUrl, self.sharePath)).lstrip("/")
[docs] def getResourceInst(self, path, environ): """Return a _DAVResource object for path. Should be called only once per request and resource:: res = provider.getResourceInst(path, environ) if res and not res.isCollection: print(res.getContentType()) If <path> does not exist, None is returned. <environ> may be used by the provider to implement per-request caching. See _DAVResource for details. This method MUST be implemented. """ raise NotImplementedError
[docs] def exists(self, path, environ): """Return True, if path maps to an existing resource. This method should only be used, if no other information is queried for <path>. Otherwise a _DAVResource should be created first. This method SHOULD be overridden by a more efficient implementation. """ return self.getResourceInst(path, environ) is not None
[docs] def isCollection(self, path, environ): """Return True, if path maps to an existing collection resource. This method should only be used, if no other information is queried for <path>. Otherwise a _DAVResource should be created first. """ res = self.getResourceInst(path, environ) return res and res.isCollection
[docs] def customRequestHandler(self, environ, start_response, defaultHandler): """Optionally implement custom request handling. requestmethod = environ["REQUEST_METHOD"] Either - handle the request completely - do additional processing and call defaultHandler(environ, start_response) """ return defaultHandler(environ, start_response)