Warning

This document is for an in-development version of Galaxy. You can alternatively view this page in the latest release if it exists or view the top of the latest release's documentation.

tool_shed.webapp.security package

Tool Shed Security

class tool_shed.webapp.security.Action(action, description, model)

Bases: object

__init__(action, description, model)

class tool_shed.webapp.security.RBACAgent

Bases: object

Handle Galaxy Tool Shed security

permitted_actions = <galaxy.util.bunch.Bunch object>

associate_components(**kwd)

associate_user_role(user, role)

convert_permitted_action_strings(permitted_action_strings)

When getting permitted actions from an untrusted source like a form, ensure that they match our actual permitted actions.

create_user_role(user, app)

create_private_user_role(user)

get_action(name, default=None)

Get a permitted action by its dict key or action name

get_actions()

Get all permitted actions as a list of Action objects

get_item_actions(action, item)

get_private_user_role(user)

class tool_shed.webapp.security.CommunityRBACAgent(model, permitted_actions=None)

Bases: RBACAgent

__init__(model, permitted_actions=None)

property sa_session

Returns a SQLAlchemy scoped session

allow_action(roles, action, item)

Method for checking a permission for the current user ( based on roles ) to perform a specific action on an item

associate_components(**kwd)

associate_group_role(group, role)

associate_user_group(user, group)

associate_user_role(user, role)

associate_repository_category(repository, category)

create_private_user_role(user)

create_user_role(user, app)

get_item_actions(action, item)

get_private_user_role(user, auto_create=False)

set_entity_group_associations(groups=None, users=None, roles=None, delete_existing_assocs=True)

set_entity_role_associations(roles=None, users=None, groups=None, repositories=None, delete_existing_assocs=True)

set_entity_user_associations(users=None, roles=None, groups=None, delete_existing_assocs=True)

usernames_that_can_push(repository) → List[str]

can_push(app, user, repository)

user_can_administer_repository(user, repository)

Return True if the received user can administer the received repository.

user_can_import_repository_archive(user, archive_owner)

tool_shed.webapp.security.get_permitted_actions(filter=None)

Utility method to return a subset of RBACAgent’s permitted actions

tool_shed.webapp.security.get_iuc_group(session)