Coverage for keystone.policy.core : 100%

# vim: tabstop=4 shiftwidth=4 softtabstop=4 

# Copyright 2012 OpenStack LLC 

# 

# Licensed under the Apache License, Version 2.0 (the "License"); you may 

# not use this file except in compliance with the License. You may obtain 

# a copy of the License at 

# 

#      http://www.apache.org/licenses/LICENSE-2.0 

# 

# Unless required by applicable law or agreed to in writing, software 

# distributed under the License is distributed on an "AS IS" BASIS, WITHOUT 

# WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the 

# License for the specific language governing permissions and limitations 

# under the License. 

"""Main entry point into the Policy service.""" 

from keystone.common import dependency 

from keystone.common import manager 

from keystone import config 

from keystone import exception 

CONF = config.CONF 

@dependency.provider('policy_api') 

class Manager(manager.Manager): 

    """Default pivot point for the Policy backend. 

    See :mod:`keystone.common.manager.Manager` for more details on how this 

    dynamically calls the backend. 

    """ 

    def __init__(self): 

        super(Manager, self).__init__(CONF.policy.driver) 

    def get_policy(self, context, policy_id): 

        try: 

            return self.driver.get_policy(policy_id) 

        except exception.NotFound: 

            raise exception.PolicyNotFound(policy_id=policy_id) 

    def update_policy(self, context, policy_id, policy): 

        if 'id' in policy and policy_id != policy['id']: 

            raise exception.ValidationError('Cannot change policy ID') 

        try: 

            return self.driver.update_policy(policy_id, policy) 

        except exception.NotFound: 

            raise exception.PolicyNotFound(policy_id=policy_id) 

    def delete_policy(self, context, policy_id): 

        try: 

            return self.driver.delete_policy(policy_id) 

        except exception.NotFound: 

            raise exception.PolicyNotFound(policy_id=policy_id) 

class Driver(object): 

    def enforce(self, context, credentials, action, target): 

        """Verify that a user is authorized to perform action. 

        For more information on a full implementation of this see: 

        `keystone.common.policy.enforce`. 

        """ 

        raise exception.NotImplemented() 

    def create_policy(self, policy_id, policy): 

        """Store a policy blob. 

        :raises: keystone.exception.Conflict 

        """ 

        raise exception.NotImplemented() 

    def list_policies(self): 

        """List all policies.""" 

        raise exception.NotImplemented() 

    def get_policy(self, policy_id): 

        """Retrieve a specific policy blob. 

        :raises: keystone.exception.PolicyNotFound 

        """ 

        raise exception.NotImplemented() 

    def update_policy(self, policy_id, policy): 

        """Update a policy blob. 

        :raises: keystone.exception.PolicyNotFound 

        """ 

        raise exception.NotImplemented() 

    def delete_policy(self, policy_id): 

        """Remove a policy blob. 

        :raises: keystone.exception.PolicyNotFound 

        """ 

        raise exception.NotImplemented()